Privacy policy

Last updated: 3 October 2026

TheHoneyCo ("we", "us") operates thehoneyco.nz and sells honey sachets within New Zealand. In this policy, "the Services" means our website, our store, and the ways you deal with us, including email.

This policy describes what personal information we collect, how we use it, and who we share it with. We handle personal information in accordance with the Privacy Act 2020.

If there is a conflict between our Terms of Service and this Privacy Policy, this policy controls on anything to do with personal information.

By using the Services you acknowledge that you have read this policy.

Who is responsible for your information

TheHoneyCo
222 Reid Road, Ohaupo, Waikato 3882, New Zealand
Email: hello@thehoneyco.nz
Phone: 022 588 0301

What we collect

Depending on how you deal with us, we may collect or process:

Contact details: your name, email address, phone number, billing address and shipping address.
Order information: what you viewed, added to your cart, bought, returned or cancelled, and your order history.
Payment information: the form of payment, transaction details and payment confirmation. We do not see or store your full card number. That is handled by our payment providers.
Subscription information: if you start a Monthly Reload, its status, delivery schedule, pack size and delivery history.
Account information: your login details, preferences and settings if you create an account.
Communications: what you write to us, for example when you reply to an email or send a support question.
Device and usage information: your IP address, browser, device and how you move around our site, collected through cookies and similar technologies.
Reviews: anything you submit as a product review, including the name you choose to display.

We do not ask for, and do not want, health information. Please do not send us medical details. If you do, we will only use them to answer you and we will not add them to your customer record.

Where we get it

Directly from you, when you order, sign up, create an account or contact us.
Automatically, from your device when you use the site, including through cookies.
From our service providers, who collect information on our behalf, such as our payment and email providers.

How we use it

To sell you things and get them to you. Processing orders and payments, arranging delivery, handling returns and refunds, running Monthly Reload subscriptions, and managing your account.
To talk to you about your order. Order confirmations, dispatch and tracking notices, subscription reminders before each recurring charge, and answers to your questions. We send these whether or not you have opted into marketing, because you need them.
To send you marketing, if you have opted in, and up to two reminders about a checkout you started and did not finish. See the Marketing email section below.
To advertise, and to measure our ads. We advertise on Meta (Facebook and Instagram). Our site uses the Meta pixel and Meta's Conversions API to measure those ads. The pixel runs in your browser, and the Conversions API sends the same kind of information to Meta from our store's systems. Together they tell Meta about actions on our site, such as viewing a product, adding to your cart, starting checkout or placing an order, along with details that help Meta match those actions to a Facebook or Instagram account, such as your IP address, your browser and, in hashed (scrambled) form, contact details like your email address or phone number. We use this to see which ads work, to reach people likely to be interested, and to avoid showing ads to people who have already bought. You can opt out of personalised advertising in your Facebook or Instagram ad settings, and you can limit this tracking with your browser or device privacy settings, for example by blocking or clearing cookies.
To improve what we do. Understanding which pages and products work, and fixing what does not.
For security and fraud prevention. Authenticating accounts and protecting against misuse.
To meet our legal obligations, including tax and consumer law record-keeping.

Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, understand how the site is used, and support and measure advertising. These include the Meta pixel, described above, Google Analytics, which shows us how people use the site, and PostHog, which shows us where people get stuck. PostHog can record a visit (pages viewed, clicks and scrolling) with anything typed into a form hidden before it leaves your browser. It does not run on checkout. You can control cookies through your browser settings. Blocking some cookies will stop parts of the site, such as the cart, from working properly.

