Privacy Policy

1. Information We Collect

When you create an account, make a purchase, or contact us, we may collect the following personal information:

• Your name and email address
• Physical delivery address
• Age confirmation (to verify you are 18 years or older, as required by New Zealand law)
• Payment information (processed securely by Stripe; we never store your card details)
• Order history and account preferences
• Any information you provide via our contact form

2. How We Use Your Information

We use your personal information strictly for the following purposes:

• Processing and fulfilling your orders
• Verifying your age for the purchase of alcohol
• Providing customer support and responding to enquiries
• Managing your account and order history ("My Cellar")
• Sending transactional emails (order confirmations, shipping updates)
• With your consent, sending occasional updates about new releases and events
• Improving our website experience through anonymised analytics

3. Third-Party Services

To operate our business, we share limited personal information with the following trusted third-party services:

• Clerk — authentication and account management
• Stripe — secure payment processing (PCI DSS compliant)
• Formspree — contact form submissions
• Vercel — website hosting and analytics (anonymised usage data)
• Sanity — content management

We do not sell, rent, or trade your personal information to any third party for marketing purposes. Each service listed above processes data only as necessary to perform its function.

4. Cookies & Analytics

We use minimal, essential cookies to maintain your session and keep items in your shopping cart. These cookies are strictly necessary for the website to function and cannot be opted out of.

We use Vercel Analytics to collect anonymised, aggregated data about how visitors use our website (such as page views and general geographic region). This data does not identify you personally and is used solely to improve the browsing experience.

We do not use third-party advertising trackers or sell browsing data.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records may be retained for up to seven years to meet New Zealand tax and accounting obligations. If you close your account, we will delete your personal data within a reasonable timeframe, except where retention is required by law.

6. Data Security

We take reasonable steps to protect your personal information from unauthorised access, use, or disclosure. All data is transmitted over HTTPS encryption. Payment information is handled entirely by Stripe and never touches our servers. Access to personal data is restricted to authorised personnel only.

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact our Privacy Officer at the details below.

8. Privacy Officer

Our Privacy Officer can be contacted for any privacy-related queries, access requests, or complaints:

Email: info@arianova.co.nz

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner.