How Winenot handles information.

Last updated: 12 September 2026.

Wine Not Limited, trading as Wine Not ("Winenot", "we", "us" or "our"), NZBN 9429052974762, helps people discover New Zealand wineries and helps wineries keep their listing details accurate. Wine Not Limited is the New Zealand agency that collects and holds the personal information described in this policy. Our contact address for privacy requests is hello@winenot.co.nz.

Information we collect

• Information you provide through an enquiry, claim, update or subscription request, such as your name, email address, phone number, winery or business name, role, message and package interest.
• Public winery information used in directory listings, such as winery names, regions, websites, public business phone numbers, addresses, visitor offerings and images.
• Business contact information used to maintain listings and communicate with wineries. Some is supplied directly and some may be collected from public winery websites, industry sources or another representative of the winery. Named individual contact details are not displayed in public listings unless the individual has authorised publication.
• Winery-profile activity counts, such as profile views and clicks to booking, website, phone, directions, social, offer or event links.
• Technical information processed by our hosting and security providers, which may include IP address, browser, device, requested page, response status and timing information.

How we use information

• To reply to enquiries and process listing, advertising and subscription requests.
• To verify authority to act for a winery and maintain accurate listings.
• To provide and report on paid listing services.
• To operate, secure and improve the website, search and winery discovery experience.
• To meet legal, accounting and record-keeping obligations.
• To send newsletters or promotional updates only where you have consented or another lawful basis applies.

Information you provide to us

Providing information through our forms is voluntary, but we may be unable to answer an enquiry, verify a claim or provide a listing service without the fields marked as required. When we collect information directly, the relevant form explains the purpose of collection and links to this policy. Information is received by Winenot and the service providers needed to host the site, process the form and deliver the requested service.

Website analytics

Winenot uses Netlify Web Analytics and Real User Monitoring to understand page use, site performance and reliability. Netlify may process technical request information, including IP addresses, in hosting, analytics and security systems.

We also use a first-party service hosted with the website to count activity on Explore and Founding winery profiles. These event records contain the winery profile identifier, action type and time. They do not contain a name, email address, advertising identifier, IP address or persistent visitor identifier, and Winenot does not set an analytics cookie. Profile views are counted once per browser-tab session where browser storage is available. This tracker does not run when a browser signals Global Privacy Control or Do Not Track. First-party profile-event records are automatically deleted after 24 months.

Information collected from other sources

Where we collect personal information about a named winery contact from another source, we use it only for directory administration, verification and relevant business communication. In accordance with Information Privacy Principle 3A, we will take reasonable steps to notify that person as soon as reasonably practicable after collection, unless they have already been made aware or another exception under the Privacy Act 2020 applies. The notice will explain the collection, its purpose, intended recipients, who holds the information and the person's access and correction rights.

We do not add an indirectly collected contact to general marketing without consent. You may ask what information we hold, where it came from, request a correction, or ask us to remove information that is no longer needed.

Sharing

We do not sell personal information. Netlify provides website hosting, analytics, monitoring, data storage and form processing. GitHub supports controlled website publishing and may hold authorised editorial account information. Map tiles are supplied by CARTO and OpenStreetMap contributors, and opening the map may share technical request information such as your IP address with those providers. Google may process information if an optional Google service or external Google link is used. Public winery listing information may appear on Winenot and may be indexed by search engines.

Some providers process information outside New Zealand. We use provider contracts and privacy safeguards appropriate to the service, and assess overseas disclosures under Information Privacy Principle 12 of the Privacy Act 2020.

Storage, security and retention

We restrict administrative access to people who need it and use service providers that support encrypted connections and access controls. First-party profile-event records are retained for up to 24 months. Resolved enquiries and unsuccessful claims are normally deleted or anonymised within 24 months unless needed for an active relationship, dispute or legal obligation. Subscription, invoice and tax records may be kept for at least seven years where required by law. Public listing information may be retained while the directory entry remains current.

If a privacy breach is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Marketing messages

Newsletter consent is optional and separate from listing and enquiry requests. Marketing messages identify Winenot and provide a clear, free unsubscribe method. We action unsubscribe requests within five working days. Service messages needed to administer a listing or respond to a request are not marketing messages.

Your choices

You can ask to access or correct personal information we hold about you. You may also ask us to remove information we no longer need, and can withdraw newsletter consent at any time. Winery owners can ask us to correct or remove listing details where appropriate. We will respond to access and correction requests within 20 working days.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.