Great Little Vineyards respects the privacy of every customer, visitor and subscriber. This policy explains what personal information Great Little Vineyards collects, why it is collected, how it is used and protected, who it is shared with, and the rights every person has under the New Zealand Privacy Act 2020.
At a glance
1Who Great Little Vineyards is
| Legal entity | Kemp Wine Merchants Ltd, trading as Great Little Vineyards (“Great Little Vineyards”, “GLV”) |
| Address | Tenancy 7, Orakei Bay Village, 228 Orakei Road, Remuera, Auckland 1050, New Zealand |
| Off-licence | 007/OFF/275/2026 |
| This policy covers | Personal information collected through greatlittlevineyards.com, in the shop, by phone, by email, and through Great Little Vineyards’ social media pages |
2Personal information Great Little Vineyards collects
Information provided directly
| When | What is collected |
|---|---|
| Placing an order | Name, email address, phone number, billing and delivery addresses, order details, delivery instructions, and confirmation of being 18 or over |
| Creating an account | Name, email address, password (stored in encrypted form), saved addresses and order history |
| Contacting Great Little Vineyards | Name, phone number, email address and the content of the enquiry |
| Subscribing to the newsletter | Email address, name if given, and the date and method of sign-up |
| Buying a gift card | The purchaser’s details, plus the recipient’s name, email address and any personal message |
| Writing a product review | Name or display name, rating, review text and any images uploaded |
| Shopping in store | Order and contact details where a delivery, special order or account is arranged. Proof of age may be sighted as required by law. Card payments in store are processed by the EFTPOS provider. |
Information collected automatically on the website
| Category | Examples |
|---|---|
| Device | Device and browser type, operating system, screen size and language |
| Location | Approximate location (country and city), derived from the IP address |
| Browsing | Pages and products viewed, searches made on the site, filters and sort options used, links and phone numbers clicked, forms submitted, scroll depth, and the website that referred the visit |
| Shopping | Items added to or removed from the cart, checkout steps and purchases |
| Technical errors | Error information from the cart and checkout pages, used to find and fix faults |
This information is used in aggregate to understand how the website performs and what customers are looking for. It is not used to identify individual visitors, except where a visitor is logged in or has placed an order and the information is linked to that account or order.
Information received from other sources
| Source | Information |
|---|---|
| Gift card purchasers | The recipient’s name and email address |
| Customers sending gifts | A different person’s name and delivery address |
| Payment providers, including Afterpay | Whether a payment was approved |
| Courier companies | Delivery status and delivery exceptions |
| Google and Meta | Aggregated reports about advertising performance |
3How personal information is used
| Purpose | Information used |
|---|---|
| Processing and delivering orders, returns and refunds | Order, contact, address and payment confirmation details |
| Verifying customers are 18 or over under the Sale and Supply of Alcohol Act 2012 | Age confirmation, and identification sighted in store or on delivery |
| Managing accounts and gift cards | Account details, order history, gift card and recipient details |
| Answering enquiries and customer service | Contact details and enquiry content |
| Order confirmations, delivery updates and review requests | Name, email address and order details |
| Newsletters and offers | Email address and name, for subscribers only |
| Improving the range and website, including tracking interest in sold-out wines and searches that return no results | Aggregated browsing and shopping data |
| Measuring and improving advertising on Google, Facebook and Instagram | Browsing and shopping data, as explained in section 7 |
| Preventing fraud, spam and misuse, and keeping systems secure | Technical data, form submissions and order patterns |
| Meeting legal, tax and accounting obligations | Order, invoice and payment records |
Great Little Vineyards will not use personal information for a purpose unrelated to the reason it was collected, unless the person concerned agrees or the Privacy Act allows it.
4Age and responsible supply of alcohol
Under New Zealand law, a person must be 18 or over to buy alcohol. The website is intended only for adults and asks visitors to confirm their age. Great Little Vineyards does not knowingly collect personal information from anyone under 18. If it learns that it has done so, the information will be deleted. Couriers may ask for identification on delivery.
5Marketing communications
Great Little Vineyards sends marketing emails only to people who have subscribed or who have agreed during checkout, in line with the Unsolicited Electronic Messages Act 2007. Every marketing email identifies Great Little Vineyards and includes a working unsubscribe link. Unsubscribing does not affect emails about orders that have been placed.
Great Little Vineyards does not sell, rent or trade mailing lists.
6Who personal information is shared with
Great Little Vineyards shares personal information only where needed for the purposes in section 3, and only with organisations that are required to protect it.
| Recipient | Purpose | Location |
|---|---|---|
| Eway | Processing card payments securely | Australia |
| Afterpay (if chosen at checkout) | Buy now, pay later payments. Afterpay’s own privacy policy applies to its assessment of the customer. | Australia and United States |
| Courier and delivery partners | Delivering orders, including age checks on delivery | New Zealand |
| WP Engine | Hosting the website and its database | United States and other countries |
| Mailchimp (Intuit) | Sending newsletters and other emails customers have agreed to receive, and recording subscriptions and purchase history for that purpose | United States |
| Analytics, Ads, Merchant Center, Tag Manager, reCAPTCHA spam protection and address lookup at checkout | United States and other countries | |
| Meta Platforms (Facebook and Instagram) | Advertising measurement and showing relevant ads, through the Meta Pixel and the Meta Conversions API, as explained in section 7 | United States and Ireland |
| Professional advisers | Accounting, legal and audit services | New Zealand |
| Government agencies and regulators | Where required by law, for example Inland Revenue, licensing inspectors or the Police | New Zealand |
If the business is sold or restructured, personal information may pass to the new owner, who will be bound by this policy.
