Privacy policy

Privacy Policy

Last updated: 28 June 2026

Stolen Cellar is operated by Stolen Cellars Limited, trading as Stolen Cellar (“Stolen Cellar”, “we”, “us” or “our”).

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit, use or make a purchase through our website, communicate with us, or otherwise interact with Stolen Cellar.

By using our website or placing an order with us, you acknowledge that you have read and understood this Privacy Policy.

1. Our business and supplier-direct fulfilment

Stolen Cellar is an online wine retailer. Many products are supplied directly by third-party wineries, importers, distributors and fulfilment partners rather than from a Stolen Cellar warehouse.

To process and deliver your order, we may provide the relevant supplier or fulfilment partner with the information reasonably necessary to pick, pack, dispatch and support your order. This may include your name, delivery address, phone number, email address and order details.

Stolen Cellar remains your main point of contact for customer support, order issues, refunds, and privacy enquiries.

2. Personal information we collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect:

• your name, email address, phone number, billing address and delivery address;
  
• payment and transaction information, including payment confirmation, order value and payment method;
  
• details of products you browse, add to cart, purchase, return, exchange or cancel;
  
• account details, where you create an account with us;
  
• communications you send us, including customer-support enquiries, reviews and feedback;
  
• technical information such as your IP address, device type, browser, operating system, website activity and identifiers collected through cookies or similar technologies;
  
• marketing preferences, including email or text-message subscription status;
  
• age-related information reasonably required to confirm that you are legally permitted to purchase or receive alcohol; and
  
• information received from suppliers, couriers, payment providers or other service providers relating to your order, payment, delivery, return or customer-support request.

3. How we collect personal information

We may collect personal information:

• directly from you when you place an order, create an account, subscribe to marketing, enter a promotion, contact us or otherwise use our website;
  
• automatically when you browse or interact with our website, including through cookies, pixels, analytics tools and similar technologies;
  
• from Shopify and other technology providers that help operate our store;
  
• from payment providers, couriers, wineries, importers, distributors and fulfilment partners where necessary to process, deliver or support your order; and
  
• from advertising, analytics and social-media platforms where permitted by law and relevant to our marketing activity.
  
  4. How we use personal information

We may use your personal information to:

• operate our website and provide our products and services;
  
• process payments, confirm orders and arrange delivery;
  
• send your order details to the relevant winery, importer, distributor, fulfilment partner or courier;
  
• provide customer support and respond to enquiries;
  
• process returns, refunds, exchanges, cancellations or delivery issues;
  
• verify age or take reasonable steps to support compliance with alcohol-sale requirements;
  
• communicate with you about your order, account, delivery, payment or product recall;
  
• personalise and improve our website, product offering and customer experience;
  
• send marketing communications where you have opted in or where otherwise permitted by law;
  
• measure marketing performance and show relevant advertising on search engines, social-media platforms and other websites;
  
• detect, investigate and prevent fraud, misuse, security incidents or unlawful activity;
  
• comply with our legal obligations and enforce our Terms of Service; and
  
• maintain business records, resolve disputes and protect our legal rights.
  

5. How we disclose personal information

We may disclose personal information to trusted third parties where reasonably necessary for the purposes described in this Privacy Policy.

These may include:

• Wineries, importers, distributors and fulfilment partners that supply, pack or dispatch your order directly to you;
  
• Couriers and delivery providers that deliver your order;
  
• Shopify, which hosts and supports our online store;
  
• Payment providers that process payments and assist with fraud prevention;
  
• Technology and service providers that provide email, customer support, product reviews, website hosting, analytics, cloud storage, advertising or other business services;
  
• Marketing and advertising providers, including platforms used to send marketing communications, measure campaigns and show relevant advertising;
  
• Professional advisers, including accountants, insurers, lawyers and other advisers where reasonably necessary;
  
• Government agencies, regulators, law-enforcement bodies or other parties where disclosure is required or permitted by law; and
  
• a buyer, investor, adviser or other party involved in a proposed or completed business sale, restructure, merger or similar transaction.

