Last updated: 18 June 2026

Alfa Group NZ Ltd, trading as Mineral Lagoon (“Mineral Lagoon”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit www.mineral-lagoon.com, create an account, contact us or purchase products from us.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles.

1. Who we are

Mineral Lagoon is operated by:

Alfa Group NZ Ltd
Trading as Mineral Lagoon

P.O. Box 11
Stanmore Bay, Whangaparāoa
Auckland, New Zealand

Email: info@mineral-lagoon.com
Website: www.mineral-lagoon.com

Our Privacy Officer can be contacted using the email address above.

2. Personal information we collect

Depending on how you interact with us, we may collect:

• Your name
• Billing and delivery addresses
• Email address
• Telephone number
• Customer account and preference information
• Products purchased, order history and transaction details
• Delivery and tracking information
• Communications, enquiries, reviews and feedback
• Newsletter and marketing preferences
• Information submitted through contact forms, surveys, social media, live chat or other communication channels
• Technical information such as your IP address, browser type, device information, pages visited, referring website and approximate location
• Cookie identifiers and website-usage information
• Information provided by payment, fraud-prevention, delivery, analytics or other service providers where permitted by law

We do not ordinarily receive or store your complete payment-card number. Payments are processed by external payment providers.

3. How we collect personal information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, subscribe to communications, submit a form or communicate with us
• Automatically through cookies, server logs and analytics technologies when you use our website
• From payment processors, delivery providers and other service providers involved in completing your transaction
• From social media platforms when you interact with our social pages, advertising or content
• From another person where they provide your details for a legitimate purpose, such as sending a gift or arranging delivery
• From publicly available sources where collection is lawful and relevant to our business activities

Where we collect personal information about you indirectly, we will comply with applicable notification requirements under the Privacy Act 2020.

4. Why we collect and use personal information

We may use your personal information to:

• Create and manage your customer account
• Process, confirm and fulfil orders
• Take and verify payments
• Arrange shipping, delivery, tracking, returns and refunds
• Communicate with you about orders, enquiries or customer-service matters
• Detect, investigate and prevent fraud, misuse or security threats
• Maintain and improve our website, products and services
• Personalise your website and shopping experience
• Analyse website traffic, performance and customer behaviour
• Request product or service reviews
• Send marketing communications where you have consented or where otherwise permitted by law
• Manage competitions, surveys or promotions
• Comply with legal, tax, accounting, regulatory and record-keeping requirements
• Establish, exercise or defend legal claims
• Protect our rights, property, systems, customers and other persons

We will not use personal information for an unrelated purpose unless permitted by law or authorised by you.

5. Providing personal information

You may choose not to provide personal information. However, some information is necessary for us to process an order, deliver products, create an account, respond to an enquiry or provide particular services.

If required information is not supplied, we may be unable to complete the relevant transaction or provide the requested service.

6. Payments

Payments may be processed by third-party payment providers, such as card-payment providers, PayPal or Afterpay, depending on the payment options available at checkout.

Those providers process payment information under their own terms and privacy policies. Mineral Lagoon does not ordinarily store complete payment-card details on its website systems.

7. Cookies and analytics

Our website uses cookies and similar technologies to:

• Keep the website functioning
• Remember shopping-cart contents and preferences
• Support customer account and checkout functions
• Maintain website security
• Measure website traffic and performance
• Understand how visitors use the website
• Improve our website, products and marketing

We may use services such as Google Analytics to collect aggregated or pseudonymous website-usage information.

Where required, non-essential cookies will be used in accordance with your cookie choices. You can also control or delete cookies through your browser settings. Disabling cookies may prevent some website features from working correctly.

More information may be provided through our cookie notice or cookie-settings tool.

8. Marketing communications

We may send promotional emails where you have subscribed, consented or where permitted by law.

You can unsubscribe at any time by:

• Using the unsubscribe link in a marketing email
• Emailing info@mineral-lagoon.com

We may still send non-marketing communications relating to your account, orders, payments, delivery, returns, security or legal matters.

9. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

• Payment processors and financial-service providers
• Shipping, courier, postal, fulfilment and logistics providers
• Website-hosting, cloud-storage and technical-support providers
• Email, communication and customer-service providers
• Analytics, advertising and marketing-service providers
• Accountants, insurers, auditors, legal advisers and other professional advisers
• Fraud-prevention, security and identity-verification providers
• Government agencies, regulators, courts, law-enforcement agencies or other persons where required or permitted by law
• A purchaser, adviser or relevant party in connection with a proposed or completed sale, merger, restructuring or transfer of all or part of our business

We do not sell personal information.

We require service providers to use personal information only for authorised purposes and to protect it appropriately.

10. Overseas service providers

Some service providers may store or process personal information outside New Zealand.

Where personal information is disclosed to an overseas person or organisation, we will take reasonable steps to ensure the disclosure complies with the Privacy Act 2020, including applicable protections for overseas disclosure.

Overseas privacy laws may differ from New Zealand law.

11. Security

We take reasonable safeguards to protect personal information against loss, unauthorised access, use, modification, disclosure and other misuse.

Security measures may include:

• Secure website connections
• Access controls
• Restricted administrative access
• Password protection
• Security monitoring
• Backups and software maintenance
• Use of reputable payment and technology providers
• Staff and contractor confidentiality requirements where appropriate

No internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security, but we will take reasonable steps appropriate to the nature of the information we hold.

12. Privacy breaches

If a privacy breach occurs, we will investigate and respond to it.

Where a breach has caused or is likely to cause serious harm, we will notify the New Zealand Privacy Commissioner and affected individuals as soon as reasonably practicable, as required by the Privacy Act 2020.

13. Retention of information

We retain personal information only for as long as it is reasonably required for the purpose for which it was collected or where retention is required for legal, accounting, tax, fraud-prevention, dispute-resolution or legitimate business purposes.

When personal information is no longer required, we will take reasonable steps to delete it, anonymise it or securely dispose of it.

14. Accessing and correcting your information

You may request:

• Confirmation of whether we hold personal information about you
• Access to personal information we hold about you
• Correction of personal information that is inaccurate, incomplete or out of date

To make a request, email info@mineral-lagoon.com.

We may need to verify your identity before processing a request. We will respond in accordance with the Privacy Act 2020. In limited circumstances, the law may permit or require us to withhold information.

You may also update some account information by logging into your customer account.

15. Complaints

Please contact our Privacy Officer first if you have a privacy concern or complaint:

Email: info@mineral-lagoon.com

We will review your concern and attempt to resolve it.

You may also contact the Office of the New Zealand Privacy Commissioner if you are not satisfied with our response.

16. Children’s privacy

Our website and products are not specifically directed to children.

Where a child provides personal information, we will handle it in accordance with applicable New Zealand privacy requirements and the circumstances of the collection.

17. Third-party websites

Our website may contain links to websites, services or social platforms operated by other organisations.

Those organisations have their own privacy practices and policies. We are not responsible for the privacy practices or content of external websites.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, services, technologies or legal obligations change.

The updated policy will be published on this page with a revised “Last updated” date. Material changes may also be communicated by another appropriate method.

19. Contact us

For questions, access requests, correction requests or complaints about privacy, contact:

Privacy Officer
Alfa Group NZ Ltd
Trading as Mineral Lagoon

P.O. Box 11
Stanmore Bay, Whangaparāoa
Auckland, New Zealand

Email: info@mineral-lagoon.com
Website: www.mineral-lagoon.com