Who we are
The Chocolate Tour is a New Zealand owned and operated chocolate subscription service. It is operated via this website – https://thechocolatetour.co.nz – by Gemma Knight, trading as The Chocolate Tour.
What personal data we collect and why we collect it
We collect personal information from customers and site visitors, including:
- contact information
- interactions with us
- personal account preferences
- transactional data, such as billing and purchase information
- technical data, such as information provided via cookies
We collect your personal information in order to deliver our subscription services, and in order to market our services to relevant customers. Providing some information is optional. If you choose not to enter information directly relating to product delivery, we’ll be unable to fulfill your subscription. Note that you must provide your email address when you make a purchase, and will receive some transactional emails (e.g. confirmation of your order, and tracking information for your shipment) regardless of whether you opt in or out of our email list.
We keep your information safe by storing it in our secured database and only allowing staff involved in order fulfillment to access it.
All payments are made via the eWAY payment gateway, which is a secure, fully PCI-DSS compliant gateway. Your card details are not stored on our site; eWAY stores them securely via their gateway.
Comments and reviews
When visitors leave comments or reviews on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Contact form submissions are retained for customer service purposes, but information submitted via our contact form will never be used for marketing.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
We also use first- and third-party cookies to track website visitors, how our website is used and to deliver targeted advertising via Google Analytics and the Facebook Pixel. You can modify your Google Ads settings here, or you can install this add-on to your browser and Google Analytics data will no longer be collected.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
This website uses Google Analytics to track
By default WordPress does not collect any analytics data. However, many web hosting accounts collect some anonymous analytics data. You may also have installed a WordPress plugin that provides analytics services. In that case, add information from that plugin here.
How long we retain your data
If you leave a comment or review, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. Purchase records are retained for seven years.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you’d like to ask for a copy of your information, to have it corrected, or have any other concerns about privacy please contact us by emailing firstname.lastname@example.org.
How we protect your data
All data is protected via two-factor authentication, and staff are trained in data protection. Identifying information will never be shared with third parties except as required to deliver our services (e.g. payment information to our encrypted gateway; addressing information to our courier service etc.).