Privacy Act 2020 operating policy
Privacy Policy
This policy explains what information GreenMenu collects, why it is needed, who may receive it, and how people can request access or correction.Effective 28 July 2026 · GreenMenu by Crafted by D · Aotearoa New Zealand1. Who is collecting the information
GreenMenu by Crafted by D collects and holds the personal information described in this policy. The public contact is craftedbydnz@gmail.com. GreenMenu operates from Aotearoa New Zealand and provides services in New Zealand, Australia and other locations by agreement.
2. Information we may collect
- Names, business names, email addresses, phone numbers, locations, websites and contact preferences.
- Menus, pricing information, business goals, operational constraints, supplier information, staffing or equipment information and project briefs.
- The client’s highest-priority outcome, definition of success and any request outside the normal service scope.
- Tool-use information, the tool used, email-unlock history and separately recorded marketing consent.
- Payment-related identifiers such as the payer email or a Stripe receipt reference. GreenMenu does not receive or store full payment-card numbers from Stripe checkout.
- Technical information generated through hosting and security systems, which may include browser, device, IP-address, request and error-log data.
- Messages, enquiries, feedback and any information voluntarily supplied by the person contacting GreenMenu.
3. Why information is collected
Information is collected to provide requested services, confirm purchases, understand the brief, identify the customer’s priority, assess suitability, deliver work, respond to enquiries, operate free tools, maintain records, prevent misuse, protect the website and comply with legal or tax obligations.
Marketing messages are sent only where the person has provided applicable consent. Service communications, purchase confirmations and project communications are not treated as optional marketing when they are reasonably necessary to perform the requested service.
4. Required and optional information
Fields marked as required are needed to assess or deliver the selected service. A person may decline to provide optional information, but missing information may delay the work or limit the advice GreenMenu can provide. Marketing consent is always optional and is not required to receive a paid service or unlock a tool result.
5. Information about other people
Clients must not provide identifiable customer, employee or contractor information unless they are authorised to do so and it is necessary for the project. Dietary, allergen, accessibility or health-related constraints should normally be described without naming the individual concerned.
6. Payments and third-party providers
Stripe hosts the current checkout pages and processes payment information under its own privacy and security terms. GreenMenu may also rely on Floot for website hosting, database services and operational infrastructure, and may use professional advisers or service providers where reasonably required.
Some providers may process or store information outside New Zealand. GreenMenu will use providers for legitimate business purposes and will take reasonable steps to ensure information is handled consistently with applicable privacy obligations.
7. Cookies, local storage and analytics
The site uses browser local storage and session storage to remember tool unlocks, calculation counts and functional preferences. GreenMenu also records limited first-party action counts such as a homepage or tool-area view once per browser session, opening a tool, selecting a premium offer, clicking a checkout or enquiry action, completing an email unlock and submitting a client intake.
These operational events are used to understand whether the website funnel works and where customers need clearer guidance. The current event tracking does not create an advertising profile, store the text entered into tools, or use a persistent cross-site advertising identifier. The policy will be updated before non-essential advertising, behavioural profiling or third-party marketing analytics are introduced.
8. Sharing and disclosure
GreenMenu does not sell personal information. Information may be disclosed to hosting, payment, communications, professional-advice or technical providers where necessary; where required by law; to protect GreenMenu or another person from serious harm or misuse; or with the person’s permission.
9. Security and retention
GreenMenu takes reasonable technical and organisational steps to protect information from loss, unauthorised access, misuse or disclosure. No internet system can be guaranteed completely secure.
Information is kept only for as long as reasonably needed for the purpose collected, to manage disputes, maintain business records or meet legal obligations. Information that is no longer required may be deleted, anonymised or securely archived.
10. Access, correction and complaints
A person may ask GreenMenu for access to personal information held about them and may request correction if it is wrong, incomplete or misleading. Requests should identify the person and the relevant information. Identity may need to be verified before information is released.
Privacy concerns should first be sent to craftedbydnz@gmail.com. A person may also contact the New Zealand Office of the Privacy Commissioner if a concern is not resolved.
11. Marketing choices
Marketing consent can be withdrawn at any time by using the unsubscribe method in a message or by emailing craftedbydnz@gmail.com. Withdrawal does not affect essential service communications for an active purchase or project.
12. Changes to this policy
This policy may be updated as the business, website, tools, providers or legal requirements change. The current effective date will be shown at the top of the page. Material changes affecting existing clients will be communicated where reasonably necessary.