Privacy

Privacy policy.

Nana Dunn + Co is a family business in Papamoa, run by Heidi and Scott Sutcliffe. This policy explains what personal information we collect, why, and how we look after it, under the Privacy Act 2020.

What we collect

When you order from this website we collect your name, email address, phone number (if you give it), delivery address (if you choose delivery), any note you add, and what you ordered.

When you email, phone or message us, we keep what you send us so we can reply.

We do not collect or store card numbers. Card payments are made on Windcave’s secure payment page, and Windcave tells us only whether the payment went through.

How we use it

To make, pack and deliver your order, to arrange collection, to contact you about your order, and to answer your questions. We keep order records for seven years because New Zealand tax law requires it.

We do not sell your information. We do not use it for marketing unless you ask us to. Our newsletter goes only to people who sign up for it, and each one has a link to unsubscribe.

Who we share it with

Only the services we need to run the shop:

  • Windcave, to take card payments.
  • Cloudflare, which hosts this website and stores order records.
  • Resend, which sends our order emails and the messages from this website's contact and wholesale forms.
  • Google Workspace, which holds our email, including your orders and messages to us.
  • PlainBlack Creative, which built and looks after this website and our order system.
  • Go Sweet Spot, which we use to book the courier for your delivery.
  • Mailchimp, which holds our newsletter list and sends the newsletter.
  • Google Analytics, which counts visits to this website.
  • The courier delivering your order, who receives your name, address and phone number.

Some of these services store information on servers outside New Zealand. Each is required to protect it.

Your browser

Your basket, saved serving ideas and saved markets are kept in your own browser, not sent to us, until you check out.

We use Google Analytics to count visits and see which pages are read. It sets cookies in your browser and tells Google the pages you view, your device and your rough location. It does not tell us who you are. This website does not use advertising cookies.

Your rights

You can ask to see the personal information we hold about you, and ask us to correct it. Email [email protected] or phone 027 454 7900.

If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner.

Last updated 27 September 2026.

Contact Heidi