GDPR Information

Last Updated: September 22, 2026

1. Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union. While Orchard Robin is based in New Zealand, we respect the principles of GDPR and apply similar standards to all our data processing activities.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to fulfill our service obligations to you
  • Consent: For marketing communications and non-essential cookies
  • Legitimate Interest: For website improvement and fraud prevention
  • Legal Obligation: When required to comply with applicable laws

3. Your Rights Under GDPR

3.1 Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

3.2 Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

3.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected.

3.4 Right to Restriction

You can request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another organization.

3.6 Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

3.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account and order information: 7 years for accounting and tax purposes
  • Marketing communications: until you unsubscribe or request deletion
  • Website analytics data: 26 months

5. Data Transfers

Your personal data is primarily processed and stored in New Zealand. If we transfer data outside of New Zealand or the EU, we ensure appropriate safeguards are in place to protect your information.

6. Data Protection Officer

For questions about data protection or to exercise your rights, you can contact our data protection contact:

Email: [email protected]
Address: 487 Brightwater Road, Brightwater, Nelson 7081, New Zealand

7. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

8. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

9. How to Exercise Your Rights

To exercise any of your GDPR rights, please:

  • Email us at [email protected] with your request
  • Include sufficient information to identify yourself
  • Specify which right you wish to exercise

We will respond to your request within 30 days.