Executive Summary
At burgerfrommars, we manage your personal data in strict compliance with the New Zealand Privacy Act 2020. This document outlines what data we collect, how we use and safeguard it, and how you can exercise your statutory rights to access or correct your personal information.
Introduction & Scope
Welcome to burgerfrommars ("burgerfrommars," "we," "us," or "our"), operating the website burgerfrommars.com.
This Privacy Policy governs the collection, holding, use, and disclosure of your personal information when you access or use our websites, applications, products, and related services (collectively, the "Services"). We manage your personal information in strict compliance with the 13 Information Privacy Principles (IPPs) set out in the New Zealand Privacy Act 2020.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our Services immediately.
Information We Collect
We only collect personal information where it is necessary for one or more of our business functions or activities. The types of personal information we collect depend on how you interact with us:
Identity & Contact Data
Transaction & Financial Data
Technical & Usage Data
Communications Data
How We Use Your Information
In accordance with the New Zealand Privacy Act 2020, we use your personal information only for the purposes for which it was collected, or for directly related purposes, including:
Service Delivery
To provide, operate, maintain, and improve our Services, and to fulfill our contractual obligations to you.
Transaction Processing
To process payments, fulfill orders, and send transactional notifications such as invoices and confirmations.
Customer Support
To respond to your inquiries, troubleshoot problems, and provide technical or customer service assistance.
Security & Fraud Prevention
To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
Marketing Communications
With your consent (and in compliance with the Unsolicited Electronic Messages Act 2007), to send promotional updates. You may opt out anytime.
Legal Compliance
To comply with applicable New Zealand laws, tax regulations, court orders, or lawful government requests.
Information Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your personal information only in the following limited circumstances:
- Trusted Service Providers: We engage third-party companies and individuals to facilitate our Services (e.g., cloud hosting, payment processing, IT support, analytics, and logistics). These providers have access to your personal information solely to perform tasks on our behalf and are contractually obligated to protect it.
- Legal & Regulatory Authorities: We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal obligation, protect and defend the rights or property of burgerfrommars, or protect the personal safety of users or the public.
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
International Data Transfers
While burgerfrommars is based in New Zealand, we operate globally and utilize cloud infrastructure and service providers that may be located outside of New Zealand (such as in Australia, the United States, or the European Economic Area).
In compliance with Information Privacy Principle 12 (IPP 12) of the New Zealand Privacy Act 2020, we will only disclose or transfer your personal information to an overseas entity if:
- The overseas country has privacy laws that provide comparable safeguards to the New Zealand Privacy Act 2020;
- We have entered into binding contractual agreements requiring the overseas recipient to protect your information in a manner comparable to New Zealand law; or
- You have been expressly informed and have authorized the disclosure.
Data Security & Retention
Security Safeguards (IPP 5)
We implement robust physical, technical, and administrative security measures designed to protect your personal information against loss, unauthorized access, use, modification, or disclosure. These include SSL/TLS encryption for data in transit, restricted access controls, and regular security assessments. However, no internet transmission is ever 100% secure, and we cannot guarantee absolute security.
Notifiable Privacy Breaches
In the unlikely event of a privacy breach that causes or is likely to cause serious harm to you, we will promptly notify both the Office of the New Zealand Privacy Commissioner (OPC) and affected individuals in accordance with our statutory obligations under the Privacy Act 2020.
Data Retention (IPP 9)
We will not keep your personal information for longer than is required for the purposes for which the information may lawfully be used, or as required by applicable New Zealand tax, accounting, or corporate laws. When your information is no longer needed, we will securely delete or anonymize it.
Your Privacy Rights (New Zealand & Global)
Under the New Zealand Privacy Act 2020 (specifically IPP 6 and IPP 7), as well as international frameworks where applicable (such as the GDPR or CCPA), you have the following rights regarding your personal information:
- Right of Access: You have the right to request confirmation of whether we hold personal information about you, and to request a copy of that information.
- Right of Correction: You have the right to ask us to correct any personal information we hold about you if you believe it is inaccurate, incomplete, or misleading. If we decline to make the correction, you have the right to request that a statement of the correction sought be attached to your record.
- Right to Withdraw Consent: Where we rely on your consent to process your data (such as for marketing emails), you may withdraw your consent at any time.
- Right to Erasure / Restriction (Global Users): Depending on your jurisdiction, you may also have the right to request the deletion of your data or the restriction of its processing.
How to Exercise Your Rights (20-Working-Day Guarantee)
To make an access or correction request, please contact our Privacy Officer at privacy@burgerfrommars.com. Under New Zealand law, we will respond to your request as soon as reasonably practicable, and no later than 20 working days after receiving it.
Cookies & Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to ensure our website functions properly, analyze traffic, and understand how users interact with our Services.
- Essential Cookies: Necessary for the website to function and cannot be switched off in our systems.
- Analytics & Performance Cookies: Allow us to count visits and traffic sources so we can measure and improve the performance of our site.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.
Children’s Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you become aware that a child has provided us with personal information without consent, please contact us at privacy@burgerfrommars.com, and we will take steps to remove such information from our systems.
Changes to This Policy
We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our operational practices, technology, or legal and regulatory requirements. Any revisions will be posted on this page at burgerfrommars.com with an updated "Last Updated" date. Where changes are material, we will provide a more prominent notice (such as via email notification or a banner on our website).
Contact Us & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to make a complaint about a breach of your privacy, please contact our Privacy Officer in the first instance:
burgerfrommars
Office of the Privacy Commissioner
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the New Zealand regulator (Te Mana Mātāpono Matatapu):