7Cookies, analytics and advertising
Cookies are small files stored in a browser. The website also uses similar technologies such as tags and pixels. They fall into four groups.
| Type | What it does | Provided by |
|---|---|---|
| Essential | Keeps the cart working, keeps customers logged in, secures checkout and blocks spam. The website cannot function without these. | Great Little Vineyards (WooCommerce), Google reCAPTCHA |
| Preferences | Remembers age confirmation and whether a pop-up has already been shown | Great Little Vineyards |
| Analytics | Measures how the website is used, as described in section 2 | Google Analytics, Google Tag Manager |
| Advertising | Measures whether ads lead to visits and purchases, and allows ads to be shown to people who have visited the website | Google Ads, Meta Pixel and Meta Conversions API, Mailchimp |
Meta Pixel and Conversions API
The Meta Pixel is a small piece of code on the website that tells Meta when a visitor views a product, adds to cart, starts checkout or completes a purchase, including the products and order value. It may be loaded directly by the website or through Google Tag Manager. Great Little Vineyards may also send the same shopping events to Meta directly from its web server using the Meta Conversions API, so that advertising can still be measured when a browser blocks the Pixel. Each event is sent with a shared reference so that Meta counts it only once. The information sent is the same in both cases and is covered by the Advanced Matching explanation below.
Meta Advanced Matching
When a customer is logged in or completes a purchase, Meta tools may use a feature called Advanced Matching. The customer’s email address, name and, where provided at checkout, phone number and location details are converted into a scrambled code (a process called hashing) before being sent to Meta. Meta uses this code to match website activity with Facebook and Instagram accounts so that advertising can be measured more accurately. Meta does not receive these details in readable form from Great Little Vineyards.
Google Analytics data
Google Analytics does not receive names, email addresses or phone numbers from Great Little Vineyards. Detailed Google Analytics data is kept for no longer than 14 months.
How to control cookies and advertising
| To control | How |
|---|---|
| All cookies | Block or delete cookies in browser settings. Blocking essential cookies will stop the cart and checkout from working. |
| Google Analytics | Install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout |
| Personalised Google ads | Manage at myadcenter.google.com |
| Personalised Facebook and Instagram ads | Manage in Meta’s Accounts Centre under Ad preferences |
8Storage and transfer overseas
Some of the service providers listed in section 6 store or process information outside New Zealand, mainly in Australia and the United States. Where a provider only stores or processes information on behalf of Great Little Vineyards, Great Little Vineyards remains responsible for it. Where information is disclosed to an overseas organisation that uses it for its own purposes, Great Little Vineyards takes reasonable steps, as required by information privacy principle 12, to make sure that organisation protects it in a way comparable to New Zealand law, including through contractual terms.
9Keeping information secure
| Safeguard | How it works |
|---|---|
| Encrypted connections | The website uses HTTPS throughout |
| Card payments | Handled by Eway, certified to the PCI DSS security standard. Great Little Vineyards does not store full card numbers. |
| Passwords | Stored in encrypted form and cannot be read by staff |
| Restricted access | Customer information is available only to staff and contractors who need it. Administrative accounts are protected by strong passwords and two-step verification where available. |
| Spam and attack protection | Forms are protected against spam and automated attacks |
10How long information is kept
| Information | How long |
|---|---|
| Orders, invoices and payment records | 7 years, as required for New Zealand tax records |
| Customer accounts | Until the customer asks for the account to be closed, or after 3 years without activity |
| Newsletter subscriptions | Until the subscriber unsubscribes |
| Contact form enquiries | 2 years after the enquiry is resolved |
| Gift card recipient details | Until the gift card is redeemed or expires, plus the tax record period for the transaction |
| Google Analytics data | Up to 14 months |
When information is no longer needed, it is deleted or anonymised.
11Access and correction rights
| Right | What it means |
|---|---|
| Access (information privacy principle 6) | Ask whether Great Little Vineyards holds personal information about you, and receive a copy |
| Correction (information privacy principle 7) | Ask for personal information to be corrected if it is wrong, or for a statement of the correction sought to be attached to it |
| Unsubscribe | Stop marketing emails at any time using the link in any email |
| Account closure | Ask for an account to be closed and the information deleted, subject to the legal record-keeping requirements in section 10 |
- Contact the Privacy Officer using the details in section 14.
- Great Little Vineyards verifies the identity of the person making the request before releasing any information.
- Great Little Vineyards responds as soon as reasonably practicable and within 20 working days. There is no charge for making a request.
12Complaints
- Contact the Privacy Officer first. Great Little Vineyards will acknowledge the complaint promptly and aim to resolve it within 20 working days.
- If the matter is not resolved, a complaint can be made to the Office of the Privacy Commissioner at privacy.org.nz or by phoning 0800 803 909.
13Changes to this policy
Great Little Vineyards may update this policy when its practices or the law change. The date at the top of the page shows when it was last updated. Significant changes will be highlighted on the website.
14Contact the Privacy Officer
Tenancy 7, Orakei Bay Village, 228 Orakei Road, Remuera, Auckland 1050
Email: info@greatlittlevineyards.com
Phone: +64 9 529 0935