Privacy Policy

Last updated: 23 October 2026

At Coffee & Moo, we take your privacy seriously. Whether you're browsing our website, placing an order, joining our email list or leaving a review, we want you to know what information we collect, why we collect it and how we look after it.

This Privacy Policy explains how Coffee and Moo ("Coffee & Moo", "we", "us" or "our") collects, uses, stores and shares personal information when you visit www.coffeeandmoo.co.nz, purchase our products, subscribe to our emails or otherwise interact with our business.

Coffee & Moo is a New Zealand-based business operating an online store powered by Shopify.

We handle personal information in accordance with applicable privacy laws, including the New Zealand Privacy Act 2020.

1. Personal Information We Collect

Depending on how you interact with Coffee & Moo, we may collect the following information:

Contact Information

• Your name

• Email address

• Phone number

• Billing and delivery addresses

Order and Transaction Information

• Products purchased, viewed or added to your cart

• Order history and transaction details

• Payment method and payment confirmation

• Returns, exchanges and customer service enquiries

Payments are processed through secure third-party payment providers. Coffee & Moo does not directly store your full payment card details.

Account and Loyalty Information

• Customer account details and preferences

• Loyalty points, rewards and redemption activity

• Purchase history associated with your account

Email Marketing Information

• Your email address and subscription preferences

• Your marketing consent and subscription status

• Email engagement, including opens and clicks where tracking is available

• Information about how you interact with our marketing communications

Reviews and Customer Feedback

• Product reviews and ratings

• Names or display names associated with reviews

• Photos or other information you voluntarily submit with reviews

Website and Technical Information

• IP address

• Browser and device information

• Website activity and browsing behaviour

• Cookies and similar tracking technologies

We collect only the information reasonably necessary to operate our business, provide our services and improve your shopping experience.

2. How We Collect Your Information

We may collect personal information:

• Directly from you when you place an order, create an account, subscribe to emails or contact us.

• Automatically when you browse our website or interact with our emails.

• Through our ecommerce platform and connected applications.

• From payment processors, delivery providers and other service providers involved in fulfilling your orders.

• When you voluntarily submit reviews, feedback or participate in our loyalty programme.

3. How We Use Your Information

We use personal information to:

Process and Fulfil Orders

To process payments, prepare and dispatch orders, provide tracking information, manage returns and exchanges, and communicate important order updates.

Provide Customer Support

To respond to questions, resolve issues and assist with products, orders or services.

Manage Customer Accounts and Rewards

To operate customer accounts and our loyalty programme, including awarding points, tracking rewards and managing redemptions.

Collect Customer Reviews

To request feedback, collect and display product reviews, and improve our products and customer experience.

Send Marketing Communications

If you have subscribed or we are otherwise permitted by applicable law, we may send emails containing:

• New product releases and collections

• Exclusive subscriber offers and discounts

• Sales, promotions and special announcements

• Behind-the-scenes updates and Coffee & Moo news

• Personalised product recommendations

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our emails.

Unsubscribing from marketing does not prevent us from sending essential transactional communications relating to your orders or account.

Improve Our Website and Services

To understand how customers use our website, improve navigation, personalise shopping experiences and measure the effectiveness of our marketing.

Security and Legal Compliance

To prevent fraud, protect our website, maintain business records and comply with applicable legal, tax and regulatory obligations.

4. Email Marketing and Flodesk

Coffee & Moo uses Flodesk to manage email subscriptions, create and send marketing emails, and operate automated email workflows.

When you subscribe to our email list, your information may be transferred to and processed by Flodesk for purposes including:

• Managing your subscription and marketing preferences

• Sending welcome emails and promotional campaigns

• Delivering subscriber discounts and special offers

• Sending automated follow-up communications

• Measuring email engagement and campaign performance

Where double opt-in is enabled, you may be asked to confirm your subscription before receiving marketing emails.

We respect your email preferences and provide an unsubscribe option in our marketing communications.

We do not sell our email subscriber list.

5. Customer Reviews and Judge.me

We use Judge.me to collect, manage and display customer reviews.

Following a purchase, you may receive an email inviting you to review your order.

If you submit a review, information such as your display name, rating, review text and any voluntarily uploaded images may be displayed publicly on our website.

Judge.me may process relevant customer and order information to provide its review services.

Please avoid including sensitive personal information in publicly submitted reviews.

6. Loyalty Programme and Love Loyalty

Coffee & Moo uses Love Loyalty to operate our customer rewards programme.

If you participate in the programme, information such as your customer details, eligible purchases, points balance and reward redemption activity may be processed to administer your rewards.

This information helps us provide loyalty benefits, manage points and improve the rewards experience.

Participation in the loyalty programme is subject to any applicable programme terms and conditions.

7. How We Share Personal Information

We do not sell customer contact lists or personal information to data brokers.

We may share personal information with trusted third parties where reasonably necessary to operate our business, including:

Shopify

Our ecommerce platform, which hosts our online store and processes customer, order and website information.

