No products in the cart.

Loyalty reward — every 5 orders, get NZ$50.00 off automatically at checkout.

Privacy Policy

Effective Date: 21 May 2026

Kiwi Biolab (“we”, “us”, or “our”) operates https://kiwibiolab.com/. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website or make a purchase from our online store. We are committed to complying with the New Zealand Privacy Act 2020 and all applicable privacy legislation.

By using our website you consent to the practices described in this policy. If you do not agree with this policy, please do not use our website.

1. Information We Collect

We may collect the following types of personal information:

Information You Provide Directly

  • Account information — name, email address, phone number, and password when you create an account.
  • Order information — billing address, shipping address, and payment details when you place an order.
  • Communication data — any information you include when you contact us via email, phone, or our contact form.
  • Research verification — professional credentials or institutional affiliation you provide to verify your eligibility to purchase research products.

Information Collected Automatically

  • Device and browser data — IP address, browser type, operating system, device type, and screen resolution.
  • Usage data — pages visited, time spent on each page, referring URL, and click behaviour.
  • Cookie data — information stored via cookies and similar technologies (see Section 4 below).

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Order fulfilment — to process, ship, and manage your orders and to communicate with you about order status.
  • Account management — to create and maintain your account and provide customer support.
  • Website improvement — to analyse usage patterns, diagnose technical issues, and improve our website functionality and user experience.
  • Legal compliance — to comply with applicable laws, regulations, and legal processes, including obligations under New Zealand law.
  • Communication — to respond to your enquiries, send transactional emails (order confirmations, shipping updates), and, with your consent, send promotional communications.
  • Fraud prevention — to detect and prevent fraudulent transactions and protect the security of our website and users.

3. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

  • Service providers — we share information with third-party companies that help us operate our business, such as payment processors, shipping carriers, email service providers, and website hosting providers. These providers are contractually required to protect your data and use it only for the services they perform on our behalf.
  • Payment processing — when you make a purchase, your payment information is processed by our third-party payment gateway. We do not store full credit card numbers on our servers.
  • Legal requirements — we may disclose your information if required to do so by law, regulation, legal process, or governmental request.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

  • Essential cookies — required for basic website functionality such as maintaining your shopping cart, remembering your login session, and processing checkout. These cannot be disabled.
  • Analytics cookies — help us understand how visitors interact with our website by collecting information anonymously. We may use services such as Google Analytics for this purpose.
  • Functional cookies — remember your preferences, such as language or region, to provide a more personalised experience.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect website functionality, including the ability to add items to your cart or complete a purchase.

5. Third-Party Services

Our website is 100% self-hosted, meaning your data is stored and processed on our own servers. However, we may use the following third-party services that collect or process data independently:

  • Payment gateways — third-party payment processors that handle transaction data securely under their own privacy policies.
  • Google Analytics — website analytics service provided by Google. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
  • Shipping providers — courier services that receive your name and address to deliver your order.

We encourage you to review the privacy policies of these third-party services, as we do not control how they handle your data.

6. Data Security

We take reasonable steps to protect your personal information from unauthorised access, use, alteration, or disclosure. Our security measures include:

  • SSL/TLS encryption for all data transmitted between your browser and our website.
  • Secure storage of passwords using industry-standard hashing algorithms.
  • Restricted access to personal information on a need-to-know basis.
  • Regular security reviews of our systems and processes.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account data — retained for as long as your account remains active. You may request account deletion at any time.
  • Order records — retained for a minimum of seven years in accordance with New Zealand tax and business record-keeping requirements.
  • Communication records — retained for as long as necessary to resolve your enquiry, plus a reasonable period thereafter.

8. Your Rights Under the Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access your personal information that we hold.
  • Request correction of any inaccurate or incomplete personal information.
  • Request deletion of your personal information, subject to any legal obligations we have to retain certain records.
  • Withdraw consent for marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.

To exercise any of these rights, please contact us using the details in Section 11 below. We will respond to your request within 20 working days, as required by the Privacy Act 2020.

9. Children’s Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Effective Date” at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner, New Zealand’s independent privacy regulator.