Privacy Policy

Who We Are

Crossbow Coffee Roasters operates this website and online store from Richmond, Nelson, New Zealand. This policy explains how we collect, use, store, and share personal information when you browse our website, contact us, create an account, place an order, buy or receive a gift card, or start a coffee subscription.

Information We Collect

  • Account details, including your name, email address, encrypted password, phone number, and any delivery or billing addresses you save.
  • Order and fulfilment details, including the products and options you choose, delivery and billing addresses, contact details, shipping method, discounts, gift-card use, totals, order status, and order history.
  • Payment and subscription details, including Stripe customer, payment-method and transaction identifiers, payment status, limited payment metadata, recurring billing dates, and subscription status. Your full card number is collected and processed by Stripe and is not stored by us.
  • Gift-card details, such as purchaser and recipient names, the recipient email address, a personal message, card balance, and redemption history.
  • Messages you send through our contact form, including your name, email address, subject, and message.
  • Basic technical information needed to operate and protect the website, which may include your IP address, browser or device information, request records, and security or error logs. We use IP addresses to limit contact-form abuse.

How We Use Information

We use personal information where reasonably necessary to:

  • create and manage accounts, carts, orders, subscriptions, and gift cards;
  • take payment, arrange delivery, send receipts and service messages, and provide support;
  • prevent fraud, misuse, and security incidents and troubleshoot the website;
  • maintain business, tax, and transaction records and meet our legal obligations; and
  • improve our products, customer service, and store operations.

We do not sell personal information. We do not currently use advertising cookies, behavioural advertising pixels, or third-party audience analytics on this website.

Cookies and Local Storage

If you sign in, we set a strictly necessary, HTTP-only authentication cookie calledpayload-token. It keeps you signed in and expires after up to seven days. We also store your cart in your browser undercrossbow_cart so it remains available as you move around the store or return later. You can clear local storage through your browser. Blocking the authentication cookie will prevent account features from working.

Who We Share Information With

We share only what is reasonably necessary with providers that help us run the store, including Stripe for payments and saved subscription payment methods, Resend for transactional and contact-form email, hosting, database and file-storage providers, and delivery providers where required to fulfil an order. We may also disclose information to professional advisers, regulators, law-enforcement agencies, or other parties when required by law, to protect our rights, or in connection with a sale or restructuring of the business.

Some providers may process information outside New Zealand. Where that happens, we take reasonable steps to use reputable providers and appropriate contractual or other safeguards. Those providers may also handle information under their own privacy terms.

Storage, Security, and Retention

We use reasonable technical and organisational safeguards designed to protect personal information. No internet service can guarantee absolute security. We retain information only for as long as it is needed for the purposes described here. Transaction and tax records are generally retained for at least seven tax years where New Zealand law requires it. Account, subscription, support, fraud-prevention, and technical records may be kept for shorter or longer periods where reasonably necessary or legally required.

Your Privacy Rights

You may ask for access to or correction of personal information we hold about you. You may also ask us to delete information; we will do so where we can, although we may need to retain records for tax, legal, fraud-prevention, dispute, or transaction purposes. Account holders can update profile details and saved addresses from their account.

To make a request or raise a privacy concern, email orders@crossbowcoffee.nz or use our contact page. If we cannot resolve a privacy complaint, you may contact the New Zealand Office of the Privacy Commissioner.

Changes to This Policy

We may update this policy when our services or legal obligations change. The current version will be published here with its effective date.

Effective 17 July 2026