Privacy Policy

1. Introduction

This policy explains how we handle your personal information when you use this website or place an order. We comply with the New Zealand Privacy Act 2020 and its Information Privacy Principles.

Get More Supermarket is the agency responsible for the personal information collected through this site.

2. Information we collect

• Contact and delivery details — your name, phone number, email address and delivery address.
• Order information — the items you buy, order history, delivery or pickup preferences, substitution choices and any notes you give us.
• Account information — if you register, your login email and a securely hashed password. We never store your password in readable form.
• Payment information — a payment reference, the amount, the payment result and (where our provider supplies it) the card type and last four digits. We do not collect or store your full card number or security code.
• Technical information — IP address, device and browser type, and pages viewed, used to keep the site secure and working properly.
• Marketing preferences — if you subscribe to our newsletter, your email address and whether you have opted out.

3. How we use your information

• To process, pack, deliver and support your orders, and to contact you about them.
• To take payment and to process refunds.
• To manage your account, order history and any loyalty points.
• To send you offers and updates — only if you have opted in. You can unsubscribe at any time.
• To detect and prevent fraud, to keep the site secure, and to meet our legal and tax obligations.
• To understand which products and pages are popular so we can improve the store.

4. Payment processing

Card payments are handled by our payment provider, Windcave on a secure, PCI-DSS compliant payment page. Your card details are submitted directly to that provider and are not passed through or retained by our systems. We receive only the result of the transaction and a reference so we can match the payment to your order and issue refunds. See Payments & Security for more.

5. Who we share information with

We do not sell, rent or trade your personal information. We share it only where necessary, with:

• Our payment provider, to take payment and process refunds.
• Delivery staff or couriers, so your order can reach you.
• IT and hosting providers who operate our systems under confidentiality obligations.
• Professional advisers, or law enforcement and regulators, where we are required or permitted by law.

Some of these providers may store data on servers outside New Zealand. Where that happens we take reasonable steps to ensure your information is protected by comparable safeguards.

6. Cookies and similar technologies

We use cookies and local storage to keep your shopping cart and session working, remember your delivery location and preferences, and — where enabled — measure how the site is used so we can improve it. Essential cookies are required for the site to function. You can block or delete cookies in your browser settings, but parts of the site (such as the cart and checkout) may then stop working correctly.

7. How long we keep information

We keep personal information only as long as we need it for the purposes above. Order and transaction records are retained for at least seven years to meet New Zealand tax and business record-keeping requirements. Account information is kept while your account is active. Marketing contact details are kept until you unsubscribe; a record of your unsubscribe is retained so we do not contact you again by mistake.

8. Keeping your information secure

We take reasonable technical and organisational steps to protect your information, including encrypted connections (HTTPS), hashed passwords, access controls limiting staff access to what their role requires, and using a PCI-DSS compliant payment provider so card data never reaches our systems. No online system can be guaranteed completely secure, but we work to protect your information and will notify you and the Privacy Commissioner if a privacy breach occurs that is likely to cause serious harm.

9. Your rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you.
• Correct it if it is wrong or out of date.
• Withdraw consent to marketing at any time, by using the unsubscribe link or contacting us.
• Ask us to delete information we no longer need to keep.

To make a request, email hello@getmoresupermarket.co.nz or use our contact form. We may need to verify your identity first, and we will respond within 20 working days.

10. Children

This store is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Complaints

If you are concerned about how we have handled your personal information, please contact us first so we can put it right. If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

12. Changes to this policy

We may update this policy as our business or the law changes. The current version is always published on this page with the date it was last updated.