Last updated: 27 October 2026
Wonky Box ("Wonky Box", "we", "us", "our") runs a weekly fresh food subscription and delivery service at wonkybox.nz. This policy explains what personal information we collect, why, who we share it with, and how you can access or correct it.
We follow the New Zealand Privacy Act 2020 and its Information Privacy Principles. This policy covers our website, our subscription and account pages, our app, our emails and texts, and any time you contact our team.
Who we are: Wonky Limited, 17 Saleyards Road, Otahuhu, Auckland 1062, New Zealand.
Privacy Officer: Katie Jackson, hello@wonkybox.nz
1. What we collect
We only collect what we need to run your subscription, deliver your box and keep in touch.
Information you give us
Information we collect automatically
Information we get from other people
If we collect your information from someone else, we will tell you we have it, why, and how to access it, unless an exception under the Privacy Act applies.
Sensitive information
If you tell us about your health, or personal or financial circumstances (for example, when pausing or cancelling), we use it only to help with that request. We do not use it for marketing.
2. How we use it
Our team uses AI tools, including ChatGPT (OpenAI) and Claude (Anthropic), to help analyse trends and draft replies. We use business plans, which do not use your information to train AI models. A person reviews anything that affects you, and these tools are bound by the same confidentiality and security terms as our other providers.
3. Email and SMS
We only send marketing emails and texts if you have agreed to receive them, in line with the Unsolicited Electronic Messages Act 2007. Every marketing message tells you who it is from and how to unsubscribe.
Unsubscribing from marketing does not stop service messages about an active subscription, like billing or delivery updates.
We send emails and texts through Klaviyo. Your SMS opt-in and consent information will not be shared with any third parties, except Klaviyo as needed to deliver messages.
4. Cookies and tracking
Our website and app use cookies, pixels and similar tools. You can block or delete cookies in your browser settings, but some parts of the site, like logging in and checkout, may not work without them.
Cart and signup reminders: Wonky Box uses cookies to track items added to your cart and when you leave without finishing checkout. We use this to decide when to send reminder emails or texts.
Ad matching: we may share encrypted (hashed) email addresses or phone numbers with Meta, Google and TikTok so we can show ads to existing customers, leave them out of new customer ads, or find similar audiences. You can control this in your Meta, Google and TikTok ad settings, or ask us to exclude you.
5. Who we share it with
We do not sell your personal information. We share it only with people who help us run Wonky Box, and only what they need.
Our providers can only use your information to provide services to us.
Overseas storage
Your account and subscription records are hosted in New Zealand. Several of our providers store information outside New Zealand, mainly in Australia, the United States and the European Union. Before we send information overseas, we check the provider is covered by privacy laws comparable to New Zealand's, or we have contract terms that protect it to the same standard, as required by the Privacy Act.
6. How long we keep it, and how we protect it
We keep your information only as long as we need it. Order and payment records are kept for 7 years for tax purposes. If you cancel, we keep your account details for 2 years so you can restart easily, then delete or anonymise them. Support conversations are kept for 2 years after they close. If you have not opened, clicked or ordered in 2 years, we remove you from our marketing lists. You can ask us to delete your information sooner at any time.
We protect your information with encrypted connections, secure payment processing, access limited to team members who need it, and providers with strong security standards. No system is completely secure, so please keep your login details private.
If we have a privacy breach that has caused or is likely to cause serious harm, we will tell you and the Privacy Commissioner as soon as practicable.
7. Your rights
Under the Privacy Act 2020 you can:
Email hello@wonkybox.nz. We may need to check your identity first. We will reply within 20 working days, and there is no charge.
You can update most details yourself in your Wonky Box account.
8. Complaints
If you are unhappy with how we have handled your information, please contact our Privacy Officer first so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.
9. Changes to this policy
We update this policy when our services, providers or the law change. The latest version is always on this page, with the date it was last updated. If we make a significant change, we will let active customers know by email.
10. Contact us
Katie Jackson, Privacy Officer, Wonky Limited
Email: hello@wonkybox.nz
Post: 17 Saleyards Road, Otahuhu, Auckland 1062
