Privacy Policy
Last updated: 23 June 2025
1. Introduction
("we", "us", "our") operates the website at bellavessatable.com and is committed to protecting the personal information of everyone who visits or contacts us. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.
This policy applies to all personal information collected through bellavessatable.com and through any direct communications with us, including email enquiries and contact form submissions.
We encourage you to read this policy carefully. By using our website or submitting information to us, you acknowledge that you have read and understood its contents.
2. Data Controller
The data controller responsible for your personal information is:
| Legal entity | |
|---|---|
| Company number | 9754183 |
| GST number | 248-731-965 |
| Registered address | |
| Privacy contact email | privacy@bellavessatable.com |
| Website | bellavessatable.com |
All privacy-related enquiries, requests and complaints should be directed to us using the contact details above.
3. Personal Information We Collect
We collect only the personal information that is reasonably necessary to provide our services, respond to your enquiries and operate our website. The categories of information we may collect are described below.
3.1 Contact and Enquiry Information
When you fill in a contact form, send us an email or otherwise get in touch with us, we may collect:
- Your full name
- Your email address
- Your telephone number (if you choose to provide it)
- The subject matter and content of your enquiry or message
- Any additional details you voluntarily include in your communication
3.2 Device and Technical Information
When you browse our website, certain technical information is automatically collected by our web server and any analytics tools we use. This may include:
- Your IP address
- Browser type and version
- Operating system
- Referring website or URL
- Pages visited and time spent on each page
- Date and time of your visit
- Device type (desktop, tablet or mobile)
Where this technical information is linked to you as an identifiable individual, it constitutes personal information under applicable law. Where it is collected and retained only in aggregate or anonymised form, it does not.
3.3 Consent and Preference Data
If you interact with any consent banners, cookie preference tools or subscription opt-ins on our website, we record the choices you make, including the date and time you gave or withdrew consent. This allows us to demonstrate compliance with our legal obligations.
3.4 Information You Choose Not to Provide
You are not obliged to provide any personal information to us. However, if you choose not to provide information we need in order to respond to an enquiry, we may not be able to assist you fully or at all.
4. How We Collect Personal Information
We collect personal information in the following ways:
- Directly from you: when you submit a contact form, send an email, telephone us or otherwise communicate with us voluntarily.
- Automatically: when you visit our website, technical information is collected through server logs and, where applicable, analytics or cookie technologies.
- From your device or browser: standard browser and device identifiers may be transmitted to our servers as part of normal web browsing activity.
5. Purposes and Legal Bases for Processing
We process personal information only for specified, explicit and legitimate purposes. The table below sets out the purposes for which we process personal information together with the legal basis relied upon under the Privacy Act 2020 (New Zealand) and, where applicable, equivalent international data protection frameworks.
| Purpose | Type of information involved | Legal basis |
|---|---|---|
| Responding to your enquiries and communications | Contact and enquiry information | Necessary to take steps at your request prior to, or in connection with, providing our services; or our legitimate interest in responding to communications directed to us |
| Operating and improving our website | Device and technical information | Our legitimate interest in maintaining a functional, secure and user-friendly website |
| Analytics and understanding visitor behaviour | Device and technical information (aggregated where possible) | Our legitimate interest in understanding how visitors use our website, or your consent where required by applicable law |
| Managing and recording consents and preferences | Consent and preference data | Compliance with our legal obligations to demonstrate that valid consent has been obtained and respected |
| Compliance with legal and regulatory obligations | Any relevant personal information | Compliance with applicable law, including the Privacy Act 2020 |
| Protecting our rights, property and the safety of our business and others | Any relevant personal information | Our legitimate interest in preventing fraud, unauthorised access and other harmful conduct |
We do not use your personal information for automated decision-making processes or profiling that produces legal or similarly significant effects on you.
7. Disclosure and Recipients of Personal Information
We do not sell, rent or trade your personal information to any third party. We may share your personal information only in the circumstances described below.
7.1 Service Providers
We may engage third-party service providers who process personal information on our behalf. These providers are permitted to use your information only as necessary to perform services for us and are required to keep it confidential and secure. Categories of service provider we may use include:
- Website hosting and infrastructure providers
- Email delivery and communication platforms
- Website analytics providers
7.2 Legal and Regulatory Disclosure
We may disclose personal information where we are required to do so by law, court order or the lawful request of a public authority or regulatory body in New Zealand or another jurisdiction with authority over us. We will, where permitted, notify you of any such requirement.
