Privacy policy

Effective date: April 20th, 2026
Business Name: Go Potatoes  
Physical Address: 101 Pakenham St West, Auckland CBD
Contact Email: ask@gopotatoes.co.nz

At Go Potatoes, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website, place an order, contact us, or interact with our marketing. We are bound by and comply with the **Privacy Act 2020** and the **Unsolicited Electronic Messages Act 2007**.

1. What personal information we collect and why
We collect personal information that you give us directly, such as your name, email address, phone number, billing address, shipping address, order details, and any information you provide when you contact us or create an account. We may also collect information about your preferences, shopping activity, and product interests. 

1.1 Mandatory vs. Voluntary Information:
Providing some information is optional. However, certain information is mandatory for us to fulfill our services. For example, if you do not provide your payment details and shipping address, we will be unable to process and deliver your order. 

1.2 Information Collected Automatically:
We also collect some information automatically when you visit our website, including your IP address, browser type, device information, pages viewed, clicks, referring and exit pages, and cookie or similar identifier data. Google explains that cookies and similar technologies can be used to measure ad performance, reduce repeated ads, and show more relevant advertising; cookies may also store preferences and unique identifiers.

2. How we use your information
We use personal information to:
* Provide and improve our services, process, and deliver orders.
* Communicate with you about your purchase and provide customer support.
* Prevent fraud and maintain the security of our website and systems.
* Understand how people use our website to improve our products, website content, and customer experience.

3. Advertising, analytics, and retargeting
We use advertising and analytics tools such as Google Ads, Google Analytics, Meta Pixel, and similar technologies to measure website activity, understand campaign performance, build audiences, and show you more relevant ads on Google, Meta platforms, and other sites or apps. Google states that its advertising cookies can be used to show ads on third-party sites and measure ad campaign performance. Meta states that Meta Pixel can be used to track customer actions, build audiences, and optimize ad campaigns.

This may involve sharing or receiving information such as cookie identifiers, device identifiers, browsing activity, product views, and purchase or conversion events with our advertising partners. Google’s Customer Match policy requires advertisers to disclose that customer data is shared with third parties to perform services on their behalf.

4. How we disclose personal information
Under the Privacy Act 2020, personal information is generally only disclosed for the purpose for which it was collected or for a directly related purpose, unless another legal basis applies or you have authorised the disclosure.

We may disclose personal information to trusted third parties who help us operate our business, including payment providers, courier and delivery partners, website and cloud hosting providers, customer service tools, analytics providers, and advertising partners such as Google and Meta. 

We may also disclose personal information if required or permitted by law, including to law enforcement, regulators, courts, or other authorities.

5. Overseas disclosure
To maintain our operations, some of our service providers, cloud hosts, and advertising partners may store or process personal information on our behalf outside New Zealand. 

Before disclosing personal information to an overseas recipient, we ensure we comply with Information Privacy Principle 12 of the Privacy Act 2020. This means we will only share your data if we believe the overseas entity is subject to comparable privacy safeguards to those in New Zealand, or we will otherwise obtain your express authorisation to do so.

6. Cookies and similar technologies
We use cookies and similar technologies to run our website, remember preferences, understand site traffic, measure advertising performance, and support retargeting. You can control cookies through your browser settings and, where available, our cookie banner or preference tool. Some website features may not function properly if cookies are disabled.

7. Marketing communications
In compliance with the Unsolicited Electronic Messages Act 2007, we will only send you commercial electronic messages (such as marketing emails or texts about our products, offers, and promotions) if you have consented (i.e. opt-in at checkout) to receive them (either expressly, or inferred through your existing business relationship with us). 

You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in the message or by contacting us directly. All unsubscribe requests will be actioned promptly.

8. Security and retention
We take reasonable security safeguards to protect personal information against loss, unauthorised access, unauthorised use, modification, disclosure, or other misuse. We keep personal information only for as long as it is legitimately needed for the purposes for which it was collected, or as required by New Zealand law (such as the Tax Administration Act 1994, which requires financial records to be kept for seven years).

9. Your rights
Under the Privacy Act 2020, you have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong, out of date, incomplete, or misleading. 

If you make an access or correction request, we will respond to you within **20 working days**. Please note that we may require proof of your identity before processing your request. Where required, if we choose not to correct your information, we will attach a statement of correction to your file noting that you requested the change.

10. Privacy breaches
If we experience a privacy breach that has caused, or may cause, serious harm, we are legally obligated to notify the Office of the Privacy Commissioner and affected individuals. We will aim to do this within 72 hours of becoming aware of a notifiable breach, as recommended by the Privacy Commissioner.

11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our business or the law. If we make material changes, we will post the updated version on our website and update the effective date above. Where required, we may also notify you by email or another reasonable method.

12. Contact us and complaints
If you have any questions, wish to access or correct your information, or want to make a privacy complaint, please contact our Privacy Officer: ask@gopotatoes.co.nz