Who we share it with

We share personal information only where it is needed to run the business:

Shopify, which hosts the store and processes orders and payments on our behalf.
Klaviyo, which sends our email. If you are on our list, Klaviyo holds your name, email address and purchase history so we can send you relevant email and avoid sending you things you have already bought.
Judge.me, which collects and publishes product reviews.
Our courier, which receives your name, delivery address and phone number so it can deliver your order.
Payment providers, including Shopify Payments (cards, Apple Pay and Google Pay), which handle your payment details directly under their own privacy policies.
Meta (Facebook and Instagram), which receives information through the Meta pixel and the Conversions API, as described above.
Google, which provides Google Analytics and receives information about visits, what is viewed and what is bought on our site through the Google tag.
PostHog, which receives information about how you use our site, such as pages viewed, clicks and scrolling, and recordings of visits with form entries hidden.
Professional advisers and authorities, where we are required by law, or need to establish or defend a legal claim.
A buyer of the business, if we are ever sold or merged, in which case your information would transfer with the rest of the business.

We do not sell your personal information.

Subscriptions

If you start a Monthly Reload, our payment provider securely stores a payment method so it can charge you for each delivery. We do not see or store your full card details.

We keep a record of your subscription, its status and its delivery history for as long as it is active, and afterwards for as long as our records, tax and consumer law obligations require.

Cancelling a subscription stops future charges immediately. You can ask us to delete the rest of your information as set out under Your rights.

Marketing email

We send marketing email to people who have opted in, and we follow the Unsolicited Electronic Messages Act 2007.

The one exception is a checkout reminder. If you enter your email address at checkout and leave before finishing your order, we may send you up to two emails about that checkout within 24 hours. They stop as soon as you place the order, and each one has an unsubscribe link.

Every marketing email has a working unsubscribe link, and unsubscribing takes effect promptly. We currently use email only. If we ever add text messages, we will ask for your consent separately rather than treating your email consent as covering it.

Unsubscribing from marketing does not stop emails about an order you have placed or a subscription you hold, because those are part of providing the service to you.

Reviews

If you leave a review, we may publish it, in whole or in part, on our site and in our marketing, along with the display name you chose. Reviews are public. Do not include anything in a review that you would not want published, including other people's details.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Information you submit is transmitted to Shopify and may be processed in countries other than New Zealand.

We also use Shopify features that draw on data from your interactions with our store, other merchants, and Shopify itself. For those features Shopify is responsible for the processing, including for responding to requests about it. You can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal at privacy.shopify.com.

Children

Our products are for adults. You must be 18 or older to buy from us. We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has given us their information, email us and we will delete it.

Security and how long we keep things

We take reasonable steps to protect personal information, but no system is perfectly secure and information sent over the internet is never completely safe in transit. Please do not send us sensitive information through insecure channels.

How long we keep information depends on why we hold it: to run your account or subscription, to meet tax and consumer law obligations, to resolve disputes, or to enforce our terms. When we no longer need it, we delete it or de-identify it.

Your rights

Under the Privacy Act 2020 you have the right to:

Ask what we hold about you. We will tell you, and give you a copy.
Ask us to correct it if it is wrong, or to attach a statement of correction if we disagree.

Email hello@thehoneyco.nz and we will respond within 20 working days, as the Act requires. We may need to confirm who you are before we release information.

You can also:

Ask us to delete information we no longer need to hold.
Unsubscribe from marketing at any time, using the link in any marketing email.
Opt out of personalised advertising through your device or the relevant platform.

Some of these rights are not absolute. Where we cannot do what you have asked, we will tell you why.

Complaints

If you are unhappy with how we have handled your personal information, email hello@thehoneyco.nz first and we will try to sort it out.

If you are still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz, or call 0800 803 909.

Information sent overseas

Our service providers, including Shopify, Klaviyo, Judge.me, Meta, Google and PostHog, may store and process your information outside New Zealand. Where we do that, we take reasonable steps to ensure your information is protected by comparable safeguards to those under the Privacy Act 2020.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will post the updated version here and change the "Last updated" date. If a change materially affects how we use your information, we will tell you.

Contact

Questions about this policy, or about your information:

hello@thehoneyco.nz
022 588 0301
TheHoneyCo, 222 Reid Road, Ohaupo, Waikato 3882, New Zealand