This Privacy Policy describes how Secret Sauce Limited, trading as BOP Eats (“we”, “us” or “our”), collects, uses, discloses, retains and protects your personal information when you visit or book experiences through our website (https://bopeats.co.nz/) or otherwise interact with us. We are committed to complying with New Zealand’s Privacy Act 2020 and the EU’s General Data Protection Regulation (GDPR).
Who we are
Data controller:
Secret Sauce Limited
Trading as BOP Eats
Registered address: 91, Valley Road
Privacy Officer: Stacey Jones, stacey@secretsauce.co.nz
Information We Collect
- Personal data you provide:
- Identity & contact: name, email, postal address, telephone number
- Booking details: experience dates, dietary requirements, special requests
- Account data: username, password (if you register)
- Automated data:
- Usage: pages visited, time on site, referral URL
- Technical: IP address, browser type/version, device identifiers, cookies
How We Use Your Information
We process your personal data to:
- Confirm, manage and fulfil your bookings
- Respond to enquiries, feedback or complaints
- Send you marketing (with your consent) and to improve our services
- Analyse site usage for analytics and service optimisation
- Comply with legal obligations (tax, consumer law)
Legal Basis for Processing (GDPR)
For EU data subjects we rely on:
- Contract: to perform our booking agreement
- Consent: for optional marketing communications (you may withdraw at any time)
- Legitimate interests: to improve services and site analytics, balanced against your rights
- Legal obligation: to comply with laws (e.g. tax)
Compliance with New Zealand Law
We adhere to the Privacy Act 2020 and its 13 Information Privacy Principles (IPPs). You have rights under that Act to request access to, correction of or deletion of your personal information, and to object to certain uses.
How to complain:
- Contact our Privacy Officer at stacey@secretsauce.co.nz
- If unresolved, you may lodge a complaint with the Office of the Privacy Commissioner: https://www.privacy.org.nz
Your Rights (GDPR & NZ)
You may, at any time:
- Access your personal information
- Correct inaccuracies
- Erase data no longer needed (“right to be forgotten”)
- Restrict or object to processing based on legitimate interests or direct marketing
- Portability: receive your data in a structured, machine-readable format
To exercise these rights, email stacey@secretsauce.co.nz
Sharing Your Information
We share data only with:
- Service providers: payment processors, accommodation and transport partners
- Professional advisers & authorities: where required by law
- Group companies: for fraud prevention and internal administration
We never sell your personal data.
Cookies & Tracking
We use cookies to:
- Enable site functionality
- Analyse site usage
- Deliver targeted marketing (with your consent)
You can disable cookies in your browser, though this may affect functionality.
International Transfers
Your data may be stored or processed outside New Zealand or the EEA. We ensure comparable safeguards (Standard Contractual Clauses or Binding Corporate Rules) are in place to protect your data.
Data Retention
We retain your personal data only as long as necessary for the purposes outlined, including a minimum of seven years for booking records to comply with tax and auditing requirements.
Privacy Breach Notification
If a privacy breach poses a risk of serious harm, we will notify affected individuals and the Privacy Commissioner as soon as practicable, in accordance with our legal obligations.
Children’s Privacy
Our services are not directed at children under 16. We do not knowingly collect data from minors. If we become aware we have done so, we will delete it.
Changes to This Policy
We may update this policy from time to time. The “Effective date” above reflects the latest revision. Please review it regularly.
Contact Us
For questions, to exercise your rights or to lodge a complaint, please contact:
Privacy Officer: Stacey Jones
Email: stacey@secretsauce.co.nz