Effective Date: November 1, 2025
Last Updated: November 27, 2025
1. Introduction
This Cookie Policy explains how Ceylon Food & Beverage Suppliers Limited (trading as The Taprobane) uses cookies and similar tracking technologies on our website in compliance with the Privacy Act 2020 (New Zealand).
Business Details:
Legal Entity: Ceylon Food & Beverage Suppliers Limited
Company Number: 9383679
NZBN: 9429053239570
Trading Name: The Taprobane
GST Number: 147-156-952
Contact Information:
Email: contact@thetaprobane.co.nz
Phone: +64 0508 799 899
WhatsApp: +64 204 799 899
Postal Address: Unit 7, 8 MacMurray Road, Remuera, Auckland 1050, New Zealand
Kitchen Location: Mount Wellington, Harris Road, Auckland, New Zealand
2. What Are Cookies?
2.1 Definition
Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. They help the website recognize your device and remember information about your visit.
2.2 Why We Use Cookies
We use cookies to:
- Make our website work properly
- Improve your user experience
- Remember your preferences and settings
- Analyze how visitors use our website
- Provide relevant content and offers
2.3 Personal Information and Cookies
Under New Zealand’s Privacy Act 2020, cookies can collect personal information, which is defined as “information about an identifiable individual.” This includes:
- IP addresses
- Device information (browser type, operating system)
- Search and browsing history
- Location data
- Website usage patterns
- Login information
- Shopping cart contents
Because cookies collect personal information, we must inform you about our cookie usage and handle this information in accordance with the 13 Information Privacy Principles (IPPs) under the Privacy Act 2020.
3. Your Rights Under New Zealand Privacy Act 2020
3.1 Right to Know
Under the Privacy Act 2020, you have the right to be informed about:
- What cookies and tracking technologies we use
- What information we collect through cookies
- Why we collect this information
- How long we keep this information
- Who we share cookie data with
This Cookie Policy provides all of this information in compliance with Information Privacy Principle 3 (IPP 3).
3.2 Right to Access
You have the right to request a copy of the personal information we have collected about you through cookies. We must respond to access requests within 20 working days.
3.3 Right to Correction
If the personal information we have collected through cookies is inaccurate, incomplete, or out-of-date, you have the right to request correction.
3.4 Right to Control
You have the right to:
- Accept or decline non-essential cookies
- Withdraw consent for cookies at any time
- Delete cookies from your browser
- Opt out of targeted advertising cookies
4. Types of Cookies We Use
4.1 Essential Cookies (Strictly Necessary)
Purpose: These cookies are essential for our website to function properly. Without these cookies, you cannot place orders or use basic features.
Examples:
- Session cookies that keep you logged in
- Shopping cart functionality
- Security cookies for fraud prevention
- Load balancing cookies
Legal Basis: These cookies are necessary to provide our services and do not require explicit consent.
Retention Period: Session cookies are deleted when you close your browser. Persistent essential cookies may last up to 12 months.
4.2 Functional Cookies
Purpose: These cookies remember your preferences and choices to provide a better user experience.
Examples:
- Language preferences
- Saved delivery addresses
- Spice level preferences
- Dietary restriction settings
- Recent order history
Legal Basis: We use these cookies based on your consent and legitimate interest in providing personalized service.
Retention Period: Up to 12 months
4.3 Analytics and Performance Cookies
Purpose: These cookies help us understand how visitors use our website so we can improve it.
Examples:
- Google Analytics (if used)
- Page visit tracking
- Time spent on pages
- Navigation paths
- Error reporting
Information Collected:
- Pages visited
- Time and date of visits
- Device and browser information
- IP address (anonymized where possible)
- Referring websites
Legal Basis: We use these cookies based on your consent and our legitimate interest in improving our website.
Retention Period: Up to 24 months
Third Parties: We may use Google Analytics or similar services. These third parties are contractually obligated to protect your data and use it only for the specified purposes.
4.4 Marketing and Advertising Cookies
Purpose: These cookies are used to deliver relevant advertisements and measure the effectiveness of marketing
campaigns.
Examples:
- Facebook Pixel (if used)
- Google Ads tracking
- Retargeting cookies
- Social media advertising cookies
Information Collected:
- Browsing behavior on our website
- Products viewed
- Items added to cart
- Purchase history
- Demographic information (age range, location)
Legal Basis: We use these cookies based on your explicit consent, which is required for direct marketing under the Unsolicited Electronic Messages Act 2007.
Retention Period: Up to 12 months
Third Parties: We may share cookie data with:
- Facebook/Meta
- Other advertising platforms
You can opt out of these cookies at any time through our cookie consent banner or your browser settings.
4.5 Social Media Cookies
Purpose: These cookies allow you to share content from our website on social media platforms.
