Privacy policy

Last updated: Oct 7, 2026

Marula Distributions Limited, trading as MannaBrew NZ, operates mannabrew.co.nz. In this policy, “we”, “us” and “our” refer to Marula Distributions Limited.

Our store is hosted by Shopify. This policy explains how we collect, use, share and protect personal information under the New Zealand Privacy Act 2020.

If our Terms of Service conflict with this policy about personal information, this policy takes precedence.

1. Information we collect

Depending on your interactions with us, we may collect:

Your name, email address, telephone number, billing address and delivery address.
Order details, purchase history, payment status, transaction details, cancellations, returns and refunds.
Account details, preferences and settings.
Enquiries, messages, feedback and reviews.
Your IP address, browser and device details, approximate location, cookie identifiers, referral information and activity on our website.
Preferences you provide or that are inferred from your interactions with our store.

Payment providers process your card details. We do not store full payment card numbers or card security codes.

Providing information is generally voluntary. However, without information needed for a particular purpose, we may be unable to process your order, arrange delivery, provide an account feature or respond to an enquiry.

2. How we collect information

We collect information directly when you place an order, create an account, contact us, subscribe to marketing or submit a review.

We also collect information through cookies, pixels and similar technologies, and from payment providers, delivery providers and connected platforms supporting our store.

Where we collect personal information indirectly, we provide any notification required by Information Privacy Principle 3A, unless an applicable exception permits otherwise.

3. How we use information

We use personal information to:

Process payments and fulfil orders.
Arrange delivery and provide order updates.
Handle enquiries, complaints, cancellations, returns and refunds.
Manage accounts, preferences and reviews.
Operate, protect and improve our website.
Understand website use and measure marketing performance.
Personalise recommendations, communications and advertising.
Prevent fraud, resolve disputes and meet legal obligations.

We do not use information for an unrelated purpose unless you authorise it or the law permits it.

4. Marketing communications

We send promotional emails or messages with the consent required by law.

Marketing messages identify us and provide an unsubscribe option. You can also unsubscribe by contacting contact@mannabrew.co.nz.

Unsubscribing does not stop necessary communications about your orders or account, and does not itself disable website tracking.

5. Cookies, pixels and connected services

We use cookies, pixels and similar technologies for store functionality, remembering preferences, understanding website activity and supporting advertising and measurement.

Information may also be shared directly between our store and service providers, rather than through your browser alone.

Our connected services include:

Shopify, for hosting, checkout, payments and other store services.
Google & YouTube, for connections with Google’s commerce and marketing services.
Meta’s Facebook & Instagram integration, for commerce, advertising and measurement.
Klaviyo, for customer communications and marketing.

Depending on the features enabled, these services may process contact, device, browsing and purchase information.

Some providers act on our behalf. Others also process information for purposes described in their own privacy policies:

We obtain consent for tracking, advertising-related sharing and other processing where required by applicable law or platform requirements.

6. Your choices

You can manage or block cookies using your browser settings. Blocking some cookies may affect website functionality.

Browser controls do not necessarily stop information shared directly between our store and service providers.

Where our website displays cookie or data-sharing controls, you can use them to manage the available choices. These controls may vary by location.

You can also manage advertising preferences through your Google or Meta account and use Shopify’s privacy tools.

7. Who receives information

We share personal information where reasonably needed for the purposes described in this policy, including with:

Shopify and payment providers.
Zappy and the courier delivering your order, including NZ Post or New Zealand Couriers.
Providers supporting customer service, communications and analytics, and Loox for collecting and displaying product reviews.
Connected Google, Meta and Klaviyo services.
Professional advisers, regulators or authorities where required or permitted by law.
Other parties you authorise.

If our business is involved in a sale, merger, restructuring or insolvency, information may be shared with relevant parties where legally permitted and subject to appropriate safeguards.

We do not sell personal information for money. We share information with platforms and service providers for the purposes disclosed here, including advertising and measurement.

8. Shopify Network Intelligence

We have enabled Shopify Network Intelligence.

Shopify uses information from interactions with our store, other merchants and Shopify to provide enhanced services, including improving services, personalising experiences and supporting relevant advertising.

These uses are subject to applicable consent requirements and privacy choices.

Shopify is responsible for certain processing it carries out for these enhanced services, including handling requests relating to that processing. We remain responsible for our own handling of your information.

Further information is available through Shopify’s Consumer Privacy Policy and Privacy Portal linked above.

9. Overseas processing

Our service providers may store or process personal information outside New Zealand.

Our Shopify settings identify the United States as our store’s data-hosting location. Information may also be processed in other countries where our providers operate.

Where a provider processes information solely on our behalf, we remain responsible for taking reasonable steps to protect it.

Where an overseas disclosure is subject to Information Privacy Principle 12, we ensure there is a permitted basis for disclosure, such as applicable privacy laws or contractual safeguards providing comparable protection.

If we rely on your authorisation where comparable safeguards are absent, we first expressly explain that limitation.

10. Security and retention

We take reasonable steps to protect information against loss, misuse, unauthorised access, alteration and disclosure.

No online system can guarantee absolute security. Please keep account credentials secure and do not send full payment card numbers or security codes by email or chat.

We retain information only for as long as needed for the purposes described here, including legal recordkeeping and resolving disputes. When no longer required, it is securely deleted or de-identified.

11. Privacy breaches

If a privacy breach causes, or is likely to cause, serious harm, we notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, as required by law.

12. Access and correction

You may request access to personal information we hold about you and ask us to correct it.

If we decline a correction request, you may ask us to attach a statement recording the correction you requested.

We communicate our decision as soon as reasonably practicable and within 20 working days, unless a lawful extension applies. If an extension is necessary, we explain why and provide the revised timeframe.

Approved access is provided without undue delay.

We may verify your identity and, where someone acts on your behalf, their authority. There is normally no charge.

Where other privacy laws apply, we respect any additional rights they provide. We do not discriminate against you for exercising your privacy rights.

13. Reviews and external websites

Information submitted for public display, such as a product review, may be visible to others. Avoid including personal details you do not want published.

External websites and social platforms have their own privacy policies. Please review those policies when using their services.

14. Children

Children should use our services with the involvement of a parent or guardian.

We do not seek children’s personal information for marketing purposes. If you believe a child has provided information we should not hold, contact us. We will investigate and remove it where appropriate, subject to legal obligations.

15. Complaints

Contact our Privacy Officer if you have concerns about how we handle personal information.

We will investigate and respond. You may also complain to the Office of the Privacy Commissioner.

Telephone: 0800 803 909.

16. Changes

We may update this policy to reflect changes in our practices, services or legal obligations.

We will publish the revised policy with an updated date and provide additional notice or obtain consent where required.

17. Contact our Privacy Officer

Privacy Officer
Marula Distributions Limited, trading as MannaBrew NZ
NZBN: 9429053423580
Email: contact@mannabrew.co.nz
Phone: +64 20 4020 4311
Address: 686 Paradise Valley Road, RD 2, Rotorua 3072, New Zealand