Privacy policy.

He Tipu Limited Partnership

He Tipu Limited Partnership (“He Tipu”, “we”, “us”, “our”) respects your privacy. This policy explains how we collect, use, store and disclose personal information through our website hetipu.com and in the course of our business. We comply with the Privacy Act 2020 and the thirteen Information Privacy Principles (IPPs).

Who we are

He Tipu is a native plant nursery and kaupapa Māori enterprise based at 155 Centennial Drive, Rotokawa, Taupo. We are a subsidiary of Te Pae o Waimihia Trust. You can contact us at patai@he-tipu.co.nz or on 07 222 4150.

What information we collect

We only collect personal information that we need to run our business and serve our customers and community. This may include:

• Your name, email address, phone number and physical or postal address when you contact us, fill in our online forms, request a quote or place an order.

• Business or organisation details where you are contacting us in a work capacity.

• Order, delivery and payment information when you purchase plants or other products from us.

• Correspondence and notes from our interactions with you, which we store in our customer relationship management (CRM) system.

• Information you provide if you sign up to our newsletter or follow our updates.

• Technical information automatically collected when you visit our website, such as your IP address, browser type, device information and pages visited, through cookies and similar website analytics tools.

Why we collect it

We collect personal information to:

• Respond to your enquiries and provide quotes.

• Process and fulfil your orders, including arranging delivery.

• Manage our customer and supplier relationships.

• Send you information you have asked for, such as newsletters or updates about He Tipu (you can unsubscribe at any time).

• Improve our website, products and services.

• Meet our legal, tax and accounting obligations.

How we collect it

We collect personal information directly from you wherever possible — for example, through our website forms, by email, by phone, or in person. Where we collect information from another source (for example a referral or a publicly available business directory), we will let you know on request.

How we store and protect it

Your personal information is stored securely in systems operated by us and by reputable third-party providers (including our website host, email provider and CRM platform). We take reasonable steps to protect it from loss, misuse, unauthorised access, modification or disclosure. We keep personal information only for as long as we need it for the purposes set out above, or as required by law.

Who we share it with

We do not sell your personal information. We may share it with:

• Service providers who help us run our business (such as our website host, CRM, accounting software, email provider, payment processor and delivery contractors), who are required to keep it confidential and only use it for the purpose we engage them for.

• Te Pae o Waimihia Trust and other related entities where this is necessary for managing our operations.

• Government agencies, regulators or law enforcement where we are required or permitted by law.

Some of our service providers may store information on servers located outside New Zealand. Where this happens, we take reasonable steps to ensure your information is protected by comparable safeguards to those required under the Privacy Act 2020.

Cookies and website analytics

Our website uses cookies and similar technologies to help the site function, remember your preferences, and understand how visitors use the site. You can disable cookies through your browser settings, although some parts of the website may not work properly if you do.

Your rights

Under the Privacy Act 2020 you have the right to:

• Ask us what personal information we hold about you.

• Ask us to correct any personal information that is wrong or out of date.

• Ask us to stop using your information for direct marketing at any time.

To make a request, please email us at patai@he-tipu.co.nz. We will respond as soon as we reasonably can, and within the timeframes required by the Privacy Act.

Privacy breaches

If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at patai@he-tipu.co.nz so we can try to resolve it. If you are not satisfied, you can make a complaint to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Changes to this policy

We may update this policy from time to time. The current version will always be available on our website.

Last updated: May 2026