Privacy policy

Last updated date this policy goes live

This policy explains what personal information Omorfia collects, why, and what you can do about it. We follow the Privacy Act 2020. Omorfia is a trading name of business legal name.

What we collect

• When you order: your name, email address, delivery address, phone number and what you bought.
• If you subscribe: your chosen formula, delivery frequency and billing dates.
• When you contact us: whatever you tell us, such as details of a problem with an order.
• Payments: handled by payment provider. We never see or store your full card number.

Why we use it

• To process, send and track your orders and subscriptions.
• To answer questions and handle returns or problems.
• To send marketing emails, but only if you've agreed to receive them.
• To prevent fraud and keep the records the law requires.

We don't sell your personal information.

Who we share it with

We share only what each service needs to do its job:

• our payment provider, payment provider, to take payment
• our courier, courier, to deliver your order
• our email provider, email provider, to send order updates and, if you've agreed, marketing
• Cloudflare, which hosts this website.

Some of these services store information outside New Zealand. We only use providers that protect personal information to standards comparable to the Privacy Act. We may also share information if the law requires it.

Cookies

This website doesn't use advertising or analytics cookies. Our checkout and payment provider may use cookies that are needed for payment to work and to prevent fraud. If we start using other cookies, we'll update this policy first.

Marketing emails

We only send marketing emails if you've opted in. Every one includes an unsubscribe link, and you can opt out at any time without affecting your orders or subscription emails.

How long we keep it

We keep order records for 7 years, as New Zealand tax law requires. We keep other information only as long as we need it for the reasons above, then delete it.

Keeping it safe

We take reasonable steps to protect your information from loss, misuse and unauthorised access. If a privacy breach is likely to cause serious harm, we'll tell you and the Privacy Commissioner as the law requires.

Your rights

You can ask to see the personal information we hold about you and ask us to correct it. Email our privacy contact at contact email. We'll respond within 20 working days.

If you're not happy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.