Privacy Policy

Last updated: 1 May 2026

This Privacy Policy explains how mrwinston.co.nz (“we”, “us”, “our”) collects, uses, stores, and protects the personal information you provide when shopping or browsing on our site. We aim to comply with applicable privacy laws including the New Zealand Privacy Act 2020 and the Australian Privacy Principles where relevant.

1. What We Collect

When you place an order, we collect:

  • Full name
  • Email address
  • Shipping address
  • Phone number (for courier delivery)
  • Payment details (processed by our payment provider — we do not store card numbers)
  • Order history

When you browse our site, we may automatically collect:

  • IP address and approximate location
  • Browser type and device information
  • Pages viewed and time on site
  • Referring website

2. How We Use It

Your information is used to:

  • Process and ship your orders
  • Send order confirmations and tracking updates
  • Respond to your customer service inquiries
  • Send marketing emails (only if you opt in — you can unsubscribe anytime)
  • Improve site performance and product offerings
  • Detect and prevent fraud

3. Who We Share It With

We do not sell your personal information. We share data only with parties strictly necessary to deliver your order:

  • Payment processors (Stripe, PayPal, or similar) to handle transactions securely
  • Shipping carriers to deliver your order
  • Email service providers (Mailchimp or similar) for order confirmations and opt-in marketing
  • Analytics providers (Google Analytics) using anonymised data
  • Legal authorities if required by law

4. Cookies

We use cookies for cart functionality, login sessions, and analytics. You can disable cookies in your browser settings, though some features (like checkout) may not work without them.

5. Your Rights

Under the NZ Privacy Act 2020, you have the right to:

  • Request access to the personal information we hold about you
  • Request corrections to inaccurate information
  • Request deletion of your account and associated data
  • Withdraw consent for marketing communications at any time

To exercise any of these rights, email support@mrwinston.co.nz with your request. We respond within 20 working days as required by the Privacy Act.

6. Data Security

We use SSL encryption (HTTPS) for all data transmission. Payment information is processed through PCI-compliant providers. We retain personal data only as long as necessary to provide service or as required by law (typically 7 years for financial records).

7. International Transfers

Because we operate online and use international service providers, your data may be processed in countries outside New Zealand. We ensure these providers offer privacy protections comparable to those required by the NZ Privacy Act.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be posted at the top of this page with a revised “Last updated” date. Continued use of the site after changes constitutes acceptance of the revised policy.

9. Contact & Complaints

Privacy questions or complaints: support@mrwinston.co.nz. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner of New Zealand at privacy.org.nz.