Examples:
- Facebook share buttons
- Instagram integration
- Other social media widgets
Information Collected:
- Your social media profile information (if you’re logged in)
- Pages you share
- Interaction with social media features
Legal Basis: Your consent
Retention Period: Up to 12 months
Third Parties: Social media platforms receive information when you use their features on our website. They have their own privacy policies and cookie policies.
5. Cookies We Currently Use
Below is a list of specific cookies we use on our website:
5.1 First-Party Cookies (Set by The Taprobane)
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| session_id | Maintains your session while browsing | Essential | Session |
| cart_items | Remembers items in your shopping cart | Essential | 7 days |
| language_pref | Remembers your language choice | Functional | 12 months |
| spice_level | Remembers your default spice preference | Functional | 12 months |
| loyalty_member | Identifies loyalty program members | Functional | 12 months |
| cookie_consent | Records your cookie preferences | Essential | 12 months |
5.2 Third-Party Cookies
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _ga | Google Analytics | Website analytics | Analytics | 24 months |
| _gid | Google Analytics | Website analytics | Analytics | 24 months |
| fr | Advertising and targeting | Marketing | 90 days |
Note: This list may be updated as we add or remove cookies. We will notify you of significant changes through our cookie banner.
6. Cookie Consent Management
6.1 How We Obtain Consent
In accordance with IPP 3 and IPP 4 of the Privacy Act 2020, we obtain consent for non-essential cookies in a fair and lawful manner.
When you first visit our website, you will see a cookie consent banner that:
- Clearly explains that we use cookies
- Describes the types of cookies we use
- Provides a link to this Cookie Policy
- Offers clear options to accept or decline different categories of cookies
- Does not use misleading, coercive, or threatening language
6.2 Granular Consent Options
You can choose to:
- Accept All Cookies – This enables all cookies including analytics and marketing cookies
- Accept Essential Cookies Only – This enables only cookies necessary for the website to function
- Customize Your Preferences – This allows you to choose which categories of cookies to enable
6.3 Consent is Freely Given
Under IPP 4, we ensure that consent is freely given and not obtained through threats, coercion, or misleading information.
- You can decline non-essential cookies without affecting your ability to place orders
- We do not restrict access to basic website features if you decline marketing cookies
- You can change your cookie preferences at any time
6.4 Consent Records
We maintain records of your cookie consent choices, including:
- Date and time of consent
- Which cookies you consented to
Version of the Cookie Policy you consented to
IP address (for security purposes)
These records are kept in accordance with IPP 5 (storage and security) to demonstrate compliance if required.
7. How to Manage and Delete Cookies
7.1 Through Our Cookie Consent Banner
You can change your cookie preferences at any time by:
- Clicking the “Cookie Settings” link in our website footer
- Accessing the cookie preference center
- Selecting which categories of cookies to enable or disable
7.2 Through Your Browser Settings
You can also control cookies through your web browser settings:
Google Chrome:
- Go to Settings > Privacy and Security > Cookies and other site data
- Choose your preferred cookie settings
- Click “See all cookies and site data” to view and delete specific cookies.
Mozilla Firefox:
- Go to Settings > Privacy & Security
- Under “Cookies and Site Data,” manage your cookie preferences
- Click “Manage Data” to view and delete specific cookies
Safari:
- Go to Preferences > Privacy
- Manage “Cookies and website data”
- You can block all cookies or manage them individually
Microsoft Edge:
- Go to Settings > Cookies and site permissions
- Manage cookies and site data
- View and delete specific cookies
Note: If you disable all cookies, some features of our website may not work properly, including the ability to place orders.
7.3 Mobile Devices
iOS (iPhone/iPad):
- Go to Settings > Safari > Privacy & Security
- Manage “Block All Cookies” or other cookie settings
Android:
- Open your browser (Chrome, Firefox, etc.)
- Go to Settings > Site settings > Cookies
- Manage your cookie preferences
7.4 Opt-Out of Targeted Advertising
To opt out of interest-based advertising:
- Google Ads: Visit https://www.google.com/settings/ads
- Facebook: Visit https://www.facebook.com/settings?tab=ads
- Network Advertising Initiative: Visit https://optout.networkadvertising.org
8. Data Security and Protection
8.1 Security Measures
In accordance with IPP 5 of the Privacy Act 2020, we implement appropriate security safeguards to protect personal information collected through cookies against:
- Loss
- Unauthorized access or disclosure
- Misuse
- Alteration
Our security measures include:
- Encryption: All cookie data transmitted to and from our servers is encrypted using SSL/TLS technology
- Access Controls: Only authorized personnel can access cookie data
- Regular Security Audits: We regularly review and update our security measures
- Third-Party Security: We ensure that third parties who receive cookie data have appropriate security measures in place
8.2 Data Retention
In accordance with IPP 9, we do not keep personal information collected through cookies longer than necessary for the purposes for which it was collected.
