Privacy Policy

  1. Definitions
    1. In these terms and conditions of trade the following words shall have the meanings specified:
      1. Auntsfield
        Auntsfield Estate Limited, NZBN 9429039281500.
      2. Privacy Act
        the Privacy Act 2020.
      3. Privacy Policy
        this privacy policy.
      4. Site
        the Website together with the Social Media Pages.
      5. Social Media Pages
        any of Auntsfield’s social media pages, including Facebook, Instagram, LinkedIn, Youtube, Twitter and Snapchat or similar.
      6. Website
        Auntsfield’s website at
  2. Privacy Policy
    1.   This Privacy Policy seeks to ensure that Auntsfield complies with its obligations under the Privacy Act.
    2. Auntsfield agrees to notify you of:
      1. the organisation collecting information from you and with whom the information may be shared;
      2. what information is collected from you and how it is used;
      3. what choices are available to you regarding collection, use and distribution of the information;
      4. the kind of security procedures that are in place to protect the loss, misuse or alteration of information under Auntsfield’s control; and
      5. how you can correct any inaccuracies in the information.
    3. If you feel that Auntsfield is not abiding by this Privacy Policy, please contact Auntsfield at the contact details on the Website.
  3. Collecting information
    1. Collection.  Auntsfield is the sole entity which holds the information collected from you on the Site.  Auntsfield will not sell, share, or rent this information to others in ways different from what is disclosed in this statement. Auntsfield may disclose or share your information with third parties in the following circumstances:
      1. With your consent.  Auntsfield may share your information with third parties when you have provided your consent or requested us to do so.  
      2. Third party service providers.  Auntsfield may share your information with companies who provide us services (such as information processing and website hosting) so that we can administer the Site.
      3. Legal purposes.  Where it is legally required by a third party or law enforcement authority in any jurisdiction (in which case Auntsfield will generally require a production order or similar court order unless necessary to prevent or lessen a serious threat to public health or public safety or the life or health of you or someone else) and including the reporting of data breaches to affected individual(s) and the Privacy Commissioner where required by the Privacy Act.
      4. Auntsfield’s rights.  To protect and defend Auntsfield’s rights, property or safety or that of third parties, including enforcing the Privacy Policy, the terms and conditions of use of Website], the terms of trade which apply to the supply of wine by Auntsfield to its customersand any terms of use, or in connection with investigating and preventing fraud or other suspected illegality or security issues.
      5. To protect a Site.  Where it is needed to detect, prevent or address fraud, security or technical issues concerning a Site.
      6. Business sale.  In the event Auntsfield sells its business we may disclose your information to the prospective buyer.  If substantially all of Auntsfield’s assets are acquired by a third party, your information will be one of the transferred assets.
      7. Aggregated or de-identified information.  We may disclose or use aggregated or de-identified information for any purpose.  For example, Auntsfield may share aggregated or de-identified information with business prospects or partners.
    2. Information.  Auntsfield collects information from our users at several different points on the Site, including information that you provide to us on a Site or when you sign up to Auntsfield’s newsletter.  Auntsfield will not collect identifying information from users if it is not necessary.
    3. Registration.  No registration is required in order to use the Website, however you will be asked to confirm that you are 18 years of age or over before accessing the Website.
    4. Website orders.  If you make purchase orders through the Website you must register with a valid email address and youmust provide contact information (like name and delivery address) and financial information (credit or debit card number, expiration date, billing address, and billing phone number).  If Auntsfield has trouble processing an order, this contact information is used to get in touch with you.  This information is taken in a secure area, is encrypted for our customers’ protection, and is not sold or shared with anyone else under any circumstances.
    5. Cookies.  A cookie is a piece of data stored on the end-user’s hard drive containing information that relates directly to the end-user’s visit to our Website.  Any information placed in the cookie is accessible only to Auntsfield and will not be sold or shared with anyone else under any circumstances.  Auntsfield uses a cookie to store a unique session identifier, and this allows Auntsfield to maintain your shopping cart and state selection from one page request to the next.  Auntsfield is also able to maintain your session information from one visit to the next.  By setting a cookie on the Website, the user would not have to log in more than once, thereby saving time while on the Website.  If a user rejects the cookie, they may still browse the Website, but the user will be unable to log in or make a purchase.  The use of cookies also enables Auntsfield to track and target the interests of its users to enhance the experience on the Website and show you the products that your order history indicates you prefer.
    6. Google Analytics.  The Website uses Google Analytics, a web analytics service provided by Google, Inc.  Google Analytics uses “cookies”, which are text files placed on your computer, to help Auntsfield analyse how users use the Website.  The information generated by the cookie about your use of the Website (including your IP address) will be transmitted to and stored by Google on servers in the United States.  Google will use this information for the purpose of evaluating your use of the Website, compile reports on Website activity for Auntsfield and providing other services relating to Website activity and internet usage.  Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.  Google will not associate your IP address with any other data held by Google.  You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of the Website and your use of Auntsfield’s services will be impaired.  By accessing the Website, you consent to the processing of data about you by Google in the manner and for the purposes set out above
    7. Log Files.  Auntsfield uses IP addresses to analyse trends, administer the Website, track user’s movement, and gather broad demographic information for aggregate use.  IP addresses are not linked to personally identifiable information.
