1. Who we are

Legal entity: Eco Wave Green Ltd.
Registered address: 18 Boltons Road, Masterton, Wellington, 5810, New Zealand.
Contact: [email protected]

2. What data we collect

• Site analytics – anonymised IP, browser type, pages visited (Google Analytics 4).
• Email sign‑up details – name, email address (Zoho Campaigns).
• Affiliate‑tracking parameters – click ID, order value, merchant ID.
• Technical cookies – session ID, security tokens (see our Cookie Notice).

3. Why we collect it

We process your data to:

• Provide and improve the Site and its content.
• Measure traffic and engagement for editorial planning.
• Track affiliate sales so we can receive commissions.
• Comply with legal obligations and resolve disputes.

4. Lawful bases for processing

We rely on the following bases under the New Zealand Privacy Act 2020, Australian Privacy Principles and GDPR (where applicable):

• Consent – for analytics, marketing and cookies (given via the cookie banner).
• Legitimate interests – to operate and secure the Site.
• Contract – when you sign up to our newsletter or purchase through an affiliate link.

5. Your rights

You have the right to access, correct or delete your personal information. You may also object to processing or request a portable copy of your data. To exercise these rights, email [email protected]. We will respond within 20 working days as required by the NZ Privacy Act 2020.

6. Data security & retention

• Site traffic is encrypted via TLS and served through Cloudflare WAF.
• Backups are stored for 30 days on Hostinger’s secure servers.
• Email lists are protected by Zoho’s ISO 27001‑certified infrastructure.

We keep analytics data for 26 months and newsletter details until you unsubscribe.

7. Third‑party disclosures

We may share limited data—such as anonymised order details—with affiliate networks and merchants with whom we partner from time to time solely to validate commissions. We do not sell or rent personal information to third parties.

8. International data transfers

Your data may be processed in Australia, the United States, Singapore and the EU via our service providers (Google, Cloudflare, Zoho, Commission Factory). We ensure adequate safeguards such as Standard Contractual Clauses where required.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in law or our practices. The “Last updated” date at the top will be revised accordingly. Continued use of the Site after an update constitutes acceptance of the revised Policy.

Privacy Act 2020 (NZ)