Privacy Policy

Clear information about what we collect, why we collect it, who we share it with, and the choices you have.

Who this policy covers

This Privacy Policy explains how Under the Hood BBQ collects, uses, stores, discloses, and protects personal information when you use this website, buy products, create an account, book catering or masterclasses, subscribe to updates, contact us, or otherwise deal with us.

We are based in Nelson, New Zealand. You can contact us at info@underthehoodbbq.co.nz or +64 21 242 0799.

Information we collect

  • Account details, including your name, email address, password credentials managed through our website, phone number, saved delivery and billing addresses, and account preferences.
  • Order and checkout details, including products purchased, quantities, discounts, shipping method, GST and processing fee calculations, order status, delivery address, billing address, and payment status.
  • Payment-related information needed to process transactions. Card details are handled by Stripe. We store payment status, transaction identifiers, and gateway summaries, but not your full card number.
  • Catering, event, masterclass, course, gift card, stockist, contact, and support information you submit, such as dates, guest counts, locations, messages, signatures, recipient details, and business contact details.
  • Newsletter subscription details, including your email address, consent/status, groups or campaign records, and email delivery information.
  • Technical and usage information, such as device/browser information, IP address, server logs, cookies, cart/session identifiers, authentication cookies, and security or fraud-prevention signals.

How we collect information

Most information is collected directly from you when you fill in forms, create an account, place an order, save an address, subscribe, or contact us.

Some information is collected automatically through the website, cookies, server logs, payment and email providers, and ecommerce tools. Where information is collected from another source, we treat it consistently with the Privacy Act 2020 and the indirect collection notice requirements that apply from 1 May 2026.

How we use information

  • To provide the website, accounts, carts, checkout, orders, delivery, catering bookings, masterclasses, course access, gift cards, stockist applications, and customer support.
  • To process payments, refunds, discounts, GST, shipping, fraud checks, and order records.
  • To send transactional emails, order updates, booking responses, support replies, and newsletter or marketing emails where you have subscribed or where the law allows.
  • To improve products, services, website performance, stock planning, customer experience, and internal administration.
  • To meet legal, tax, accounting, security, dispute-resolution, and record-keeping obligations.

Cookies and similar tools

We use cookies and similar storage to keep you signed in, remember cart/session state, support checkout, protect the site, and understand how the website performs. You can block some cookies in your browser, but core account, cart, and checkout features may not work correctly without them.

Who we share information with

We only share personal information where reasonably needed to run the business, provide services, comply with the law, or protect our rights and customers.

  • Payment providers such as Stripe for payment processing, fraud prevention, chargebacks, and refunds.
  • Email and communications providers such as Resend for transactional emails, newsletters, and contact form notifications.
  • Delivery, fulfilment, event, catering, technology, hosting, analytics, accounting, legal, and professional service providers.
  • Government, law enforcement, regulators, courts, or other parties where required by law or necessary to protect rights, safety, security, or prevent fraud.

Storage, security, and retention

We take reasonable safeguards to protect personal information against loss, unauthorised access, misuse, disclosure, alteration, and destruction. This includes access controls, secure authentication, payment-provider handling for card details, and limiting administrative access to people who need it.

We keep personal information only for as long as reasonably needed for the purposes above, including order history, tax/accounting records, warranties, disputes, fraud prevention, customer support, and legal obligations. We may anonymise or delete information when it is no longer required.

Your choices and rights

  • You can access and update account details and saved addresses in your account area.
  • You can unsubscribe from marketing emails using the unsubscribe option in those emails or by contacting us.
  • You can ask to access or correct personal information we hold about you.
  • You can raise a privacy concern with us, and you may contact the New Zealand Office of the Privacy Commissioner if you are not satisfied with our response.

Privacy incidents

If a privacy breach occurs and it is likely to cause serious harm, we will assess it and, where required, notify affected people and the New Zealand Office of the Privacy Commissioner.

Changes to this policy

We may update this policy as our website, products, providers, or legal obligations change. The latest version will be published on this page.

Last updated: 30 June 2026