What we collect, why we collect it, and the control you have over it — under the New Zealand Privacy Act 2020.
Last updated: 16 October 2026 · Version 1.7
Who we are
The agency responsible for your information.
AIWine.co.nz is operated by AIWine Ventures Limited ("AIWine", "we", "us"), based in the Wairarapa, Aotearoa New Zealand (Company No. 9435521, GST No. 148-900-086). We are the "agency" responsible for personal information collected through this website and the AIWine apps, as defined in the Privacy Act 2020.
Each wine is supplied and sold to you by the winery that makes it; the sale is transacted through this site under AIWine's off-licence, and AIWine collects payment as the winery's agent. Because the winery packs and dispatches your order, we share the information needed to fulfil and deliver it (see "Who we share it with" below). This policy covers how AIWine handles your information; each winery is responsible for its own use of the order information we pass to it.
Questions, access requests or complaints: privacy@aiwine.co.nz. We aim to respond within 20 working days, as the Privacy Act requires.
What we collect
The information we hold.
Account details — your name, email, password (stored only as a one-way hash, never readable), and confirmation that you are 18 or older.
Order & delivery details — delivery address, the wines you buy, and payment confirmation (card payments are processed by our payment provider; we do not store full card numbers).
Your Passport — the wines you taste, rate, save and the cellar-door visits you log, so the AI Sommelier can make better recommendations. This is taste and preference information you choose to record.
Sommelier conversations — what you ask the AI Sommelier, used to answer you and improve recommendations.
Technical information — basic device and usage data needed to run the site securely, and how you reached us (for example an ad, one of our emails or a link on another site), which is kept with your order.
How we use it
Why we hold it.
To create and run your account and confirm you are old enough to buy wine.
To process and deliver your orders through the supplying winery.
To power the AI Sommelier and your Passport — personalised recommendations based on what you've enjoyed.
To send you email you've asked for — order confirmations always, and marketing only where you've opted in: new releases and offers, and if you're signed in, one reminder when you leave wine in your case. Signing up at the foot of a page takes a confirm click in the email we send first. Every marketing email has an unsubscribe link.
To ask how your wine was — one email about a week after the winery sends your order, never more than once per order. Nothing to buy in it. A review you choose to send is published only with your permission, under the name you choose.
To see which of our ads and emails work — from how you reached us, and through Meta’s ad cookie (see “Advertising” below).
To meet our legal obligations — alcohol licensing, tax records and consumer law.
Who we share it with
And who we don't.
We share only what's needed, only with:
The supplying winery — your name, delivery address and order, so they can pack and send your wine.
Couriers — the delivery details needed to get your wine to you.
Trusted service providers — payment processing (Stripe), secure cloud hosting and database (Vercel, Supabase), email delivery (Resend), address lookup at checkout (AddressFinder) and our AI service provider (Anthropic, via Cloudflare), each bound to protect your information and use it only on our instructions.
The AI Sommelier — when you ask the sommelier something, your question, the conversation so far and (if you are signed in) your saved taste preferences are sent to our AI service provider, Anthropic, in the United States, to generate the answer. They are not used to train its models and are not sold.
Meta (Facebook & Instagram) — through Meta’s ad cookie, unless you turn it off (see “Advertising” below).
We do not sell your personal information. Some of these providers store or process data outside New Zealand, including in the United States; where they do, we take reasonable steps to ensure comparable protection, as the Privacy Act requires.
Advertising
Meta’s ad cookie.
We advertise on Facebook and Instagram. To see which of those ads lead to sales, and to show them to people more likely to want them, this site uses Meta’s ad cookie (the “Meta Pixel”) once you’ve told us you’re 18 or over.
What Meta gets — the pages and wines you look at here, wines you add to your case and when you go to checkout; when you buy, the order’s value and a scrambled (hashed) copy of your email address and phone number, which Meta can only use to recognise an account it already knows. Never your address, your card or what the Sommelier was asked.
Where it goes — Meta handles it under its own privacy policy, and may store it outside New Zealand, including in the United States, where it may not be protected in the same way as under New Zealand law.
Turning it off — on this device, with the button below. It stays off here until you turn it back on; on another phone or computer, turn it off there too.
Meta’s ad cookie is on for this device.
Your rights & choices
You're in control of your information.
Access & correction — you can ask to see the personal information we hold about you and ask us to correct it. Email privacy@aiwine.co.nz.
Unsubscribe — opt out of marketing email any time via the link in every marketing message, or in your account settings. You'll still get essential order and account emails.
Delete your account — ask us to close your account and delete your information, except records we must keep by law (e.g. tax and alcohol-sales records).
Retention — we keep your information only as long as needed for the purposes above or as the law requires, then securely delete it.
Complaints — if you're not satisfied with how we've handled your information, you can contact the Office of the Privacy Commissioner (privacy.org.nz).
If a privacy breach occurs that could cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.