Privacy Policy

1. Who we are

This website is operated by Zorelian Thessique Limited, located at 148 Colombo Street, Christchurch. We refer to the business as “we”, “us” or “our” in this policy. Our contact email is hello@zorelianthessique.com and our phone number is +64 3 741 2856.

We aim to handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where European data protection law applies to particular processing, we also explain relevant rights under the General Data Protection Regulation (GDPR). The fact that this site can be accessed from another country does not, by itself, mean every country’s privacy law applies to every interaction.

2. Scope and the information we may receive

This policy covers information shared through the website, messages prepared using the contact form, enquiries sent to our published contact email, and ordinary technical information associated with visits to the website. It does not describe processing by an unrelated service unless that service is specifically identified here.

You may voluntarily provide your name, email address, message, ingredient questions, allergy-related requests or other details you include in correspondence. Please do not include payment card details, passwords, medical records or other unnecessary sensitive information in a message.

When the website is hosted, web server and security systems may automatically process technical details such as your IP address, browser type, requested page, approximate visit time, HTTP status and error information. Which technical details are retained depends on the configuration of the hosting environment.

3. How our contact form works

The contact form included with this site prepares a message for your device’s default email application. Submitting that form does not send the message directly to a website database or to a third-party form-processing platform. You must review and send the prepared message from your own email application.

If you choose to send the email, the contents travel through your email provider and ours, and we receive the details you have included. Your email application and email providers may process information under their own policies. If your device does not have an email application configured, you can contact us at hello@zorelianthessique.com.

4. Why we use personal information

We use personal information to answer enquiries, respond to questions about ingredients and the smoothie menu, discuss availability or service arrangements, maintain relevant business correspondence, and help address legitimate customer feedback or complaints.

We may also use limited technical information to deliver website pages, troubleshoot malfunctions, protect the site from misuse and meet our legal obligations. We do not describe the site as having online checkout, user accounts, advertising profiles or newsletter sign-up because those features are not included in the delivered website.

5. Legal grounds where GDPR applies

If and to the extent that the GDPR governs a particular use of information, our legal bases may include taking steps at your request before a contract, performing an agreed service, complying with a legal obligation, and our legitimate interests in responding to enquiries and securing our website, balanced against your interests and rights.

Where processing requires consent, we will seek it and allow withdrawal without affecting the lawfulness of earlier consent-based processing. The presence of a contact form is not consent to advertising. We do not rely on consent for analytics cookies because this delivered website has no analytics-cookie integration.

6. Cookies, analytics and tracking

The website provided here does not include advertising trackers, social media widgets, third-party analytics tags, or a cookie-based marketing system. The local website code does not set analytics or advertising cookies. See our Cookie Policy for information about browser controls and the possibility of strictly necessary cookies in a hosting environment.

If an operator later adds analytics, embedded services, new cookies or other tracking technology, this policy and the corresponding cookie information should be reviewed and updated before the changed feature is used.

7. Sharing and service providers

We do not sell personal information. We may need to share limited information with service providers who support ordinary business operations, such as the company hosting the website or email service providers used to receive enquiries. Those organisations may act under their own contracts and legal obligations.

We may disclose information to competent authorities when required by law, to protect rights, investigate serious misuse or respond to legal proceedings. We seek to limit disclosures to what is appropriate for the particular purpose.

8. Transfers outside New Zealand

Hosting, email transmission and service providers may involve processing outside New Zealand depending on the provider used at deployment. We will consider applicable safeguards and the overseas-disclosure requirements in New Zealand privacy law before making a disclosure that falls within those rules.

Where GDPR provisions on international transfers apply, we will use an appropriate legal mechanism for any restricted transfer. Details of any safeguards will depend on the actual service providers and processing arrangements.

9. How long we retain information

We retain contact correspondence only for as long as reasonably necessary to respond, follow up on the matter, maintain a relevant business record or comply with legal requirements. Retention can vary according to the nature of an enquiry, an ongoing relationship, or a dispute.

Technical web-server logs, when collected by the hosting environment, are retained according to its documented operational and security settings. We aim not to keep identifiable information longer than needed, and will securely delete or de-identify it when retention is no longer justified.

10. Accuracy and security

We aim to keep information accurate for its intended purpose and allow correction where practicable. If you notify us of a change in your contact details, we will consider the correction against any legal duty to preserve an accurate historical record.

We use proportionate administrative and technical precautions to reduce risks of accidental loss, unauthorised access, misuse and disclosure. No internet transmission or storage method can be promised to be completely secure. Avoid sending sensitive details that are not needed for your enquiry.

11. Your New Zealand privacy rights

Under New Zealand’s Privacy Act 2020, individuals can request access to personal information held about them and request correction. You may contact us to make a request. We may need reasonable information to confirm your identity before disclosing or changing personal information.

We will respond according to the applicable law, including any permitted limits, reasons for refusal and review options. If you are concerned about our handling of information, please contact us first so we can investigate and respond.

12. Additional rights where GDPR applies

Where the GDPR applies to your personal information, you may have the rights to access it, correct inaccurate details, erase data in appropriate circumstances, restrict processing, object to certain processing, and receive or transfer data in a portable format where the legal conditions are met.

You may withdraw consent at any time for processing based on consent and complain to an appropriate European supervisory authority where relevant. These rights are subject to the requirements and exceptions in the applicable law and do not necessarily apply to every request.

13. Complaints and supervisory authority

For privacy questions or complaints, write to hello@zorelianthessique.com or contact us using the telephone and street address shown below. Please describe your concern and any relevant correspondence so we can examine it.

In New Zealand, privacy complaints may be raised with the Office of the Privacy Commissioner, including through its official website at privacy.org.nz. If GDPR applies, you may also have the right to complain to a competent supervisory authority in the European Economic Area.

14. Children and young visitors

The website provides general information about a smoothie bar and is not designed to collect personal information from children. A parent or guardian should supervise a child’s use of the contact form. Please do not send us children’s personal information unless it is necessary for a legitimate enquiry.

If we learn that personal information was provided by a child without the appropriate authority and has no legitimate retention purpose, we will consider its deletion in accordance with applicable law.

15. Links, changes and contact details

A link to a third-party website is not an endorsement of that site’s privacy arrangements. Review the relevant third party’s policy if you decide to leave our website. We may revise this policy if our website, services, applicable law or information-handling practices change.

This policy was last updated on 30 October 2026. For questions, access or correction requests, contact Zorelian Thessique Limited at 148 Colombo Street, Christchurch., email hello@zorelianthessique.com or phone +64 3 741 2856.