7.3 Business Transfers
In the event that is involved in a merger, acquisition, reorganisation, sale of assets or similar business transaction, personal information held by us may be transferred to the relevant successor entity. We will take reasonable steps to ensure that your information continues to be protected in accordance with this Privacy Policy.
7.4 International Transfers
Some of the service providers we use may be located outside New Zealand. Where personal information is transferred to a recipient in another country, we take reasonable steps to ensure that the recipient is subject to privacy laws or contractual obligations that provide comparable protections to those available in New Zealand under the Privacy Act 2020.
8. Retention of Personal Information
We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, to comply with legal obligations and to resolve any disputes or enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.
| Category of information | Typical retention period |
|---|---|
| Contact and enquiry records | Up to 3 years from the date of last contact, or longer if required for an ongoing matter |
| Device and technical (server logs) | Up to 12 months from the date of collection |
| Consent and preference records | For as long as the consent is relevant and for a reasonable period afterward to demonstrate compliance, typically up to 3 years |
| Legal and regulatory compliance records | For the period required by applicable law, which may be longer than the periods above |
When personal information is no longer required, we take reasonable steps to destroy or permanently de-identify it in a secure manner.
9. Security of Personal Information
We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration or destruction. These measures include:
- Use of secure (HTTPS) connections for data transmission via our website
- Access controls limiting who within our organisation can access personal information
- Regular review of our information handling practices
- Contractual requirements placed on service providers to maintain appropriate security
While we take these precautions, no method of transmitting or storing information over the internet is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk. If you become aware of any security concern relating to your personal information, please contact us promptly at privacy@bellavessatable.com.
In the event of a notifiable privacy breach affecting your personal information, we will comply with our obligations under the Privacy Act 2020 to notify the Office of the Privacy Commissioner and affected individuals as required.
10. Your Privacy Rights
Under the Privacy Act 2020 and other applicable law, you have the following rights in relation to personal information we hold about you.
10.1 Right of Access
You have the right to request confirmation of whether we hold personal information about you and, if so, to request a copy of that information. We will respond to access requests within a reasonable time and in any event within 20 working days, as required by the Privacy Act 2020.
10.2 Right to Correction
If you believe that personal information we hold about you is inaccurate, incomplete or out of date, you may request that we correct it. We will correct the information promptly where we agree it requires correction. If we do not agree, we will note your requested correction alongside the information concerned.
10.3 Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent. To withdraw consent, please contact us at privacy@bellavessatable.com.
10.4 Right to Raise a Concern or Complaint
If you have concerns about how we handle your personal information, you may contact us directly. You also have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand). Details of how to do this are provided in the section below.
10.5 Submitting a Rights Request
To exercise any of the rights described above, please contact us at:
- Email: privacy@bellavessatable.com
- Post: Privacy Officer, ,
We may ask you to verify your identity before processing your request. This is to ensure that personal information is disclosed only to the individual to whom it relates. We will not charge a fee for processing a straightforward access or correction request, though we reserve the right to charge a reasonable fee for requests that are excessive or repetitive.
11. Complaints
If you are not satisfied with our response to a privacy concern or request, or if you believe we have not complied with the Privacy Act 2020, you have the right to complain to the Office of the Privacy Commissioner of New Zealand.
The Office of the Privacy Commissioner can be contacted through its official website at privacy.org.nz or by post at:
Office of the Privacy CommissionerPO Box 10094
Wellington 6143
New Zealand
We encourage you to contact us directly in the first instance so that we have the opportunity to resolve any concern before a formal complaint is made.
12. Links to Third-Party Websites
Our website may contain links to external websites operated by third parties. This Privacy Policy applies only to bellavessatable.com. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any external sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to remain informed about how we protect your personal information.
Continued use of our website after any update constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you should discontinue use of the website and contact us if you wish to discuss the implications for any information you have already provided.
14. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact us:
| Privacy enquiries email | privacy@bellavessatable.com |
|---|---|
| Postal address | Privacy Officer, , |
| Website | bellavessatable.com |
We aim to acknowledge all privacy enquiries within 5 working days and to provide a substantive response within 20 working days, in line with our obligations under the Privacy Act 2020.