Plain-language draft, 3 October 2026. To be checked by a lawyer before launch.
CoffeeBea.nz is a New Zealand coffee bean marketplace run by NetPotential Limited, a New Zealand company. This page explains what personal information we collect, why, who we share it with and how you can see or correct it, under the Privacy Act 2020.
What we collect
- Browsing. Pages you visit, through Cloudflare, which runs our network. We do not sell or share browsing data for advertising.
- Your account. Name, email, password (stored scrambled, we cannot read it) and the addresses you give us.
- Orders placed on CoffeeBea.nz. What you bought, delivery details and payment status. Card details go straight to Stripe; we never see or store your card number.
- The daily deal by text. Your mobile number, first name if you give it, and a record of your consent: the exact wording you agreed to, when, and on which page.
- Roasters who sign up. Business and contact details, website, shop address and the answers on the sign-up form.
When you buy from a roaster’s own site
Many listings link to the roaster’s own shop and open it in a new tab. Anything you buy there is between you and the roaster, under their privacy policy. We do not see that order.
Why we use it
To run your account and orders, to pass an order to the roaster who fulfils it, to send the deal texts you asked for and nothing else, to answer you, and to keep the site secure. We only text you after you tick the consent box and reply YES to our confirmation text. Reply STOP any time and we stop.
Who we share it with
- The roaster who ships your order: your name, delivery address and what you bought.
- HighLevel, our customer messaging system, which sends deal texts and keeps our contact list.
- Stripe, which processes card payments.
- Cloudflare, which hosts our network and stores our encrypted backups.
Some of these providers store data outside New Zealand. We only use providers that protect it to a standard comparable to the Privacy Act. We never sell your information.
How long we keep it
Order records for seven years, because tax law requires it. Account and text-deal details until you ask us to delete them or close your account. Backups are encrypted and roll off within six months.
Seeing, correcting or deleting your information
You can see and change most of it in My account. To ask for a copy, a correction or deletion, email [email protected]. We reply within 20 working days. If you are not happy with our answer you can complain to the Office of the Privacy Commissioner at privacy.org.nz.