Effective Date: 13 August 2019
Otago Viticulture and Oenology Limited (company number 1544974) trading as Brennan Wines (Brennan Wines, we, us, our) is committed to respecting the privacy and security of your Personal Information. There are various ways that you might interact with Brennan Wines, and the information that you share with Brennan Wines when doing so allows us to provide you with the best experience with our products and services.
LEGAL BASIS FOR PROCESSING
We have structured the Website so that, in general, you can visit the Website without identifying or revealing any Personal Information. Accordingly you do not have to provide Personal Information to access the Website, but if you do not supply certain information then you will not be able to access some of the facilities on the Website (such as ordering our products online). Furthermore, where you do not provide Personal Information which is required by us, we will not be able to provide the products or services under our contract with you or may not be able to comply with a legal obligation on us. For example, when purchasing wines from the Website we will require information such as your name, delivery address, billing address and payment information. If you fail to provide this information to us we will be unable to sell our wines to you.
COLLECTION OF YOUR PERSONAL INFORMATION
Information you provide to us
We collect and store Personal Information that you submit when using the Website or which you provide to us in some other manner. This may include information such as your name, addresses (residential, delivery or billing), email addresses, telephone numbers and/or payment account information as well as any additional information you provide to us through use of our Website and telephone number.
This information is collected in a number of ways including by filling in any of the online forms available on the Website. We also collect information when you choose to submit questions to us, subscribe to join our mail list, adjust your account settings, preferences and so on.
Where you provide us information about a third party, you must have the consent of that third party before providing us with that information. By providing us with information regarding a third party you warrant that you have their permission to provide that information to us.
Information collected automatically
To make the Website more useful to you, our servers (which may be hosted by a third party service provider) may collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the internet, which may vary from session to session), domain name, and/or a date/time stamp for your visit.
Furthermore, in order for you to access certain functionality of our Website, a cookie or cookies may need to be installed on your computer. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Most internet browsers give you the option to reject all cookies, accept all cookies, erase cookies stored on your computer or be notified before a cookie is stored on your computer. However, if you reject or erase the cookies referred to above some Website features or services will not function properly or may not be fully available. Please refer to your internet browser instructions if you want to find out more about rejecting or erasing cookies.
Use of your Personal Information
If you choose to provide us with Personal Information via this Website or otherwise, this information will only be used or disclosed for certain purposes which include the following (each a Permitted Purpose):
- to ensure our products and services are delivered to you and to provide offers, information and our services to you;
- to improve and enhance our services and the design and style of the Website;
- to monitor and/or keep records of our e-mail communications and other correspondence with you. If you send us correspondence that contains Personal Information, we may use that Personal Information to address the nature and purposes of the correspondence;
- to provide you with customer service, and to address any complaints you may have;
- to analyse the use of the Website to ensure that content from the Website is presented in the most effective manner for you and for your computer;
- if you opt-in to receive information about our products, services or promotional offers and/or newsletters from us, we may use such Personal Information to contact you by email and/or post with the information you have opted-in to receive;
- in order to prevent illegal activity that threatens our computer systems or networks
- in order to comply with any applicable laws and/or regulations; and
- to send you service messages about your orders, subscription or account registration, for example if you have clicked a password reset link. This could be by email, by an overlay on the Website or by a push notification.
How long will Brennan Wines keep your Personal Information?
Disclosure of your Personal Information
Third party service providers
We may share your Personal Information with certain service providers who provide services for us. The types of third parties we may share elements of your Personal Information with include:
- payment processors engaged by us to securely store or handle payments information, such as credit or debit card details, required for facilitating purchases of Brennan Wines products;
- providers of email management and distribution tools – for example, if you subscribe to join our mail list we will manage the delivery of these to you using a third party email distribution tool;
- logistics management and courier services – for example, when you order wines from the Website we provide your delivery details to third party postal / courier services providers;
- website hosting companies – the Website and our customer management software is hosted and maintained on servers operated by a third party services provider.
These service providers may be granted access to some or all of the Personal Information you provide or we collect, but shall be restricted from using the Personal Information you provide other than as is reasonably necessary to perform their services for us. So far as we are aware, all third parties to whom we disclose Personal Information are located within New Zealand. You may request more information about the safeguards that we have put in place in respect of transfers of Personal Information to jurisdictions outside of New Zealand by contacting our data privacy officer.
If our company is acquired or merged with another company, your Personal Information may be transferred to the new owners so that we may continue to sell products and services to you.
Your legal rights and choices in connection with your Personal Information
Under certain circumstances, by law you have certain rights in connection with your Personal Information, including rights to:
- Request access to your Personal Information – this enables you to receive a copy of your Personal Information and to check that we are lawfully processing it;
- Request correction of your Personal Information – this enables you to ask us to correct any incomplete or inaccurate information we hold about you; and
- Request erasure of your Personal Information – this enables you to ask us to delete or remove your Personal Information where there is no good reason for us to continue to process it or where you have exercised your right to object to processing.
If you wish to exercise any of the rights described above, please contact our Privacy Officer (details below).
Please note that, if you are located in New Zealand, there are some statutory exceptions (contained in Part 4 of the Privacy Act) where your request for access to your Personal Information may be denied, including where:
- Providing access may have an unreasonable impact on the privacy of other individuals;
- Providing access would be unlawful or would be likely to prejudice one or more enforcement related activities conducted by, or on behalf of, an enforcement body;
- We have reason to suspect that unlawful activity, or misconduct of a serious nature, relating to our functions or activities has been, is being or may be engaged in; and giving access would be likely to prejudice the taking of appropriate action in relation to the matter;
- We reasonably believe that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
- The request for access is frivolous or vexatious; or
- Where we are otherwise permitted by the Privacy Act to do so.
To request access and seek the correction of, personal information held by us, please contact our Privacy Officer (details below).
Our Privacy Officer may be contacted by email at email@example.com
If you would like any further information about our handling of personal information or to make a complaint about something you believe breaches the Privacy Act (or, as applicable, the GDPR), please lodge a written complaint addressed to our Privacy Officer using the email address above. Once we receive your complaint, we will respond to your complaint within a reasonable period of time, usually within 20 working days (or, for customers in the EEA, in any event in accordance with any applicable requirements of the GDPR).
If you are unsatisfied with the handling of your complaint, you may contact us further at firstname.lastname@example.org to advise us of your concerns and, if we are unable to reach a satisfactory resolution, you may wish to take your complaint to the Office of the Privacy Commissioner in New Zealand (or your local data protection authority, if you are located in the EEA) for a review of your complaint.
Please note that we may keep a record of your communications to help us resolve any issues which you raise.