Legal

Privacy Policy

Last updated: 6 May 2026

1. About this policy

Peppy Taps Limited (NZBN TBC) ("we", "us", "our", "Peppy Taps") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, hold, use and disclose your personal information, and is prepared in line with the Privacy Act 2020 and the Information Privacy Principles (IPPs).

This policy applies to the Peppy Taps website (peppytaps.co.nz), our social channels, and any direct dealings you have with us.

2. Information we collect

We only collect information that is reasonably necessary to provide our products and services. The types of personal information we may collect include:

• Contact details — name, email address, postal address, phone number
• Order information — products purchased, billing and shipping addresses, order history
• Payment information — processed securely by third-party payment providers; we do not store full credit card numbers on our servers
• Communications — emails, phone calls and quote requests you send us, including any information you provide in those communications
• Website usage — pages visited, referring URL, browser type, device type, IP address, and approximate location derived from IP
• Retailer location searches — the postcodes or suburbs you enter into our dealer locator (used only to return nearby retailers; not retained)
• Trade applications — business name, NZBN, trading history and other information required to assess retailer applications
• Service and warranty information — proof of purchase, installation details, filter-change records and other diagnostic information you provide when registering a warranty or requesting service
• Files and photos you upload — receipts, proof-of-purchase documents and photos of your tap setup that you attach to a warranty registration, installation booking or service request. These may include incidental information visible in the photos (e.g. your kitchen, or partial billing details on a receipt)

How we collect it

We collect information directly from you when you fill in a form (newsletter signup, quote request, contact enquiry, trade pack request, installation booking, warranty registration, or service request), place an order, or otherwise communicate with us. Our web forms are processed by Formspree (Formspree, Inc., United States), which receives your form submission — including any attached files — and forwards it to our team's inbox. We also collect information automatically through cookies and server logs when you visit our website.

3. How we use your information

We use your personal information for purposes including:

• Fulfilling orders and providing customer support
• Responding to quote requests and enquiries
• Sending order confirmations, shipping notifications and warranty information
• Sending marketing emails about new products, design inspiration and exclusive offers — only if you have opted in
• Processing and administering trade account applications
• Improving our website and products through analytics
• Complying with our legal obligations, including tax, consumer law and warranty obligations

4. Who we share it with

We do not sell your personal information. We may share it with trusted third parties who help us deliver our service, including:

• Logistics and courier partners — to ship your order
• Payment processors — to process payments securely
• Form submission processor (Formspree, Inc., United States) — to receive and route enquiry, warranty, installation booking and service request form submissions, including any files or photos you attach. Formspree forwards submissions to our team and retains them in our account dashboard so we can respond to you. See Formspree's privacy policy.
• Email marketing providers (e.g. Mailchimp) — to send newsletters and transactional emails
• Analytics providers (e.g. Google Analytics) — to understand how our website is used
• Authorised retailers — only where you have asked us to introduce you to one
• Professional advisors — lawyers, accountants, auditors where confidentiality obligations apply
• Government bodies — where required by law (e.g. court orders, ATO requirements)

We require our service providers to handle your information in line with this policy and the Information Privacy Principles.

5. Cookies, analytics and session tools

Our website uses cookies and similar technologies to remember your preferences, understand how you use the site, and improve your experience. Cookies are small text files stored on your device.

We use:

• Essential cookies — needed for the site to function (e.g. shopping cart)
• Analytics cookies — to measure site usage anonymously
• Marketing cookies — only if you consent — to show relevant ads and measure campaign effectiveness

Analytics and session tools we use

We use the following third-party tools to understand how visitors use our site so we can improve it. None of these tools are used to identify you personally:

• Google Analytics 4 (via Google Tag Manager) — aggregates anonymised usage data such as page views, click events and approximate location (country/state). See Google's privacy policy.
• Microsoft Clarity — records anonymised session data including mouse movements, clicks, scroll behaviour and page interactions. We use this to spot usability problems (e.g. confusing navigation, rage-clicks). Form fields and sensitive inputs are masked by default so we cannot see what you type. See Microsoft's privacy statement.
• Vercel Web Analytics — privacy-first page-view tracking. No cookies, no personal data.

You can limit or block these tools using:

• Browser privacy settings — most modern browsers can block third-party cookies and tracking scripts
• Privacy-focused browsers (e.g. Brave) or tracker-blocking extensions (e.g. uBlock Origin, Privacy Badger)
• Vendor-specific opt-outs — Google provides the Google Analytics Opt-out Browser Add-on; Microsoft Clarity respects the controls listed in their privacy statement

Note: Microsoft Clarity does not currently respond to the "Do Not Track" browser signal, so DNT alone is not sufficient to disable session recording. A combination of the above is the most reliable way to opt out. Disabling these tools does not affect the functionality of the site.

You can disable cookies in your browser settings, but some parts of the site may not work correctly without them.

6. Marketing communications

If you subscribe to our newsletter or opt in during checkout, we may send you marketing emails about new products, design inspiration and exclusive offers.

How the newsletter signup works

Newsletter subscriptions are handled by Mailchimp, an email marketing service operated by Intuit Inc. (United States). When you submit the signup form on our website, your email address — together with the date, time and IP address of your submission — is sent directly to Mailchimp's servers in the United States and added to our audience. We use single opt-in, which means you start receiving our emails as soon as you sign up, without a separate confirmation step.

Mailchimp also records when you open our emails and which links you click, so we can understand which content is useful and improve future emails. Their privacy practices are described at intuit.com/privacy/statement.

Unsubscribing

Every marketing email includes an unsubscribe link — click it to stop receiving them. You can also email enquiries@peppytaps.com.au at any time and we will remove you from the list. Unsubscribe requests are honoured immediately.

We do not send marketing SMS messages unless you have expressly opted in.

7. Overseas disclosures

Some of our third-party service providers (for example email marketing and analytics providers) store and process data overseas, including in the United States and the European Union. Where we send your personal information outside New Zealand, we take reasonable steps to ensure the recipient is required to protect that information to a standard comparable to the Privacy Act 2020 (in line with IPP 12).

8. Data security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes TLS/HTTPS encryption in transit, access controls, and using vetted third-party services. No method of transmission over the internet is 100% secure, however — we cannot guarantee absolute security.

9. Your rights

Under the Privacy Act 2020 and the IPPs, you have the right to:

• Ask us to confirm what personal information we hold about you and request access to it
• Ask us to correct information that is inaccurate, incomplete or out of date
• Ask us to delete information we no longer need (subject to our legal obligations to retain records)
• Withdraw consent to marketing at any time
• Complain if you think we have mishandled your information

To exercise these rights, email enquiries@peppytaps.com.au. We will respond within 20 working days, as required by the Privacy Act 2020. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or by calling 0800 803 909.

10. Children's privacy

Our products and services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. Where the changes are significant we will provide additional notice (for example by email to subscribers, or a prominent notice on the website).

12. Contact us

For any privacy question or request:

Peppy Taps Limited — Privacy Officer
NZBN: TBC
[NZ head office address — TBC]
Email: enquiries@peppytaps.com.au
Phone: 0800 434 756
Hours: Mon–Fri 9:00am – 5:00pm NZST