Privacy Policy

Last updated: 14 July 2026

This Privacy Policy describes how Meridian Review Ltd ("we", "our", "us") collects, uses and protects personal information when you visit freshjoints.world or place an order for Hardero. We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020 and, where applicable, the General Data Protection Regulation (GDPR).

1. What personal data we collect

We may collect the following categories of personal data:

• Identity data: name provided when placing an order or contacting us.
• Contact data: phone number, email address, postal address.
• Transaction data: order details, product SKU, price, delivery information.
• Technical data: IP address, browser type and version, operating system, pages visited, time on site (collected via cookies - see Cookie Policy).
• Marketing and communications data: your preferences for receiving communications from us.

2. How we collect personal data

We collect personal data directly from you when you: complete the order form on our website; submit a contact enquiry; subscribe to editorial updates; interact with our website (automatically via cookies and analytics tools).

3. Legal bases for processing (GDPR Article 6)

• Contract performance (Art. 6(1)(b)): processing your order and arranging delivery of Hardero.
• Legitimate interests (Art. 6(1)(f)): improving our website, fraud prevention, and editorial analytics.
• Consent (Art. 6(1)(a)): placement of non-essential cookies and analytics (Google Analytics, Google Ads) - you may withdraw consent at any time via the cookie banner.
• Legal obligation (Art. 6(1)(c)): compliance with applicable New Zealand and international law.

4. How we use your personal data

• Processing and fulfilling your Hardero order (name and phone number for delivery confirmation).
• Responding to your enquiries and support requests.
• Sending editorial newsletters where you have opted in.
• Improving site content and user experience through anonymised analytics.
• Meeting legal and regulatory obligations.

5. Cookies and third-party services

We use the following third-party services which may set cookies and collect data on our behalf:

• Google Analytics (_ga, _gid): website traffic analysis. Data is anonymised before processing where possible. You can opt out via the cookie banner or Google's opt-out tool.
• Google Ads (_gcl_au) and Remarketing: advertising effectiveness measurement. Consent Mode v2 is implemented - ad tracking only activates on your explicit acceptance.
• Google Maps: embedded map on our contact page. Subject to Google's Privacy Policy (policies.google.com/privacy).

Our website implements Google Consent Mode v2. By default, all advertising and analytics storage is denied until you grant consent via the cookie banner. See our Cookie Policy for full details.

6. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected. Order data is retained for 7 years for legal and accounting purposes. Contact enquiry data is retained for 2 years. Analytics data is retained in accordance with Google's standard retention periods (up to 26 months).

7. International data transfers

Some of our service providers (including Google) are based outside New Zealand and the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, and the equivalent mechanisms recognised under the NZ Privacy Act 2020.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access - request a copy of your data we hold.
• Right to correction - request correction of inaccurate data.
• Right to erasure - request deletion of your data where no longer necessary.
• Right to restriction - request we limit processing of your data.
• Right to data portability - receive your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent - at any time, where processing is based on consent.

To exercise any of these rights, contact us at privacy@freshjoints.world.

9. Supervisory authority

If you are based in New Zealand and have concerns about how we handle your personal information, you have the right to lodge a complaint with the Office of the Privacy Commissioner (OPC):

• Website: www.privacy.org.nz
• Phone: 0800 803 909

If you are based in the EU/EEA, you may contact your local data protection authority.

10. Security

This website is served exclusively over HTTPS. We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss or disclosure. No internet transmission is 100% secure; we will notify you of any breach in accordance with applicable law.

11. Children

Our website is not directed to persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website following a revision constitutes acceptance of the updated policy.

13. Contact us

Meridian Review Ltd
Level 2, 55 Shortland Street, Auckland 1010, New Zealand
Email: privacy@freshjoints.world
Phone: +64 9 000 0000