Privacy Policy

Effective date: 13 July 2026

This privacy policy explains how Pretty Good Value Limited, trading as Biohacker ("Biohacker", "we", "us", "our"), collects, uses, stores and discloses your personal information in accordance with the New Zealand Privacy Act 2020.

Who we are

Biohacker operates the website biohacker.co.nz, an online retail store selling dietary supplements to customers in New Zealand. Pretty Good Value Limited is a New Zealand company (company number 5999650) with its registered office at Level 4, 253 Queen Street.

What information we collect

We collect personal information that you provide directly and information collected automatically when you use our website.

Information you provide

  • Order information: Name, email address, shipping address, billing address and phone number when you place an order.
  • Account information: Name, email address and password if you create an account.
  • Email subscription: Email address when you subscribe to our mailing list.
  • Communications: Any information you provide when you contact us via email or our contact form.

Information collected automatically

  • Analytics data: We use Google Analytics 4 (GA4) via a Shopify custom pixel to collect anonymised usage data including pages visited, time on site, device type, browser type, approximate geographic location (city level) and referral source. This data is used to understand how visitors use our site and to improve our service.
  • Cookies: Our site uses cookies essential to the functioning of the Shopify platform (cart, session, authentication). Third-party analytics cookies are set by Google Analytics. You can control cookie preferences in your browser settings.
  • Payment information: Payment is processed by Shopify Payments (powered by Stripe). We do not store your full credit card number. Shopify Payments processes and stores payment data in accordance with PCI DSS standards.

How we use your information

We use your personal information for the following purposes:

  • Fulfilling orders: Processing and shipping your orders, sending order confirmations and tracking information.
  • Customer service: Responding to your enquiries, managing returns and resolving issues.
  • Email marketing: Sending newsletters, product updates and educational content if you have subscribed to our mailing list. We use Klaviyo to manage email marketing. You can unsubscribe at any time via the link in any email.
  • Site improvement: Analysing anonymised usage data to improve our website, product range and customer experience.
  • Legal compliance: Meeting our obligations under New Zealand law, including tax and consumer protection requirements.

We will not use your personal information for purposes other than those stated above without your consent, unless required or permitted by law.

Who we share your information with

We share personal information only with the following parties, and only to the extent necessary to operate our business:

  • Fulfillment partner: Your name, shipping address and order details are shared with our fulfillment partner to pick, pack and ship your order.
  • Shopify: Our e-commerce platform, which processes orders and stores customer data. Shopify's privacy policy applies to data processed on their platform.
  • Klaviyo: Our email marketing platform, which stores email addresses and engagement data for subscribers. Klaviyo's privacy policy applies to data processed on their platform.
  • Google Analytics: Anonymised browsing data is sent to Google Analytics 4 for site analytics. Google's privacy policy applies.
  • Payment processor: Shopify Payments (Stripe) processes payment transactions.
  • Courier services: Your name and shipping address are shared with the courier service to deliver your order.

We do not sell, rent or trade your personal information to any third party for marketing purposes.

Data storage and security

Your personal information is stored on servers operated by our service providers (Shopify, Klaviyo, Google). These servers may be located outside New Zealand. Where personal information is transferred overseas, it is handled in accordance with the requirements of the Privacy Act 2020.

We take reasonable steps to protect your personal information from unauthorised access, use, modification or disclosure. However, no method of electronic transmission or storage is completely secure.

Data retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:

  • Order data: Retained for seven years to meet tax and accounting obligations under New Zealand law.
  • Email subscriber data: Retained until you unsubscribe or request deletion.
  • Analytics data: Retained in accordance with Google Analytics' data retention settings (currently 14 months).

Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of any personal information that is inaccurate, incomplete or out of date.
  • Request deletion of your personal information, subject to our legal retention obligations.
  • Withdraw consent for email marketing at any time by clicking the unsubscribe link in any email or by contacting us.

To exercise any of these rights, contact us at privacy@biohacker.co.nz.

We will respond to access and correction requests within 20 working days, as required by the Privacy Act 2020.

Complaints

If you believe we have breached the Privacy Act 2020, you may:

  1. Contact us at privacy@biohacker.co.nz so we can investigate and resolve the issue.
  2. Lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will notify subscribers by email.

Contact

For privacy-related enquiries or to exercise your rights:

Email: privacy@biohacker.co.nz General enquiries: hello@biohacker.co.nz