Privacy Policy
Calvert Vineyard ("Calvert", "we", "us") takes your privacy seriously. This policy explains what personal information we collect when you use our website (calvertvineyard.co.nz), how we use it, who we share it with, and the rights you have under the New Zealand Privacy Act 2020.
1. Who we are
Calvert is a boutique vineyard in Bannockburn, Central Otago. We sell wine through our website, host events at the property, run a Wine Club for members, and book direct stays at our East Wing accommodation. Owen Calvert is the contact for any privacy questions — email info@calvertvineyard.co.nz.
2. What we collect, and why
We only collect personal information you give us when you choose to interact with us. The flows are:
Wine purchases (/checkout)
- Your name, email, phone number, and shipping address
- Card details — handled entirely by Stripe; we never see or store your card number
- Line items + order total (so we can fulfil and ship)
East Wing accommodation bookings (/stay/book)
- Your name, email, phone number, and guest count
- Card details — again, handled entirely by Stripe
- The dates of your stay
- Any notes you choose to add
Wine Club membership (/club)
- Your name, email, phone, date of birth (to verify you're over 18)
- Postal address (for allocation shipments)
- Authentication credentials — your password is hashed and stored by AWS Cognito; we cannot read it
- Your subscription preferences and membership status
Contact and event enquiry forms (/contact, /events)
- Your name, email, phone number
- The message you send us, and any preferences you indicate (event type, guest count, dates, etc.)
Automatic / technical
- Standard web server logs (IP address, browser type, pages visited) — kept for 30 days for security and diagnostics
- Stripe and our payment processor may collect additional information for fraud prevention
3. How we use it
Every email or message we send is triggered by an action you've taken on the site. We use your information to:
- Fulfil your orders, ship your wine, and confirm your bookings
- Process payments through Stripe
- Reply to your enquiries and follow up on Wine Club memberships
- Send essential service emails (order confirmations, booking confirmations, password resets)
- Comply with our legal obligations (age verification, tax records, payment regulations)
We do not send marketing emails unless you have explicitly opted in (e.g. ticked the "I'd love to hear from you guys now and then" box on a form). You can withdraw consent at any time by emailing us.
4. Who we share it with
We only share your information with the third parties we need to in order to run the site:
- Stripe — payment processing. Card details go directly to Stripe; we receive only a payment confirmation. Stripe's privacy policy.
- Amazon Web Services (AWS) — hosts our website, databases, and email-sending infrastructure. Data is stored in the AWS us-east-1 region. AWS does not access your data for its own purposes.
- Airbnb — for guests who arrive via our Airbnb listing only. Direct bookings on our site do not share data with Airbnb.
- NZ Post / our chosen courier — to deliver your wine.
- Wine Collective — only for international orders, when you choose to route through their service.
We do not sell, rent, or trade your personal information to anyone. Ever.
5. How long we keep it
- Order records: 7 years (for tax and legal compliance)
- Booking records: 7 years
- Wine Club member profiles: while your membership is active, then 7 years after cancellation
- Contact / enquiry messages: 2 years
- Server logs: 30 days
- Suppression list (addresses that have bounced or marked email as spam): 1 year for bounces, 5 years for spam complaints — protects you and us from repeated bad sends
6. How we protect it
- All connections to the website are encrypted with HTTPS
- Card details are handled exclusively by Stripe and never touch our servers
- Wine Club passwords are managed by AWS Cognito; we cannot see them
- Our APIs are locked down with CORS, server-side validation, and authentication tokens where appropriate
- All database backups are encrypted at rest
7. Your rights
Under the New Zealand Privacy Act 2020 you have the right to:
- Access the personal information we hold about you
- Correct it if it's wrong
- Withdraw consent for any marketing communications
- Request deletion where we don't have a legal obligation to retain it (e.g. tax records)
- Make a complaint to the Office of the Privacy Commissioner if you believe we've mishandled your data
Email info@calvertvineyard.co.nz with any request and we'll respond within 20 working days, per the Privacy Act timeline.
8. Cookies and analytics
We use a small number of strictly-necessary technical cookies to make features like the cart and Wine Club login work. We don't run third-party advertising trackers. If we add a privacy-respecting analytics tool in future (e.g. Plausible), this section will be updated and we will not collect anything that identifies you personally.
9. International transfers
Our infrastructure is hosted in AWS's us-east-1 region (Virginia, USA). When the domain
transfer to calvertvineyard.co.nz completes, we may migrate to AWS's
ap-southeast-2 region (Sydney) for closer-to-NZ data residency. We will update this policy
if that migration happens. Stripe processes payment data in their global infrastructure
according to their privacy policy.
10. Children
Calvert Vineyard is a wine-related business and our services are intended for adults only. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us and we will delete it.
11. Changes to this policy
If we make material changes to this policy we will note them here and update the "Last updated" date at the top of the page. Substantial changes affecting how we use your personal information will also be emailed to active Wine Club members.
12. Contact
Questions, requests, or complaints about your privacy: info@calvertvineyard.co.nz.
If you're not happy with our response, you can contact the Office of the Privacy Commissioner (NZ) directly.