1. Who we are

This website, hormay.co.nz, is operated by Hormay Limited, a New Zealand company based in Auckland (“Hormay”, “we”, “us”). We are responsible for the personal information we collect through this website.

If you have any questions about privacy, contact our Privacy Officer at orders@hormay.co.nz.

2. What information we collect

Information you give us

• Your name, email address, phone number, and delivery and billing addresses when you place an order or create an account
• Details of the products you buy and any notes you add to your order
• Your email address if you subscribe to our newsletter
• Anything you tell us when you contact us by email, WhatsApp or our website forms

Information collected automatically

• Basic technical information such as your browser, device type, IP address and the pages you visit
• How you arrived at our website (for example from a search engine or a social media link), which helps us understand which channels work

We do not collect or store your full card details. Payments are handled directly by our payment provider, Stripe (see section 4).

3. How we use your information

• To process, pack and deliver your orders, and to send order and shipping updates
• To provide customer service, handle returns and refunds, and respond to your questions
• To manage your account, if you create one
• To send you marketing emails, only if you have subscribed
• To prevent fraud and keep our website secure
• To understand how our website is used so we can improve it
• To meet our legal obligations, such as tax and accounting record-keeping

4. Who we share it with

We never sell or rent your personal information. We only share it with trusted service providers who help us run our business, and only as much as they need:

• NZ Post / CourierPost — to deliver your parcel (your name, address and phone number)
• Stripe — to process your payment securely
• Our website hosting and email providers — to run this website, send order emails and, if you subscribe, our newsletter
• Professional advisers and authorities — such as our accountant, or where we are required to by law

5. Overseas storage

Some of our service providers (for example Stripe and our hosting and email providers) may store or process information outside New Zealand. Where this happens, we take reasonable steps to ensure your information is protected in a way that is comparable to the New Zealand Privacy Act 2020.

6. Cookies

Cookies are small files stored on your device. We use:

• Essential cookies — to keep your cart, checkout and account working. The site can’t function properly without them.
• Order attribution cookies — to record how you found us (for example a search engine or social media link).

We do not currently use third-party advertising or tracking cookies. You can block or delete cookies in your browser settings, but some parts of the website, such as the cart, may stop working.

7. Marketing emails

We only send marketing emails if you have subscribed. Every email includes an unsubscribe link, and you can also ask us to remove you at any time by emailing orders@hormay.co.nz. Order and delivery emails are not marketing and will still be sent while you have an active order.

8. Security and how long we keep it

We use secure (SSL/HTTPS) connections, trusted payment and hosting providers, and limit access to your information to people who need it to fulfil your order.

We keep your information only for as long as we need it for the purposes above. Order and transaction records are kept for at least seven years to meet New Zealand tax requirements. Newsletter details are kept until you unsubscribe.

9. Your rights

Under the Privacy Act 2020, you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is wrong
• Ask us to delete information we no longer need to keep

To make a request, email orders@hormay.co.nz. We may need to confirm your identity and will respond within 20 working days.

If you’re not happy with how we’ve handled your information, please talk to us first. You can also contact the Office of the Privacy Commissioner.

10. Changes to this policy & contact

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.