Privacy policy

Introduction

BioHackNZ Limited (NZBN: 9429053594204, Company No: 9421430) ("BioHackNZ", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).

By using our website (biohacknz.com) and services, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information you provide directly:

  • Account information: Name, email address, shipping address, phone number
  • Order information: Products purchased, payment details (processed securely by Shopify Payments — we do not store full card numbers)
  • Communications: Emails, contact form submissions, survey responses
  • Email subscriptions: Email address and preferences when you subscribe to our newsletter

Information collected automatically:

  • Device information: Browser type, operating system, device type
  • Usage data: Pages visited, time on site, referring URL, click patterns
  • Location data: Country and general region (via IP address — not precise location)
  • Cookies and similar technologies: See Section 7 below

2. How We Use Your Information

We use your personal information to:

  • Process and fulfil orders — shipping, payment processing, order confirmation
  • Communicate with you — order updates, customer service responses, important notices
  • Send marketing communications — newsletters, product recommendations, and educational content (only with your consent — you can unsubscribe at any time)
  • Improve our website and services — analytics, user experience optimisation, content planning
  • Comply with legal obligations — tax records, consumer protection laws, fraud prevention
  • Personalise your experience — product recommendations based on browsing and purchase history

3. Legal Basis for Processing

Under the NZ Privacy Act 2020, we collect and process your information based on:

  • Contractual necessity: To fulfil orders and provide our services
  • Consent: For marketing emails and non-essential cookies
  • Legitimate interest: To improve our website and protect against fraud
  • Legal obligation: To comply with NZ tax and consumer protection laws

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Shopify: Our e-commerce platform provider (processes orders and payments)
  • Shipping providers: To deliver your orders (e.g., NZ Post, CourierPost)
  • Payment processors: Shopify Payments / Stripe for secure payment processing
  • Email marketing provider: To send newsletters you've subscribed to
  • Analytics providers: Google Analytics (anonymised usage data) to improve our website
  • Affiliate partners: When you click affiliate links, the partner site may collect its own data under its own privacy policy
  • Law enforcement: If required by law, court order, or to protect safety

5. Data Storage and Security

  • Your data is stored on Shopify's secure servers (primarily in Canada and the United States)
  • Shopify is PCI DSS Level 1 compliant for payment security
  • We use SSL/TLS encryption on all pages of our website
  • Access to personal data is restricted to authorised personnel only
  • We retain order data for 7 years as required by NZ tax law (Inland Revenue)
  • Marketing data is retained until you unsubscribe, at which point we delete it within 30 days

6. International Data Transfers

As we use Shopify (Canada/US-based) and other international service providers, your personal information may be transferred and stored outside New Zealand. Under the NZ Privacy Act 2020 (IPP 12), we ensure that any overseas recipients are subject to comparable privacy protections. Shopify's privacy practices comply with international standards including GDPR.

7. Cookies and Tracking

Our website uses cookies and similar technologies:

Essential cookies (always active):

  • Shopping cart functionality
  • Checkout and payment processing
  • Security and fraud prevention
  • Session management

Analytics cookies (with consent):

  • Google Analytics 4 — tracks anonymised usage data to help us improve the website

Marketing cookies (with consent):

  • Email marketing tracking — measures email campaign effectiveness
  • Affiliate link tracking — attributes sales to the correct partner

You can manage cookie preferences through your browser settings or our cookie consent banner.

8. Your Rights Under the NZ Privacy Act 2020

You have the right to:

  • Access your personal information — request a copy of the data we hold about you (IPP 6)
  • Request correction — ask us to correct any inaccurate information (IPP 7)
  • Withdraw consent — unsubscribe from marketing emails at any time
  • Request deletion — ask us to delete your personal information (subject to legal retention requirements)
  • Complain — lodge a complaint with the Office of the Privacy Commissioner (privacy.org.nz) if you believe we have breached your privacy

To exercise any of these rights, email us at hello@biohacknz.com with the subject line "Privacy Request". We will respond within 20 working days as required by the Privacy Act.

9. Third-Party Links and Affiliate Disclosure

Our website contains links to third-party websites (including affiliate partner sites). When you click these links, you leave our website and are subject to the third party's own privacy policy. We are not responsible for the privacy practices of external websites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our website and products are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information:

  • Email: hello@biohacknz.com
  • Subject line: "Privacy Inquiry"
  • Response time: Within 5 business days (formal requests within 20 working days)

Privacy Commissioner:
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz or call 0800 803 909.

This policy is governed by the laws of New Zealand, including the Privacy Act 2020.

Last updated: 14 April 2026