Retention Periods:
Session cookies: Deleted when you close your browser
Essential cookies: Up to 12 months
Functional cookies: Up to 12 months
Analytics cookies: Up to 24 months
Marketing cookies: Up to 12 months
Consent records: Up to 7 years (for legal compliance)
After the retention period expires, we securely delete or anonymize the data.
9. Third-Party Cookies and Data Sharing
9.1 Third Parties We Work With
In accordance with IPP 11 of the Privacy Act 2020, we only disclose personal information collected through cookies to third parties when:
- You have consented to the disclosure
- It is necessary to provide our services (e.g., payment processing)
- It is required or authorized by law
Third parties who may receive cookie data:
- Payment Processors: To process your payments securely
- Analytics Providers: Google Analytics (if used) to analyze website performance
- Advertising Platforms: Facebook, Google Ads (only if you consent to marketing cookies)
- Hosting Providers: To store and deliver website content
9.2 Third-Party Responsibilities
All third parties who receive personal information from cookies are:
- Contractually obligated to protect your data
- Required to use data only for specified purposes
- Subject to equivalent privacy protections
- Located in New Zealand or countries with adequate privacy protections
9.3 Cross-Border Data Transfers
Some third-party services (like Google Analytics or Facebook) may transfer cookie data outside of New Zealand. When this occurs:
- We ensure the receiving country has privacy laws comparable to New Zealand’s Privacy Act 2020
- OR the third party is bound by privacy rules providing substantially similar protection
- We inform you about these transfers in this Cookie Policy
Current international data transfers:
- Google Analytics: Data may be processed in the United States under Google’s privacy safeguards
- Facebook: Data may be processed in the United States and other countries
9.4 Your Rights Regarding Third-Party Cookies
You can:
- Opt out of third-party marketing cookies at any time
- Request information about which third parties have received your cookie data
- Visit third-party websites to exercise your rights directly with them
10. Specific Cookie Scenarios
10.1 When You Place an Order
Essential Cookies Used:
- Session cookies to maintain your login
- Shopping cart cookies to remember your items
- Payment processing cookies (secure, encrypted)
- Order confirmation cookies
Purpose: To complete your food order and delivery
Legal Basis: Necessary for providing our services (no consent required)
10.2 When You Join Our Loyalty Program
Cookies Used:
- Loyalty account cookies
- Points tracking cookies
- Redemption history cookies
Purpose: To manage your loyalty account and points
Legal Basis: Your consent when joining the program
10.3 When You View Special Offers
Cookies Used:
- Promotional tracking cookies
- User preference cookies
- Marketing attribution cookies
Purpose: To show you relevant offers and measure campaign effectiveness
Legal Basis: Your consent to marketing cookies
11. Children’s Privacy
11.1 Age Restrictions
Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal information, including cookie data, from children.
11.2 Parental Notice
If you are a parent or guardian and believe your child has provided us with personal information through cookies, please contact us immediately at contact@thetaprobane.co.nz so we can delete it.
12. Changes to This Cookie Policy
12.1 Updates
We may update this Cookie Policy from time to time to reflect:
- Changes in cookie technologies
- New cookies we use
- Updates to New Zealand privacy laws
- Changes in our business practices
- User feedback
12.2 Notification of Changes
When we make significant changes:
- We will update the “Last Updated” date at the top
- We will notify you through our cookie consent banner
- We may send email notifications if changes significantly affect your rights
- We will request new consent if required by law
12.3 Reviewing Changes
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies and protect your personal information.
13. How to Exercise Your Rights
13.1 Access Request
To request access to the personal information we have collected about you through cookies, you can:
- Email: contact@thetaprobane.co.nz
- Phone: +64 0508 799 899
- WhatsApp: +64 204 799 899
- Post: Unit 7, 8 MacMurray Road, Remuera, Auckland 1050, New Zealand
We will respond within 20 working days as required by the Privacy Act 2020.
13.2 Correction Request
If you believe cookie data we hold about you is inaccurate or incomplete, contact us using the details above and we will correct it promptly.
13.3 Withdrawal of Consent
To withdraw your consent for non-essential cookies:
- Use our cookie preference center on the website
- Email us at contact@thetaprobane.co.nz
- We will process your request immediately
13.4 Deletion Request
To request deletion of cookie data:
- Clear cookies through your browser settings (immediate effect)
- Contact us to delete stored cookie-related data from our systems
- We will delete your data within a reasonable timeframe, subject to legal retention requirements
14. Complaints and Disputes
14.1 Contact Us First
If you have concerns about how we handle cookies or your personal information:
- Email: contact@thetaprobane.co.nz
- Phone: +64 0508 799 899
- WhatsApp: +64 204 799 899
We will investigate and respond within 20 working days.
