Privacy Policy

Last updated: 23 June 2025

1. Introduction

("we", "us", "our") operates the website at bellavessatable.com and is committed to protecting the personal information of everyone who visits or contacts us. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to all personal information collected through bellavessatable.com and through any direct communications with us, including email enquiries and contact form submissions.

We encourage you to read this policy carefully. By using our website or submitting information to us, you acknowledge that you have read and understood its contents.

2. Data Controller

The data controller responsible for your personal information is:

Legal entity
Company number 9754183
GST number 248-731-965
Registered address
Privacy contact email privacy@bellavessatable.com
Website bellavessatable.com

All privacy-related enquiries, requests and complaints should be directed to us using the contact details above.

3. Personal Information We Collect

We collect only the personal information that is reasonably necessary to provide our services, respond to your enquiries and operate our website. The categories of information we may collect are described below.

3.1 Contact and Enquiry Information

When you fill in a contact form, send us an email or otherwise get in touch with us, we may collect:

  • Your full name
  • Your email address
  • Your telephone number (if you choose to provide it)
  • The subject matter and content of your enquiry or message
  • Any additional details you voluntarily include in your communication

3.2 Device and Technical Information

When you browse our website, certain technical information is automatically collected by our web server and any analytics tools we use. This may include:

  • Your IP address
  • Browser type and version
  • Operating system
  • Referring website or URL
  • Pages visited and time spent on each page
  • Date and time of your visit
  • Device type (desktop, tablet or mobile)

Where this technical information is linked to you as an identifiable individual, it constitutes personal information under applicable law. Where it is collected and retained only in aggregate or anonymised form, it does not.

3.3 Consent and Preference Data

If you interact with any consent banners, cookie preference tools or subscription opt-ins on our website, we record the choices you make, including the date and time you gave or withdrew consent. This allows us to demonstrate compliance with our legal obligations.

3.4 Information You Choose Not to Provide

You are not obliged to provide any personal information to us. However, if you choose not to provide information we need in order to respond to an enquiry, we may not be able to assist you fully or at all.

4. How We Collect Personal Information

We collect personal information in the following ways:

  • Directly from you: when you submit a contact form, send an email, telephone us or otherwise communicate with us voluntarily.
  • Automatically: when you visit our website, technical information is collected through server logs and, where applicable, analytics or cookie technologies.
  • From your device or browser: standard browser and device identifiers may be transmitted to our servers as part of normal web browsing activity.

6. Cookies and Similar Technologies

Our website may use cookies and similar tracking technologies to improve your browsing experience, understand how visitors use the site and ensure the website functions correctly.

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the website operator.

The types of cookies we may use include:

  • Strictly necessary cookies: essential for the website to function. These cannot be disabled without affecting how the website operates.
  • Analytics cookies: help us understand how visitors interact with our website by collecting information anonymously or in aggregate.
  • Functionality cookies: allow the website to remember choices you make, such as your cookie preferences.

Where required by law, we will seek your consent before placing non-essential cookies on your device. You may withdraw or adjust your cookie preferences at any time by using the preference tool on our website or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

7. Disclosure and Recipients of Personal Information

We do not sell, rent or trade your personal information to any third party. We may share your personal information only in the circumstances described below.

7.1 Service Providers

We may engage third-party service providers who process personal information on our behalf. These providers are permitted to use your information only as necessary to perform services for us and are required to keep it confidential and secure. Categories of service provider we may use include:

  • Website hosting and infrastructure providers
  • Email delivery and communication platforms
  • Website analytics providers

7.2 Legal and Regulatory Disclosure

We may disclose personal information where we are required to do so by law, court order or the lawful request of a public authority or regulatory body in New Zealand or another jurisdiction with authority over us. We will, where permitted, notify you of any such requirement.

7.3 Business Transfers

In the event that is involved in a merger, acquisition, reorganisation, sale of assets or similar business transaction, personal information held by us may be transferred to the relevant successor entity. We will take reasonable steps to ensure that your information continues to be protected in accordance with this Privacy Policy.

7.4 International Transfers

Some of the service providers we use may be located outside New Zealand. Where personal information is transferred to a recipient in another country, we take reasonable steps to ensure that the recipient is subject to privacy laws or contractual obligations that provide comparable protections to those available in New Zealand under the Privacy Act 2020.

8. Retention of Personal Information

We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, to comply with legal obligations and to resolve any disputes or enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

Category of information Typical retention period
Contact and enquiry records Up to 3 years from the date of last contact, or longer if required for an ongoing matter
Device and technical (server logs) Up to 12 months from the date of collection
Consent and preference records For as long as the consent is relevant and for a reasonable period afterward to demonstrate compliance, typically up to 3 years
Legal and regulatory compliance records For the period required by applicable law, which may be longer than the periods above

When personal information is no longer required, we take reasonable steps to destroy or permanently de-identify it in a secure manner.

9. Security of Personal Information

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration or destruction. These measures include:

  • Use of secure (HTTPS) connections for data transmission via our website
  • Access controls limiting who within our organisation can access personal information
  • Regular review of our information handling practices
  • Contractual requirements placed on service providers to maintain appropriate security

While we take these precautions, no method of transmitting or storing information over the internet is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk. If you become aware of any security concern relating to your personal information, please contact us promptly at privacy@bellavessatable.com.

In the event of a notifiable privacy breach affecting your personal information, we will comply with our obligations under the Privacy Act 2020 to notify the Office of the Privacy Commissioner and affected individuals as required.

10. Your Privacy Rights

Under the Privacy Act 2020 and other applicable law, you have the following rights in relation to personal information we hold about you.

10.1 Right of Access

You have the right to request confirmation of whether we hold personal information about you and, if so, to request a copy of that information. We will respond to access requests within a reasonable time and in any event within 20 working days, as required by the Privacy Act 2020.

10.2 Right to Correction

If you believe that personal information we hold about you is inaccurate, incomplete or out of date, you may request that we correct it. We will correct the information promptly where we agree it requires correction. If we do not agree, we will note your requested correction alongside the information concerned.

10.3 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent. To withdraw consent, please contact us at privacy@bellavessatable.com.

10.4 Right to Raise a Concern or Complaint

If you have concerns about how we handle your personal information, you may contact us directly. You also have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand). Details of how to do this are provided in the section below.

10.5 Submitting a Rights Request

To exercise any of the rights described above, please contact us at:

We may ask you to verify your identity before processing your request. This is to ensure that personal information is disclosed only to the individual to whom it relates. We will not charge a fee for processing a straightforward access or correction request, though we reserve the right to charge a reasonable fee for requests that are excessive or repetitive.

11. Complaints

If you are not satisfied with our response to a privacy concern or request, or if you believe we have not complied with the Privacy Act 2020, you have the right to complain to the Office of the Privacy Commissioner of New Zealand.

The Office of the Privacy Commissioner can be contacted through its official website at privacy.org.nz or by post at:

Office of the Privacy Commissioner
PO Box 10094
Wellington 6143
New Zealand

We encourage you to contact us directly in the first instance so that we have the opportunity to resolve any concern before a formal complaint is made.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to remain informed about how we protect your personal information.

Continued use of our website after any update constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you should discontinue use of the website and contact us if you wish to discuss the implications for any information you have already provided.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact us:

Privacy enquiries email privacy@bellavessatable.com
Postal address Privacy Officer, ,
Website bellavessatable.com

We aim to acknowledge all privacy enquiries within 5 working days and to provide a substantive response within 20 working days, in line with our obligations under the Privacy Act 2020.