Privacy Policy
How Enzol International Ltd collects, uses, and protects your personal information.
Contents
Who We Are
Enzol International Ltd ("Enzol", "we", "us", "our") is a New Zealand company registered and operating from Ashburton, Canterbury. We source and process high-quality organic and conventional speciality seeds and natural products from the Canterbury Plains, and export those products to markets worldwide.
This Privacy Policy explains how we handle personal information in connection with our website enzol.co.nz, our business enquiries, supplier and customer relationships, and any other activities that involve collecting your personal information.
We are committed to protecting your privacy and comply with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs), as amended by the Privacy Amendment Act 2025 (effective 1 May 2026).
Information We Collect
We only collect personal information that is necessary for our legitimate business purposes.
Contact & Identity Information
- Full name and job title
- Business name and trading details
- Email address and telephone number
- Postal address or physical address
Business & Transaction Information
- Purchase history and order details
- Product enquiries and correspondence
- Invoicing and payment records (we do not store full card numbers)
- Shipping and delivery information
- Supplier and grower relationship records
Website & Technical Information
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time on site, and referral source
- Cookie identifiers and session data
Communications
- Enquiry form submissions and correspondence
- Email newsletter subscription details (if applicable)
- Records of any complaints or feedback
How We Collect Information
We collect personal information in fair and lawful ways, generally directly from you. The main collection points are:
- When you complete a contact or enquiry form on our website
- When you subscribe to our mailing list or newsletter
- When you email, call, or otherwise correspond with us
- When you enter into a commercial relationship with us as a buyer or supplier
- Automatically via cookies and analytics tools when you browse our website (see Section 9)
- From publicly available business directories or trade databases, where relevant to our operations
Why We Collect Your Information
We collect and use personal information only for the purposes for which it was collected or directly related purposes. These include:
- Responding to your enquiries and communicating with you
- Processing and fulfilling orders and managing supplier relationships
- Maintaining our business records and accounting obligations
- Sending newsletters or product updates where you have subscribed
- Improving our website and services through analytics
- Complying with our legal and regulatory obligations under New Zealand law
- Verifying identity and preventing fraud
- Meeting export compliance and customs requirements for international trade
We will not use your information for unrelated purposes without your consent or unless required by law.
Overseas Transfers
As an international exporter, Enzol works with customers and partners in Australia, USA, Canada, Taiwan, China, Malaysia, UK, France, Spain, Japan, Korea, Germany, and other markets. We may share necessary contact and order information with these overseas parties in the course of fulfilling commercial transactions.
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the receiving party:
- Is subject to privacy laws that provide comparable protection to New Zealand's Privacy Act 2020; or
- Has agreed in writing to protect the information to a comparable standard; or
- You have expressly authorised the disclosure.
Some website service providers (such as hosting or analytics tools) may store or process data on servers outside New Zealand. We select providers with appropriate data security standards and contractual protections in place.
Storage & Security
We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. Our security measures include:
- Encrypted data transmission (SSL/TLS) on our website
- Secure password controls and access management for internal systems
- Use of reputable, security-certified cloud and hosting providers
- Limiting access to personal information to staff who need it to perform their role
- A documented data breach response procedure
Data Retention
We retain personal information only for as long as needed for the purpose it was collected, or as required by law. Typical retention periods:
- Customer and supplier records: 7 years from end of relationship (NZ tax/business record obligations)
- Enquiry and contact form data: Up to 3 years, unless the contact becomes an ongoing business relationship
- Marketing email subscriptions: Until you unsubscribe or request removal
- Website analytics data: In anonymised or aggregated form — typically 26 months
When personal information is no longer required, we take reasonable steps to delete or permanently anonymise it.
Cookies & Tracking Technologies
Our website uses cookies — small text files stored on your device — to help us operate the site and understand how visitors use it.
Types of Cookies We Use
- Essential cookies: Required for the website to function (e.g. session management, security). These cannot be disabled.
- Analytics cookies: We may use tools such as Google Analytics to understand website traffic patterns. Data is collected in aggregate and does not personally identify you.
- Preference cookies: Remember your settings and preferences for future visits.
Managing Cookies
You can control and delete cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website. For more information, visit allaboutcookies.org.
Your Rights
Under the Privacy Act 2020, you have the following rights regarding your personal information:
Right of Access (IPP 6)
You have the right to request access to the personal information we hold about you. We will respond within 20 working days.
Right of Correction (IPP 7)
If information we hold about you is inaccurate, incomplete, or misleading, you can request that we correct it. We will make the correction or, if we disagree, attach a notation of your request to the record.
Right to Object to Direct Marketing
You have the right to ask us to stop using your information for direct marketing. You can unsubscribe from emails at any time using the unsubscribe link, or by contacting us directly.
How to Exercise Your Rights
Contact our Privacy Officer using the details in Section 13. We may need to verify your identity before processing your request. There is no charge for a first access request in any 12-month period.
Children's Privacy
Our website and services are directed at business customers and adults. We do not knowingly collect personal information from children under the age of 16. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page.
This policy was last reviewed in March 2026 and reflects the requirements of the New Zealand Privacy Act 2020 and Privacy Amendment Act 2025.
Contact & Complaints
If you have questions about this policy, wish to exercise your rights, or have a concern about how we have handled your personal information, please contact our Privacy Officer:
PO Box 345
Ashburton 7740, New Zealand
Ashburton 7700
New Zealand
Complaints to the Privacy Commissioner
If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu):
- Website: www.privacy.org.nz
- Phone: 0800 803 909
- Email: enquiries@privacy.org.nz