14.2 Office of the Privacy Commissioner
If you are not satisfied with our response, you can complain to the Office of the Privacy
- Commissioner: Office of the Privacy Commissioner
- Website: www.privacy.org.nz
- Email: enquiries@privacy.org.nz
- Phone: 0800 803 909
- Address: PO Box 10094, Wellington 6143, New Zealand
The Privacy Commissioner has the power to:
- Investigate complaints about privacy breaches
- Issue compliance notices
- Impose fines for non-compliance (up to $10,000 for individuals, higher for agencies)
15. Legal Compliance and Enforcement
15.1 Privacy Act 2020 Compliance
This Cookie Policy has been prepared in accordance with New Zealand’s Privacy Act 2020 and the 13 Information Privacy Principles (IPPs).
We comply with:
- IPP 1: Collection for lawful purposes
- IPP 2: Direct collection from individuals (with limited exceptions)
- IPP 3: Notification of collection (this Cookie Policy)
- IPP 4: Fair and lawful collection
- IPP 5: Storage and security
- IPP 6: Right to access personal information
- IPP 7: Right to correction
- IPP 8: Data accuracy requirements
- IPP 9: Retention limitations
- IPP 10-11: Use and disclosure limitations
- IPP 12: Cross-border disclosures
- IPP 13: Unique identifiers
15.2 Unsolicited Electronic Messages Act 2007
For marketing cookies used for targeted advertising, we comply with the Unsolicited Electronic Messages Act 2007, which requires consent for electronic marketing communications.
15.3 Penalties for Non-Compliance
Under the Privacy Act 2020, non-compliance can result in:
- Fines up to $10,000 for individuals
- Higher penalties for agencies
- Compliance notices from the
- Privacy Commissioner
- Reputational damage
We take our privacy obligations seriously and are committed to full compliance.
15.4 International Standards
While New Zealand’s Privacy Act 2020 is our primary obligation, we also consider international best practices including:
- EU GDPR principles (as New Zealand has adequacy status with the EU)
- Australian Privacy Principles (for trans-Tasman consistency)
- OECD Privacy Guidelines
16. Glossary of Terms
- Cookie: A small text file stored on your device by a website
- First-Party Cookie: A cookie set by the website you are visiting (The Taprobane)
- Third-Party Cookie: A cookie set by a different website (e.g., Google, Facebook)
- Session Cookie: A temporary cookie deleted when you close your browser
- Persistent Cookie: A cookie that remains on your device for a set period
- Personal Information: Information about an identifiable individual (including IP addresses, device information, browsing history)
- Consent: Your freely given, informed agreement to our cookie usage
- IPP: Information Privacy Principle under the Privacy Act 2020
- Tracking Technology: Technologies like cookies, pixels, beacons, and scripts that collect user data
17. Contact Information
For all cookie-related inquiries:
The Taprobane
Trading name of Ceylon Food & Beverage Suppliers Limited
Privacy Officer / Data Protection Contact:
- Email: contact@thetaprobane.co.nz
- Phone: +64 0508 799 899
- WhatsApp: +64 204 799 899
- Postal Address: Unit 7, 8 MacMurray Road, Remuera, Auckland 1050, New Zealand
- Kitchen Location: Mount Wellington, Harris Road, Auckland, New Zealand
Business Hours:
- Monday-Tuesday: Closed
- Wednesday-Thursday: 6:00 AM – 8:00 PM
- Friday-Saturday: 6:00 AM – 12:00 AM (Midnight)
- Sunday: 6:00 AM – 3:00 PM
18. Additional Resources
Learn More About Your Privacy Rights:
- Office of the Privacy Commissioner: www.privacy.org.nz
- Privacy Act 2020: www.legislation.govt.nz
- Consumer NZ: www.consumer.org.nz
Opt-Out Tools:
- Network Advertising Initiative: www.networkadvertising.org/choices
- Your Online Choices (EU): www.youronlinechoices.eu
- Google Ads Settings: www.google.com/settings/ads
Legal Compliance Statement
This Cookie Policy has been prepared in accordance with:
- Privacy Act 2020 (New Zealand) – Including all 13 Information Privacy Principles
- Privacy Amendment Act 2025 – Including IPP 3A (indirect collection notification)
- Biometric Processing Privacy Code 2025 – (No biometric cookies currently used)
- Unsolicited Electronic Messages Act 2007 – For marketing communications
- Fair Trading Act 1986 – Ensuring honest and transparent cookie disclosures
Ceylon Food & Beverage Suppliers Limited (trading as The Taprobane) is committed to protecting your privacy and handling your personal information in accordance with New Zealand law.
Your privacy matters to us. If you have any questions about cookies or how we protect your personal information, please don’t hesitate to contact us.
Version: 1.0
Effective Date: November 1, 2025
Last Updated: November 27, 2025
Next Review Date: May 1, 2026
