Our Commitment to Data Protection
We recognize the importance of protecting personal information and maintaining transparency about data handling practices. This document outlines how we collect, process, store, and protect personal data in accordance with applicable privacy and data protection principles.
Data Controller
Solar Tide acts as the data controller for personal information collected through this website and associated service delivery operations. We determine the purposes and means of processing personal data.
Contact information for data protection inquiries:
Legal Basis for Processing
We process personal data based on the following legal grounds:
Contract Performance
Processing personal data is necessary to fulfill delivery service agreements. This includes name, email, delivery address, and service preferences required for order execution.
Consent
For certain processing activities beyond core service delivery, we obtain explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Legitimate Interests
We process some data based on legitimate business interests, provided such interests do not override your fundamental rights and freedoms. This includes operational improvements, fraud prevention, and service quality maintenance.
Legal Obligations
Certain data processing is necessary to comply with legal requirements, such as maintaining records for taxation or responding to valid legal requests.
Personal Data We Collect
Information You Provide
- Identity data: Name, contact details
- Contact data: Email address, delivery address
- Service data: Product selections, delivery preferences, service requests
- Communication data: Correspondence content, inquiry details
Information Collected Automatically
- Technical data: IP address, browser type, device information
- Usage data: Pages visited, time on site, navigation patterns
- Cookie data: As described in our Cookies Policy
How We Use Personal Data
Personal data is processed for the following purposes:
- Fulfilling delivery service requests and managing ongoing service
- Communicating with you regarding orders, deliveries, and service updates
- Coordinating with farm partners for harvest planning and sourcing
- Managing delivery routing and logistics
- Responding to inquiries and providing customer support
- Improving website functionality and user experience
- Maintaining records for operational and legal purposes
- Preventing fraud and ensuring service security
Your Rights
You have the following rights regarding your personal data:
Right to Access
You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about processing activities.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
Under certain circumstances, you may request deletion of your personal data. This right is not absolute and may be limited by legal obligations or legitimate interests.
Right to Restriction of Processing
You may request that we restrict processing of your personal data under specific circumstances, such as when you contest data accuracy or object to processing.
Right to Data Portability
Where processing is based on consent or contract performance and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with relevant data protection supervisory authorities if you believe your data protection rights have been violated.
Exercising Your Rights
To exercise any of these rights, contact us via email at the address provided above. We will respond to requests within reasonable timeframes as required by applicable law.
We may need to verify your identity before fulfilling requests to ensure data security and prevent unauthorized disclosure.
Data Retention
Personal data is retained only as long as necessary for the purposes for which it was collected or as required by law.
Retention periods vary based on data type and purpose:
- Active service data: Retained throughout service relationship and for reasonable period afterward for operational purposes
- Communication records: Retained for reasonable period to address ongoing inquiries or disputes
- Legal compliance data: Retained for periods required by applicable laws
- Marketing consent: Retained until consent is withdrawn
When data is no longer needed, it is securely deleted or anonymized.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
Security measures include:
- Access controls limiting data access to authorized personnel
- Encryption of sensitive data in transit and at rest
- Regular security assessments and updates
- Staff training on data protection practices
- Incident response procedures for potential data breaches
While we implement strong security measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly addressing any identified vulnerabilities.
Data Breach Notification
In the event of a data breach that poses risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.
Third-Party Data Sharing
We do not sell personal data. Limited sharing occurs only when necessary for service delivery:
- Farm partners: Receive aggregated delivery information necessary for harvest planning
- Delivery coordinators: Receive address information required for routing
- Service providers: Third parties providing technical services (hosting, email) under confidentiality agreements
- Legal authorities: When required by law or in response to valid legal processes
Third parties receiving data are contractually required to maintain appropriate security measures and use data only for specified purposes.
International Data Transfers
Personal data is primarily processed and stored within New Zealand. Should international transfer become necessary, we will implement appropriate safeguards to ensure adequate protection in accordance with applicable data protection laws.
Automated Decision-Making and Profiling
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Children's Data
Our services are not directed toward individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of collection from someone under 18, we take steps to delete that information promptly.
Changes to Data Protection Practices
This data protection information may be updated to reflect changes in practices or legal requirements. Material changes will be communicated through website notification or direct email to active service users.
Contact Information
Questions, concerns, or requests regarding data protection should be directed to:
We are committed to addressing data protection inquiries promptly and transparently.
Supervisory Authority
If you have concerns about how we handle personal data that we have not adequately addressed, you may contact the New Zealand Privacy Commissioner:
Office of the Privacy Commissioner
PO Box 10094
Wellington 6143
New Zealand