1. Controller and scope
Nuvellianessara Limited is responsible for personal information described in this policy when it determines why and how that information is handled. The policy applies to visitors to nuvellianessara.com and people who contact us about products, tastings, orders or general enquiries.
New Zealand privacy obligations may apply to our activities. Where the European Union or United Kingdom data-protection rules apply to a particular interaction, we also describe relevant GDPR-style rights and lawful bases below.
2. Information we may handle
Information you provide
- name and contact details such as email address and telephone number;
- enquiry text, preferred tasting date, group size and other information you choose to include;
- order-related details where purchasing services are made available, including delivery and transaction references;
- communications with our team and records needed to resolve customer-service questions.
Information created through use of the site
The site may store limited browser-side preferences needed for functions such as a temporary basket count. We do not use this local preference to build advertising profiles. If server logs are maintained by a hosting provider, they may contain technical data such as time of request, requested page, browser type and truncated or full IP address for security and reliability purposes.
3. Purposes and lawful bases
We handle personal information to respond to enquiries, arrange tasting sessions, provide requested products or services, maintain site security, keep appropriate business records, comply with legal duties and protect legitimate business interests. Depending on the context, the GDPR lawful basis may be performance of a contract or steps requested before entering one, compliance with a legal obligation, our legitimate interests in operating and securing the service, or consent where consent is specifically requested.
Where we rely on legitimate interests, we consider whether our interest is necessary and proportionate and whether your rights override that interest. Where processing is based on consent, you may withdraw consent for future processing at any time without affecting processing already carried out lawfully.
4. When information may be shared
We may disclose relevant information to service providers that support hosting, communications, order fulfilment, accounting, professional advice or security. Providers are expected to use information only for agreed purposes and to protect it appropriately. We may also disclose information where required by law, court order or a competent public authority, or where reasonably necessary to establish, exercise or defend legal claims.
We do not sell personal information. We do not disclose customer contact data to unrelated parties for their own direct-marketing use.
5. International transfers
Some service providers may process information outside New Zealand or outside the country in which you live. Where European data-protection law applies, transfers to countries without an adequacy decision are intended to use an appropriate safeguard, such as approved standard contractual clauses, together with supplementary measures where necessary.
6. Retention
We retain personal information only as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, security or dispute-resolution requirements. Routine enquiries are generally kept for the period needed to answer and follow up the request. Contract and transaction records may be retained longer where tax, accounting or consumer-law rules require it. Information that is no longer needed is deleted, anonymised or securely archived according to the relevant system.
7. Your privacy rights
Depending on your location and the law that applies, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction of processing, portability of information you supplied, and objection to processing based on legitimate interests. You may also have the right to complain to a relevant privacy or data-protection authority.
To exercise a right, contact info@nuvellianessara.com and describe the request clearly. We may ask for proportionate information to verify identity before disclosing or changing personal information. We will respond within the timeframe required by applicable law.
8. Security
We use administrative and technical measures appropriate to the nature of the information handled. These may include access controls, software updates, limited staff access, secure configuration, backup practices and review of service providers. No internet transmission or storage system can be guaranteed to be completely secure, so security controls are reviewed as circumstances change.
9. Children
The website and our tasting and retail services are directed to a general adult audience and are not designed to collect personal information from children. If we learn that personal information from a child has been provided without appropriate authorisation where authorisation is required, we will take reasonable steps to delete it.
10. Automated decision-making and direct marketing
We do not use personal information submitted through this site for solely automated decisions that produce legal or similarly significant effects. Marketing communications, if offered, should include an appropriate way to opt out, and an opt-out request will be respected for future marketing messages.
11. Policy changes and contact
We may revise this policy when website functions, service providers or legal requirements change. The updated date at the top indicates the current version. Material changes will be presented appropriately on the site where required.
Questions or privacy requests may be directed to info@nuvellianessara.com or to Nuvellianessara Limited, Level 2, 119 Queen Street, Auckland Central, Auckland 1010, New Zealand.
Return to Home