    8. Promotional emails.  If a user wishes to subscribe to Auntsfield’s newsletter, Auntsfield will ask for contact information such as name and email address.  Every email that Auntsfield sends provides you with the opportunity to unsubscribe from the newsletter.
    9. Information about minors.  Our services do not address, and we do not knowingly collect information from, people under the age of 18.
    10. Personal information.  If you do not wish to provide us with personal information, we will be unable to properly provide our services to you.
    11. Retention.  We retain your information for as long as it is needed to be able to provide our services to you.
  4. Security Procedures
    1. Security of data.  We have taken and will take steps to ensure personal information we hold about you is protected from risk such as loss, unauthorised access, or use, destruction, modification or disclosure.  No data transmission over the internet is totally secure.  As a result any personal information you send to us over the Internet (including via email) is sent at your own risk.
    2. Sensitive information.  When the order form asks users to enter sensitive information (such as a credit card number), that information is encrypted and is protected with an SSL certificate provided by Let’s Encrypt. Credit Card details are protected   by the secure Hosted Payment Page provided by Windcave.
      While on a secure page such as Auntsfield’s payment page, the lock icon on the bottom of Web browsers such as Chrome, Firefox, Safari and Microsoft Edge becomes locked, as opposed to unlocked, or open, when you are just ‘surfing’.
    3. Access to information.  While Auntsfield uses DPI encryption to protect sensitive information online, it also does everything in its power to protect user-information offline.
      While Auntsfield uses SSL encryption to protect sensitive information online, it also does everything in its power to protect user-information offline.
      All of Auntsfield’s users’ information, like the sensitive information mentioned above, is restricted in Auntsfield’s offices. Only employees who need the information to perform a specific job (for example, a customer service representative) are granted access to personally identifiable information. If one of these people leaves their workstation, they are required to lock their station until they return.  In addition, all employees are kept up to date on our security and privacy practices.  Finally, the servers that we store personally identifiable information on are kept in a locked and secure environment.
    4. Cross border disclosure.  Should Auntsfield begin to disclose any personal information to organisations or people outside of New Zealand, you agree to that disclosure and acknowledge that Auntsfield shall ensure that any it shall ensure that any personal information disclosed is adequately protected.
    5. Questions.  If you have any questions about the security at Auntsfield’s Website, email
  5. Privacy breaches
    1. What is a privacy breach?  A privacy breach occurs where there is an unauthorised or accidental access to, or disclosure, alteration, loss, or destruction of, personal information held by us or an action that prevents us from accessing personal information on either a temporary or permanent basis. 
    2. Notifiable privacy breach.  If we learn of a privacy breach involving personal information we hold, we will assess whether the privacy breach is likely to cause serious harm to an affected individual or individuals.  If our assessment finds that the privacy breach has caused serious harm to an affected individual or individuals, or is likely to do so, we will notify the individual or individuals and the Privacy Commissioner within the timeframes prescribed by the Privacy Act.
  6. Corrections
    1. Correction of Information.  Subject to certain grounds for refusal set out in the Privacy Act, you have the right to request confirmation from us that Auntsfield holds information about you, and a copy of such information.  You are also entitled to request the correction of the information Auntsfield holds about you.
    2. .  If you would like to exercise either of these rights, please contact Auntsfield at the contact details on the Website.  Your request should provide evidence of who you are and the details of your request (e.g. the information, or the correction, that you are requesting).
  7. General
    1. Changes.  Auntsfield reserves the right to alter, change or modify this Privacy Policy at any time.
    2. Notification of changes.  If Auntsfield decides to change this Privacy Policy, those changes will be posted on the Website so users are aware of what information Auntsfield collects, how Auntsfield uses it, and under what circumstances, if any, Auntsfield may disclose it.  If at any point Auntsfield decides to use personally identifiable information in a manner different from that stated at the time it was collected, Auntsfield will notify users by way of an email.  Users will have a choice as to whether or not we use their information in this new manner.  We will use information in accordance with the Privacy Policy under which the information was collected.
    3. Severability.  If any provision of this Privacy Policy shall be invalid, void, illegal or unenforceable, the validity, existence, legality and enforceability of the remaining provisions shall not be affected, prejudiced or impaired.
    4. Jurisdiction.  This Privacy Policy are governed by the laws of New Zealand and each party irrevocably and unconditionally submits to the non-exclusive jurisdiction of the courts of New Zealand.
    5. Contact us.  If you have any questions, concerns or complaints in relation to the Site or the Privacy Policy please contact Auntsfield at the contact details on the Website.

Back to top