We require our service providers and fulfilment partners to handle personal information appropriately and only use it for the services they provide to us, unless they have an independent legal right to use it.

We do not provide customer information to suppliers for their own unrelated marketing purposes.

6. Supplier-direct delivery information

Because Stolen Cellar operates through supplier-direct fulfilment, one order may be sent from more than one winery, importer or distributor.

Where this occurs, we may share only the information each supplier needs to fulfil the relevant portion of your order. This will generally include:

• your name;
• delivery address;
  
• contact phone number or email address where necessary for delivery;
  
• the products ordered; and
  
• delivery instructions you have provided.

Our suppliers may contact you only where reasonably necessary to arrange, dispatch, deliver or resolve an issue with your order.

7. Alcohol and age verification

Stolen Cellar sells alcohol and is intended only for people aged 18 years or over.

We may collect and use information reasonably necessary to confirm that a purchaser or recipient is legally permitted to purchase or receive alcohol. This may include age confirmations provided through our website and, where appropriate, further information required to verify age or prevent unlawful sales.

We may also provide relevant age-related instructions to delivery partners where required for lawful delivery.

8. Marketing communications

Where you have opted in, or where otherwise permitted by law, we may send you marketing emails about alcohol, offers, new releases, promotions and Stolen Cellar updates.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending essential service messages, including order confirmations, delivery updates, payment notices, product recalls or responses to customer-support enquiries.

9. Cookies, analytics and advertising

We use cookies, pixels and similar technologies to operate our website, remember preferences, understand website activity, improve performance and measure advertising.

These technologies may collect information such as your browser type, device, IP address, pages viewed, products viewed, time spent on the website and interactions with our advertisements.

We may use third-party analytics and advertising services to help us understand website performance and deliver more relevant advertising. These services may include Shopify, Google, Meta and other providers used to operate, analyse or market our store.

You can manage cookies through your browser settings and through any cookie preferences or consent tools made available on our website. Please note that disabling certain cookies may affect website functionality.

10. Shopify

Our online store is hosted by Shopify. Shopify processes personal information in order to operate and improve the services it provides to us and to support your shopping experience.

Information submitted through our website may be shared with Shopify and other service providers used to operate our store, process payments, fulfil orders, provide customer support, analyse website activity and support marketing activity.

Shopify may process personal information in accordance with its own privacy practices.

11. International transfers

Some of our service providers, including Shopify, payment providers, marketing platforms, cloud-storage providers and analytics providers, may store or process personal information outside New Zealand.

Where we disclose personal information outside New Zealand, we take reasonable steps to ensure that the recipient is required to protect the information in a manner that provides safeguards comparable to those required under New Zealand privacy law, or that the disclosure is otherwise permitted by applicable law.

12. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no internet transmission or data-storage system can be guaranteed to be completely secure. You should take care when sending sensitive information electronically and keep any account login details secure.

13. Retention of personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to process orders, provide customer support, comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

14. Your rights

You may request access to the personal information we hold about you and ask us to correct information you believe is inaccurate, incomplete or out of date.

To make a request, contact our Privacy Officer using the details below. We may need to verify your identity before responding to your request.

We will respond in accordance with applicable privacy law.

Depending on where you live, you may also have additional rights relating to your personal information.

15. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer first so we can try to resolve the issue.

If you are not satisfied with our response, you may have the right to make a complaint to the Office of the Privacy Commissioner in New Zealand.

16. Children

Stolen Cellar is not intended for people under the age of 18.

We do not knowingly collect personal information from people under 18. If you believe that a person under 18 has provided us with personal information, please contact us and we will take reasonable steps to delete it where appropriate.

17. Third-party websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policy of any third-party website before providing personal information to it.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, suppliers, service providers, legal obligations or privacy practices.

The updated policy will be published on our website with a revised “Last updated” date.

19. Contact us

For questions about this Privacy Policy, requests to access or correct personal information, or privacy complaints, please contact us.