Privacy notice

Your data matters, and we take looking after it seriously. This Privacy notice explains what information we collect, how we use and protect it, and your rights under the Privacy Act 2020.

Last updated: 3rd September 2026

This notice was issued on 03/09/2026. In the event we amend this privacy notice, we will publish these changes on our website. By continuing to use our services, you will be taken to have accepted the latest version of the notice, and it’s up to you to check for any changes. The most recent version of this privacy notice will apply.

Introduction

betterbunch is the trading name for betterbunch Limited. The New Zealand company number is 6925434.

This privacy notice sets out how betterbunch will handle your personal information and what controls you have in relation to it. We operate in New Zealand and are committed to complying with the Privacy Act 2020.

betterbunch obtains personal information from a variety of sources. You may be:

(a) a visitor to the our website or sign up for our newsletter (a Website Visitor);

(b) a business that uses our services (a Business Customer); or

(c) a customer, client or patient of a Business Customer, whose details a Business Customer has provided to us so that we can send you follow-up communications on the Business Customer's behalf (a Customer).

Where a Business Customer uses our services in connection with the provision of health services, that Business Customer is a Health Customer, and our Health Data Schedule applies in addition to this notice.

Collection

In this privacy notice, “personal information” has the same meaning as in the Privacy Act 2020 (information about an identifiable individual).

We need to collect personal information in order to operate our business and to provide our services. We collect information about our Business Customers directly from them. We collect information about Customers from the relevant Business Customer, who is responsible for obtaining your consent (or otherwise having a lawful basis) to provide us with your personal information so that we can send follow-up communications and collect feedback on the Business Customer's behalf. We only use Customer information for the purposes described in this notice and do not use it for our own unrelated purposes.

We may collect the following personal information as part of delivering our services:

•  Name
•  Address
•  Location
•  Telephone number
•  Physical address
•  IP address
•  GST number
•  Credit and debit card information
•  Payment information

How we use your information

Where we have collected Business Customer information directly from you, we will use it for:

•  the purposes of providing services to you
•  for research and marketing purposes
•  for dissemination of information to you
•  to allow you to participate in any competitions, promotions or surveys
•  for other purposes which we notified you about at the time of collection.

Where we have collected Customer information from a Business Customer, we will only use that information for:

• sending you follow-up communications and collecting your feedback or review on behalf of the Business Customer
• administering the Better Rewards prize draw, where the Business Customer has that feature enabled and you are an eligible participant
• complying with our legal obligations
• other purposes which we notified you about at the time of collection.

Storage of personal information

We will take reasonable steps to ensure the security of your personal information against loss, unauthorised access, disclosure, or misuse, including requiring any subprocessor we engage to store or process personal information to maintain
appropriate security safeguards.

Where we engage third parties to store personal information, we require third parties to maintain strict security and confidentiality standards in respect of such personal information.

We only keep your personal information for as long as it is required. information:Our standard retention periods are:

• for Customers of a non-Health Customer, we retain your identifiable contact and feedback information for as long as the Business Customer's account remains active, and delete it within a reasonable period after the Business Customer's account is cancelled, unless the Business Customer has selected a shorter period;

• for Customers of a Health Customer, we retain your identifiable contact and feedback information for 120 days from your last interaction with us (or, if shorter, in accordance with the Health Data Schedule), after this period, the information is purged and your contact details are retained only in hashed, non-identifiable form. If you have unsubscribed, made a spam report, or been added to a blocklist to prevent further communication, your relevant contact details may remain identifiable solely so we can ensure you are not contacted again if your details are later uploaded to us;

• in all cases, for as long as required by law, for example to meet our tax obligations; and

• if you ask us to delete your information earlier than these periods, we will handle that request through our privacy request process, subject to any information we are otherwise required by law to retain.

Disclosure

We generally will not disclose your personal information to others. The only times we will disclose your information is:

•  you are a Customer, we will provide the Business Customer with any feedback or review you submit, and information about how you interacted with our communications, so that the Business Customer can see and respond to it;
•  if it relates to the purposes for which you provided the information
•  we are otherwise required by law to disclose it
•  to protect us against unlawful activity, fraud or any danger to public safety.

Payment information

We use Stripe to accept and manage payments conducted through our Website on our behalf.

Stripe collects the information you input when purchasing our services and we receive a payment verification telling us that your payment was successful.

The payment information that is collected by Stripe through our Website will depend upon the payment method that you choose from the list of available payment methods. The information that may be collected will include name, email, billing or shipping address, payment method information such as credit or debit card number or bank account information, purchase amount, date of purchase and in some instances information about the purchase.

Please refer to Stripe’s Privacy Policy if you would like more information on their privacy practices.

Cookies

A cookie is a piece of code that creates a file on your computer to track the pages that you view on our website. We may use cookies, and similar technology, on the website for a variety of purposes. Cookies allow browsing and other services offered through our website and need to be enabled.

Google Analytics

Google analytics aggregate your personal data and shows us how our website is performing. The information we collect is related to browsing characteristics including search terms and pages viewed. We do not directly share this information relating to your website usage with any other party. However as detailed within Google’s Privacy Policy, Google may use this information for advertising purposes.

Health Customers

If you are a Business Customer using our services in connection with the provision of health services, our Health Data Schedule (available on request) applies in addition to this notice, and sets out additional detail about the Health Information Privacy Code 2020, how we handle indirect collection of Customer information, and our retention and disposal practices for Customer information.

Better Rewards

Where a Business Customer has enabled the optional Better Rewards feature, we administer a prize draw on the Business Customer's behalf from eligible participants approximately every 90 days. We do not use your participation in Better Rewards for our own marketing or unrelated purposes.

Your rights

You have the right to access and correct any personal information we hold about you. If you are a Customer, you can also make this request through the Business Customer who provided us with your details, or directly to us.

If you have any questions about our privacy policies or practices, you wish to access or request the correction of your personal information, or you wish to complain about how we are treating your personal information, please contact us at [email protected]. If your query
relates to information collected in connection with health services, our Health Data Schedule contains additional information about how the Health Information Privacy Code 2020 applies.

You can obtain further general information about your privacy rights or make a complaint to the Office of the Privacy Commissioner in New Zealand by calling 0800 803 909, emailing [email protected] or visiting www.privacy.org.nz.