Flodesk

Our email marketing platform, which manages subscriptions, marketing communications and email automations.

Judge.me

Our customer review platform, which collects and manages product reviews and review requests.

Love Loyalty

Our loyalty and rewards platform, which manages eligible customer rewards and points.

Payment Providers

Secure payment processing services used to complete transactions.

Delivery and Courier Services

Providers responsible for delivering orders and providing tracking information.

Website Analytics and Advertising Providers

Services used to understand website performance, measure advertising effectiveness and deliver relevant marketing, where applicable.

Other Service Providers

Providers assisting with website functionality, customer support, technical services, security and business operations.

We may also disclose information where required by law, to respond to lawful requests, protect our rights or prevent fraudulent activity.

Some providers may process information for their own purposes in accordance with their applicable privacy policies.

8. Shopify and Customer Information

Our online store is powered by Shopify.

Shopify collects and processes personal information to provide ecommerce services, including website hosting, checkout, order management, security and certain customer experience features.

Information submitted through our website may be processed by Shopify and its service providers, including providers located outside New Zealand.

Certain Shopify features may use information about customer interactions with our store and other Shopify services to improve shopping experiences and support personalised advertising.

For more information, please review the Shopify Consumer Privacy Policy.

You may also be able to exercise applicable privacy choices through the Shopify Privacy Portal.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support website functionality and improve your shopping experience.

These technologies may be used to:

• Remember shopping cart contents and preferences

• Support secure checkout and customer accounts

• Understand website traffic and visitor behaviour

• Measure marketing and advertising performance

• Provide relevant product recommendations and advertising

Some cookies are essential for the website to function, while others support analytics, personalisation or marketing.

You can manage certain cookie preferences through your browser settings and any privacy preference controls made available on our website.

Disabling some cookies may affect website functionality.

Where required by applicable law, we will seek consent before using non-essential cookies or similar tracking technologies.

10. International Data Processing

Coffee & Moo is based in New Zealand, but some of the technology providers we use operate internationally.

As a result, personal information may be stored or processed in countries outside New Zealand, including through Shopify, Flodesk and other service providers.

We take reasonable steps to work with providers that maintain appropriate privacy and security measures.

Where personal information is disclosed overseas, we aim to comply with applicable requirements under the New Zealand Privacy Act 2020, including Information Privacy Principle 12 where relevant.

11. Security of Personal Information

We take reasonable steps to protect personal information from unauthorised access, misuse, loss, alteration or disclosure.

Our website uses Shopify's ecommerce infrastructure, and payments are handled through secure payment processing services.

We also rely on appropriate safeguards provided by our third-party service providers.

While we take privacy and security seriously, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. How Long We Keep Your Information

We retain personal information for as long as reasonably necessary to:

• Fulfil orders and provide customer support

• Maintain customer accounts and loyalty records

• Manage subscriptions and marketing preferences

• Meet tax, accounting and legal obligations

• Resolve disputes and protect our business

Retention periods may vary depending on the type of information and applicable legal requirements.

When information is no longer required, we take reasonable steps to delete, de-identify or securely dispose of it, subject to applicable retention obligations.

13. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include the right to:

• Request access to personal information we hold about you

• Request correction of inaccurate personal information

• Request deletion of certain information where applicable

• Withdraw consent to marketing communications

• Manage certain privacy and advertising preferences

• Make a complaint about how your information has been handled

Under the New Zealand Privacy Act 2020, you have rights to request access to and correction of personal information we hold about you.

Other rights may apply depending on your location.

To make a privacy request, please contact sales@coffeeandmoo.co.nz.

We may need to verify your identity before responding to certain requests.

If you unsubscribe from marketing, we may retain limited information necessary to respect your preference and prevent unwanted marketing communications.

14. Children's Privacy

Our website and services are intended for general shopping purposes and are not specifically directed at children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided us with personal information without appropriate authorisation, please contact us so we can review the situation.

15. Third-Party Websites and Links

Our website and emails may contain links to third-party websites, social media platforms or other online services.

These services operate under their own privacy policies and terms.

We encourage you to review their policies before providing personal information.

Coffee & Moo is not responsible for the privacy practices of websites or services outside our control.

16. Privacy Complaints

If you have concerns about how Coffee & Moo has handled your personal information, please contact us first so we can investigate and respond.

You may also have the right to lodge a complaint with the relevant privacy authority.

In New Zealand, you can contact the Office of the Privacy Commissioner.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or legal requirements.

Any updates will be published on this page, with the revised date shown at the top.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

For questions about this Privacy Policy, your personal information or your privacy rights, please contact:

Coffee and Moo

Email: sales@coffeeandmoo.co.nz

Phone: +64 21 188 8424

Postal Address: P.O. Box 91, Matamata 3440, New Zealand

Website: www.coffeeandmoo.co.nz