Privacy policy

Sulis Hot Tubs Privacy Policy

Last updated: August 4, 2025

1. Introduction

Sulis Hot Tubs (“we”, “us”, “our”) is committed to protecting your personal information in compliance with the Privacy Act 2020 and the Information Privacy Principles (IPPs) set out in Part 3 of that Act. This policy explains how we collect, use, disclose, store, and dispose of personal data.

2. Who we are & Our Contact

Sulis Hot Tubs, Whangamatā / Coromandel, New Zealand. For queries or to exercise your privacy rights, please contact:

Privacy Officer
[Insert name]
Email: [insert email]
Phone: [insert phone]

3. What Personal Information We Collect & Why (IPP 1–3) 

We collect personal information that is necessary for lawful purposes connected with our business, including:

  • Contact details (name, email, phone, address)

  • Purchase/enquiry information (models selected, delivery preferences)

  • Payment information (e.g. credit card sanitised/transient data via secure provider)

  • Marketing preferences (newsletter opt‑in/out)

Personal information is collected directly from you, such as through our website enquiry forms, emails, phone, or in-person visits.

4. Collection Methods & Accuracy (IPP 2, 4) 

  • We collect information directly from individuals unless express authorization is provided to gather from other sources.

  • We take reasonable steps to ensure the accuracy and completion of personal information.

5. Use of Personal Information (IPP 6–9)

We use your information to:

  • Respond to enquiries and manage your orders (delivery, customisation).

  • Communicate service updates, invoice, and support.

  • Send marketing materials if you've opted in (you may opt out anytime).

  • Meet legal obligations, such as warranty support or statutory reporting.

6. Disclosure to Third Parties (IPP 11–12)

We may share personal data with:

  • Service providers acting as agents (e.g. website host, email platform, payment processor—IPPs withheld). Principle 12 does not apply to agent disclosures so long as they do not use the information for their own purposes.

  • Overseas recipients (e.g. marketing or CRM tools outside NZ) — only where:

    • the recipient is subject to comparable privacy safeguards, or

    • you have provided explicit consent, or

    • the information is publicly available or otherwise exempt under law.
      We may rely on the Office of the Privacy Commissioner’s model contract clauses for overseas transfers 

  • Information is stored securely (e.g. password‑protected systems, encrypted backups, access controls).

  • We retain data only for as long as necessary—typically up to 5 years after last interaction, unless otherwise required by law or service delivery.

  • At end of retention we securely destroy or anonymise personal data.

8. Your Rights (IPP 6)

You have rights to:

  • Access your personal information.

  • Request corrections to inaccurate data.

  • Request deletion (right to be forgotten), where no lawful basis for retention remains.

  • Withdraw consent (e.g. for direct marketing).

  • Ask us to stop processing your data based on legitimate interest.

To exercise these rights, contact our Privacy Officer at the details above. We will respond within statutory timeframes.

9. Changes to this Policy

We may update this policy occasionally. The revised version will include a “Last updated” date and be published on our website in advance of coming into effect.

10. Cookies & Online Tracking (IPP 3)

We use cookies and similar tools to enable website functionality, track preference settings, and generate anonymised analytics. You may disable cookies in your browser, although that may limit website usability.

11. Children & Sensitive Information (IPP 1, 3)

  • Our services are not targeted at minors. We do not knowingly collect personal information from people under 16.

  • We do not collect sensitive personal information (e.g. health or biometric data) unless explicitly necessary with your consent.

12. Complaints

If you're unhappy with how we handle your personal data, please contact our Privacy Officer. If we cannot resolve your concern, you have the right to file a complaint with the Office of the Privacy Commissioner in New Zealand.

 

  Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at reuben@sulis.co.nz or contact us at 108 Lindsay rd, Whangamata, Whangamatā, WKO, 3620, NZ