Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 18 May 2026 Effective date: 18 May 2026 Jurisdiction: New Zealand / GDPR

1. Who We Are

This Privacy Policy applies to the website located at sparkearthplant.site (the "Website"), operated by:

sparkearthplant
Level 3, 72 Dominion Road
Mount Eden, Auckland 1024
New Zealand
Phone: +64 9 623 4810
Email: message@sparkearthplant.site

We are the data controller for all personal data processed through this Website. We are committed to protecting your privacy and handling your personal information responsibly in accordance with the New Zealand Privacy Act 2020 and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

2. Personal Data We Collect

We collect personal data only when you actively provide it to us or when it is generated automatically through your use of the Website.

2.1 Data You Provide Directly

  • Contact form submissions: your full name, email address, and message content;
  • Newsletter subscriptions: your email address;
  • Cookie preferences: your consent choices stored locally on your device.

2.2 Data Collected Automatically

  • IP address (anonymised where possible);
  • browser type and version;
  • operating system;
  • pages visited, time spent on pages, and referring URLs;
  • date and time of access;
  • cookie identifiers where analytics or marketing cookies are accepted.

We do not collect sensitive personal information (such as health data, ethnicity, or financial information) through this Website.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

  • Responding to enquiries (legal basis: performance of a contract / legitimate interest — to communicate with you at your request);
  • Newsletter delivery (legal basis: consent — you may withdraw at any time by using the unsubscribe link in each email);
  • Website analytics (legal basis: consent — only when analytics cookies are accepted);
  • Legal compliance (legal basis: compliance with legal obligations under New Zealand and applicable international law);
  • Security and fraud prevention (legal basis: legitimate interest — to protect the integrity of the Website and our users).

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website and, with your consent, to analyse usage patterns. Full details of the cookies we use, their purposes, and how to manage them are set out in our Cookie Policy.

Your cookie preferences are stored in your browser's local storage and are not transmitted to our servers. You may update your preferences at any time by clicking the cookie settings link in the footer.

5. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We may share your data in the following limited circumstances:

  • Service providers: trusted third-party providers who assist us in operating the Website (such as hosting providers and email delivery services), who are contractually bound to process your data only on our instructions and to keep it secure;
  • Legal requirements: if required by applicable law, court order, or governmental authority;
  • Business transfers: in the event of a merger, acquisition, or sale of assets, in which case we will notify affected users.

If we transfer personal data outside New Zealand or the European Economic Area, we ensure that appropriate safeguards are in place (such as standard contractual clauses) to maintain an equivalent level of protection.

6. Data Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • Contact form data: retained for up to 24 months from the date of your enquiry, or until the matter is resolved, whichever is sooner;
  • Newsletter subscriber data: retained until you unsubscribe, after which your email address is deleted within 30 days;
  • Website analytics data: retained in aggregated, anonymised form for up to 26 months;
  • Server logs: retained for up to 90 days for security purposes, then deleted.

When data is no longer required, we securely delete or anonymise it.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers;
  • access controls limiting who within our organisation can access personal data;
  • regular review of security practices and third-party provider agreements;
  • no storage of unnecessary personal data on our servers.

While we take every reasonable precaution, no method of transmission over the internet is completely secure. If you suspect a security incident, please contact us immediately.

8. Your Rights (GDPR — European Users)

If you are located in the European Economic Area, you have the following rights under the GDPR:

  • Right of access: to receive a copy of your personal data we hold;
  • Right to rectification: to correct inaccurate or incomplete data;
  • Right to erasure: to request deletion of your data where there is no compelling reason for continued processing;
  • Right to restriction: to request that we limit processing of your data in certain circumstances;
  • Right to data portability: to receive your data in a structured, machine-readable format;
  • Right to object: to object to processing based on legitimate interests or for direct marketing;
  • Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact us using the details in Section 12. We will respond within one calendar month. You also have the right to lodge a complaint with your local supervisory authority.

9. Rights Under the New Zealand Privacy Act 2020

Under the Privacy Act 2020, you have the right to:

  • request access to personal information we hold about you;
  • request correction of personal information that is inaccurate, incomplete, or misleading;
  • complain to the Office of the Privacy Commissioner if you believe we have breached your privacy rights.

The Privacy Commissioner can be reached at: www.privacy.org.nz or PO Box 10094, The Terrace, Wellington 6143, New Zealand.

10. Children's Privacy

This Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us and we will take prompt steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Website following a change constitutes your acceptance of the revised policy.

12. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:

sparkearthplant
Level 3, 72 Dominion Road, Mount Eden, Auckland 1024, New Zealand
Phone: +64 9 623 4810
Email: message@sparkearthplant.site