Privacy Policy

Last updated: 18 December 2025

1. Introduction

LYTE Drinks ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lyte.co.nz (the "Website").

This Privacy Policy complies with the Privacy Act 2020 (New Zealand) and the General Data Protection Regulation (GDPR) where applicable. By using our Website, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide to us when you:

  • Contact us through our contact form or email
  • Subscribe to our newsletter or marketing communications
  • Participate in surveys or promotions
  • Interact with our social media accounts

This information may include your name, email address, phone number, postal address, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Device identifiers

We collect this information using cookies, web beacons, and similar tracking technologies. You can control cookies through your browser settings.

2.3 Age Verification

We use session storage to remember your age verification status. This information is stored locally in your browser and is not transmitted to our servers. It is automatically deleted when you close your browser session.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our Website
  • To respond to your inquiries and provide customer support
  • To send you marketing communications (with your consent)
  • To comply with legal obligations and enforce our Terms and Conditions
  • To protect our rights, property, or safety, and that of our users
  • To analyze website usage and trends to improve user experience
  • To prevent fraud and ensure age verification compliance

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal bases:

  • Consent: When you have given clear consent for us to process your data
  • Legitimate Interests: For website analytics, security, and improvement
  • Legal Obligation: To comply with applicable laws and regulations
  • Contract Performance: To fulfill our obligations under any agreement with you

5. Disclosure of Your Information

We may share your information in the following circumstances:

  • Service Providers: With third-party service providers who perform services on our behalf (e.g., hosting, analytics, email services)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Protection of Rights: To protect our rights, property, or safety, or that of others

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS
  • Secure server infrastructure
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Objection: Object to processing of your personal information
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data to another service provider
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days, or as required by applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website and store certain information. Cookies are small data files stored on your device.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.

We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the EEA to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or adequacy decisions.

11. Children's Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

LYTE Drinks

Email: harrison@lyte.co.nz

Website: Contact Us

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.