Privacy Policy

Last updated:

1. About This Policy

This Privacy Policy explains how Gardenbright ("we", "us", "our") collects, uses, stores, and discloses personal information when you visit our website or contact us. We comply with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs).

This website privacy statement describes how this site handles personal information. It should be read together with our Cookie Policy and Terms of Use.

2. Who We Are

We are the agency responsible for personal information collected through this website:

Gardenbright
109 Main Street, Greytown 5712, New Zealand
Email: notifyuse@gardenbright.world
Phone: +64 21 539 528

3. Personal Information We Collect

We may collect the following categories of personal information:

• Contact details: name, email address, and message content submitted through our contact form
• Technical information: IP address, browser type, device type, operating system, referring pages, and pages visited
• Cookie and consent data: your cookie consent choices stored in your browser (localStorage)

We do not intentionally collect sensitive information (such as health records) through this website. Please do not include medical or health details in your contact message unless necessary, and only with your consent.

4. How We Collect Personal Information

We collect personal information:

• Directly from you when you submit our contact form, call us, or email us (IPP 2 and IPP 3)
• Automatically when you browse our website, including through cookies and similar technologies where you have consented to non-essential cookies (see our Cookie Policy)
• Indirectly from third-party analytics or advertising tools, only where you have given consent for those cookies

Where we collect personal information indirectly (not directly from you), we take reasonable steps to ensure you are aware of the collection, the purposes, and your rights, in accordance with IPP 3A of the Privacy Act 2020.

5. Purposes of Collection and Use

We collect and use personal information only for lawful purposes connected with our activities (IPP 1 and IPP 10), including to:

• Respond to your enquiries and communicate with you
• Operate, maintain, and improve our website
• Understand website usage through analytics, where you have consented
• Measure marketing effectiveness, where you have consented
• Comply with legal obligations and protect our legal rights

We will not use your personal information for purposes other than those for which it was collected, except as permitted under the Privacy Act 2020.

6. What We Tell You at Collection (IPP 3)

When we collect personal information directly from you, we ensure you are aware of:

• That information is being collected
• Our identity and contact details
• The purpose(s) for which the information will be used
• Who will receive the information (if anyone other than us)
• Whether providing the information is voluntary or mandatory, and what happens if you do not provide it
• Your right to access and request correction of your personal information

Our contact form includes a consent checkbox linking to this Privacy Policy before you submit your details.

7. Disclosure of Personal Information

We do not sell your personal information. We may disclose personal information (IPP 11):

• To trusted service providers who assist with website hosting, analytics, email delivery, or similar services, under contractual terms requiring appropriate handling of personal information
• Where required or authorised by New Zealand law
• To protect our rights, safety, or property, or that of others

8. Disclosure Outside New Zealand (IPP 12)

Some service providers we use may store or process personal information outside New Zealand (for example, cloud hosting or analytics providers). Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects the information with safeguards comparable to those required under the Privacy Act 2020, unless an exception under IPP 12 applies.

9. Storage and Security (IPP 5)

We implement reasonable technical and organisational safeguards to protect personal information from loss, unauthorised access, misuse, or disclosure. These measures include HTTPS encryption, access controls, and periodic review of our security practices.

No method of transmission or storage over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

10. Retention (IPP 9)

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law:

• Contact form submissions: up to 24 months, unless a longer period is required for legal or operational reasons
• Analytics data: up to 26 months, where consent has been given
• Cookie consent preferences: stored locally in your browser until you clear your data or change your preferences

When personal information is no longer needed, we take reasonable steps to securely delete or anonymise it.

11. Access and Correction (IPP 6 and IPP 7)

You have the right to request access to personal information we hold about you and to request correction of any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, contact us at notifyuse@gardenbright.world. We will respond within a reasonable timeframe and in accordance with the Privacy Act 2020. We may need to verify your identity before releasing information.

If we decline an access or correction request, we will explain our reasons and inform you of your options to make a complaint.

12. Privacy Breaches

We maintain procedures to identify and respond to privacy breaches. If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under the Privacy Act 2020.

13. Cookies and Similar Technologies

We use cookies and localStorage to operate our website and, with your consent, for analytics and marketing. For full details, see our Cookie Policy.

14. Complaints

If you have concerns about how we handle your personal information, please contact us first at notifyuse@gardenbright.world. We will investigate and respond to your complaint.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner:

• Website: www.privacy.org.nz
• Phone: 0800 803 909 (New Zealand)

15. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

16. Visitors from Outside New Zealand

If you access our website from outside New Zealand, your information may be processed in New Zealand and in other countries where our service providers operate. Local privacy laws may also apply to you. If you are in the European Economic Area, you may have additional rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.