Quiet kitchens keep quiet records.
This policy describes what personal data the Phrexxontholmare recipe journal collects, why we collect it, who can see it, how long it stays with us and how to ask for it back. We have written it in plain English, but the rights it describes are the same rights set out in the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR, and New Zealand's Privacy Act 2020. Last reviewed on 6 May 2026.
A · Who we are
"Phrexxontholmare" (also referred to as "the kitchen", "we", "us", "our") is the operator of the website phrexxontholmare.ddd. The kitchen is based at:
- 10 Rawhiti Street, Diamond Harbour 8972, Aotearoa New Zealand
- Telephone: +64 27 277 7734
- Email: infocenter@phrexxontholmare.world
- NZBN: 9429050010024 · GST: 134-562-908
Under the New Zealand Privacy Act 2020 we are the "agency" responsible for any personal information collected through this site. For the purposes of the EU/UK GDPR (where it applies to overseas readers) we act as the data controller. Our nominated Privacy Officer is the Editor (Manaia Brookes), reachable at the email above with the subject line "Privacy".
B · Scope
This policy applies to phrexxontholmare.world and to the email correspondence that takes place when you write to the address above. It does not cover external websites we may link to, or services run by other organisations that you visit through those links. We always recommend reading the privacy policy of a third-party site before sharing data with it.
C · What personal data we collect
Data you give us
- Contact form: your name, email address, the message you write, and whether you have ticked the consent box.
- Newsletter sign-up: your email address only.
- Email correspondence: anything you choose to share when writing to us by email.
- Workshop bookings: if you book a workshop, the name and dietary notes you give us, and any payment confirmation we are sent by our payment processor.
Data we collect automatically
- Server logs: a short record of the page you requested, the date and time, your IP address (truncated to its first three blocks) and the user-agent string of your browser.
- Cookies and local storage: small text records described in our cookies policy.
- Optional analytics: aggregated, anonymous reading metrics, only if you accept analytics cookies.
We do not collect special-category data (such as health, religion or political opinion). We do not buy reader data from third parties or build behavioural profiles.
D · Why we collect it
- To reply to a note you have sent us through the contact form or by email.
- To send you the Sunday letter, if you have actively asked to receive it.
- To organise and confirm any workshop you book at the wharf hall.
- To keep the website secure, available and free of basic abuse.
- To understand which recipes are read most, where the journal can be improved, and which growers we should write about more often (only with analytics consent).
E · Legal basis
Under the New Zealand Privacy Act 2020 we collect personal information only for a lawful purpose connected with our work as a recipe journal, and only the information that is reasonably necessary for that purpose. We follow the thirteen Information Privacy Principles (IPPs) set out in the Act, including notifying you what we collect (this page), giving you reasonable access and correction rights, and only keeping information for as long as we genuinely need it.
Where GDPR applies, the legal basis on which we process your personal data is:
- Consent (Article 6(1)(a)) — for the newsletter, optional analytics, and marketing cookies.
- Performance of a contract (Article 6(1)(b)) — for the administration of workshops you have booked with us.
- Legitimate interests (Article 6(1)(f)) — for replying to your messages and for keeping the site secure. Our legitimate interest is to run a small recipe journal in a careful, safe manner; we balance this against your right to privacy and limit the data we collect accordingly.
Notifiable privacy breaches. If we ever discover a privacy breach that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner of New Zealand as soon as practicable, in accordance with section 114 of the Privacy Act 2020.
F · Who can see your data
Your data is read only by the small Phrexxontholmare team listed on our Hands at Work page, and by a short list of trusted processors who help us run the site:
| Processor | Purpose | Region |
|---|---|---|
| Hosting provider | Stores the website files and keeps server logs. | New Zealand |
| Email provider | Sends and receives email from our address. | New Zealand |
| Newsletter platform | Sends the optional Sunday letter, only if you subscribe. | European Union |
| Workshop payments | Processes secure card payments for workshop bookings. | Australia |
We do not sell, rent or trade personal data to anyone, ever. We will only share information with public authorities if a valid New Zealand court order or equivalent legal request requires us to.
G · International transfers
If a processor listed above is located outside New Zealand, the transfer is covered by an appropriate safeguard — usually a written data-processing agreement, the relevant standard contractual clauses, or comparable measures recognised by the European Data Protection Board.
H · How long we keep your data
| Type | Retention |
|---|---|
| Contact form messages | Up to 24 months from the last reply, then deleted. |
| Newsletter subscribers | Until you unsubscribe, plus a 30-day grace period. |
| Workshop booking records | Up to 7 years, to meet New Zealand tax-record obligations. |
| Server logs | Up to 90 days, then aggregated and deleted. |
| Aggregated analytics | Up to 13 months at row level, indefinitely once anonymised. |
I · Security
The site is served over TLS encryption. Access to email and booking data is restricted to named members of the kitchen team using two-factor authentication. We keep our software up to date and review our small list of processors at least once a year. No system is perfectly safe, but we treat your data the way we would treat someone's handwritten letter — quietly, carefully, and only by people we trust.
J · Your rights
Subject to local law, you have the right to:
- Ask what personal data we hold about you (right of access).
- Ask us to correct anything that is wrong (right of rectification).
- Ask us to delete data we no longer need (right of erasure).
- Ask us to limit how we use your data while a question is being resolved (right to restriction).
- Receive a copy of data you have given us in a portable format (right to portability).
- Object to processing based on legitimate interests, and withdraw consent at any time.
To exercise any of these rights, please write to infocenter@phrexxontholmare.world. We respond within 30 days. If you feel we have not handled a request fairly, you may complain to the New Zealand Office of the Privacy Commissioner, or — for readers in the EU/EEA or UK — your local data-protection authority.
K · Children
This site is intended for general audiences, but does not actively address children under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe we may have collected such data, please contact us so we can remove it.
L · Changes to this policy
If we materially change how we process personal data, we will publish a new version of this page and update the "last reviewed" date. For substantial changes, we will inform newsletter subscribers by email so you have a chance to review and, if necessary, withdraw your consent.
M · How to contact us
For any privacy question, including data-subject requests, please write to:
- Phrexxontholmare — Privacy
- 10 Rawhiti Street, Diamond Harbour 8972, New Zealand
- infocenter@phrexxontholmare.world
- +64 27 277 7734