At Woolaston Limited, trading as Morning Shines, we are committed to complying with the New Zealand Privacy Act 2020 and maintaining the highest standards for the collection, use, storage, and disclosure of your personal information.
This Privacy Policy explains what personal information we collect, how we collect it, how we use and share it, how we keep it secure, your rights to access and correct your information, and how we manage data from your use of our digital services, including our website.
By using our website or providing your personal information to us by other means, you consent to the collection, storage, use, and disclosure of your personal information in accordance with this Privacy Policy.
What Personal Information We Collect
We may collect the following types of personal information:
- Name and contact information (email, phone number, delivery address)
- Date of birth or age (when relevant)
- Website account registration details
- Transaction history (purchase date, payment method, products bought, and amount spent)
- Customer communication records (emails, phone calls, enquiries)
- Marketing preferences (e.g. whether you subscribe to our newsletters.
We may also collect certain data automatically when you visit our website, such as via cookies or other tracking technologies.
How We Use Personal Information
Cookies and Website Data
We collect and use your personal information for the following purposes:
- Fulfilling and delivering your orders
- Providing customer support and managing your account
- Sending product updates, special offers, and marketing communications (you can opt out at any time)
- Conducting customer surveys, product research, and market analysis
- Analysing user behaviour and improving our services and digital experience
- Keeping our records accurate and up to date
- Meeting legal and compliance obligations
Cookies and Website Data
Our website uses cookies to enhance your browsing experience. Cookies allow us to:
- Save items in your shopping cart
- Recognise returning users
- Analyse website performance and improve functionality
Most web browsers accept cookies by default, but you can manage or disable them in your browser settings. Please note that some website features, such as checkout, may not function properly if cookies are disabled.
Who We Share Your Personal Information With
We may share your personal information with trusted third parties, including:
- Delivery and payment providers
- Data analysis and marketing services
- IT infrastructure and website hosting providers
- Research agencies we partner with
In some cases, we may share your information with providers located outside New Zealand (e.g. cloud storage services). In all cases, we ensure that:
- Your data is shared securely
- Third parties are contractually obligated to protect your privacy
- Your data is only used for the purpose it was supplied
- Any data no longer required is securely destroyed or anonymised
We may also disclose your personal information where required or permitted by law, such as to assist with a police investigation.
How We Protect Your Personal Information
We take information security seriously and have implemented robust technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or modification.
When your information is no longer needed for any lawful purpose, we take steps to delete or anonymise it. If you ever suspect a communication from us is fraudulent, please contact us immediately with a copy of the message.
Payment Security and Card Data Handling
All payment information on our website is transmitted securely using SSL (Secure Sockets Layer) encryption.
We do not store your credit card details on our servers.
All transactions are processed via **Verifone**, a PCI DSS compliant payment gateway, ensuring that your payment information is handled securely and in accordance with international security standards.
Digital Services and Social Media
We provide services through digital platforms such as our website, email campaigns, and social media channels like WeChat and Facebook. We may collect technical information such as:
- Device and browser type, software versions
- IP address and device identifiers
- Location data (if enabled)
- User activity (e.g. links clicked, pages visited)
- Source websites and session timestamps
In some cases, we may use encrypted (hashed) email addresses to match data with platforms like Facebook for advertising purposes. The hashed data is not stored or reused by these platforms and is deleted after matching.
Some of this data is aggregated or anonymised and cannot be linked to an individual. However, if you’ve logged in or followed a link sent via email, we may associate usage data with your personal information.
Our digital platforms may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
Your Rights and Contact Information
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Opt out of marketing communications
To make a privacy-related enquiry or request access to your personal information, please contact us:
Email: [email protected]
Phone: +6402041510863
Address: Manukau, Auckland
Last updated: 15 August 2025