Last updated: 1 August 2026
The Merchant Pub Co. (“we”, “us” or “our”) is responsible for personal information collected through this website and in connection with enquiries and reservations made with our venue. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its information privacy principles.
Information we collect
Depending on how you interact with us, we may collect:
- your name, email address and phone number;
- reservation information, including your preferred date, time, party size and relevant dining requirements;
- function information, including the occasion, company, proposed date, guest numbers and event requirements;
- messages and other information you choose to provide; and
- limited technical information generated when you use the website, such as IP address, browser information and security or server logs.
We generally collect information directly from you. We may also receive reservation information from ResDiary when you use the embedded booking service, or information from someone acting with your authority.
Why we collect and use it
We use personal information only where reasonably necessary to:
- respond to enquiries and provide requested function information;
- manage bookings, functions and customer requests;
- contact you about your enquiry, reservation or event;
- operate, secure and improve our website and services;
- prevent misuse or fraud; and
- meet our legal obligations and resolve complaints.
Providing information is voluntary, but if you do not provide information marked as required, we may be unable to process your request.
Who we share information with
We do not sell personal information. We may disclose it only where reasonably necessary to our staff and contractors, professional advisers, authorities where required by law, and service providers that help us operate the website or fulfil your request. These providers include Formspark for enquiry forms, ResDiary for reservations, Cloudflare for website hosting and security, Sanity for website content infrastructure, and mapping or web-service providers used by the site.
Some providers may process information outside New Zealand. Where the Privacy Act requires it, we take reasonable steps to ensure overseas recipients provide safeguards comparable to New Zealand privacy law, or otherwise rely on a permitted basis for disclosure.
Cookies and embedded services
Our hosting provider and embedded services may use cookies or similar technologies needed for security, performance, maps and reservations. The ResDiary booking interface is operated by ResDiary and may apply its own privacy and cookie terms. You can control cookies using your browser settings, although blocking some cookies may affect those services.
Storage, security and retention
We take reasonable safeguards against loss, misuse, unauthorised access, disclosure and alteration. No internet service is completely secure, but we limit access to people and providers that need the information for the purposes described above.
We retain personal information only for as long as reasonably required for the purpose for which it was collected, our operational needs, dispute resolution and applicable legal requirements. We then delete or anonymise it where reasonably practicable.
Access and correction
You may ask whether we hold personal information about you, request access to it, or ask us to correct it. Contact our privacy contact at lara@merchantpub.co.nz or write to us at 219 Don McKinnon Drive, Westfield Albany, Auckland. We may need to verify your identity before actioning a request.
Privacy breaches and complaints
If a privacy breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as required by the Privacy Act.
If you have a privacy concern, please contact us first using the details above so we can try to resolve it. You may also complain to the Office of the Privacy Commissioner.
Changes to this policy
We may update this policy when our practices or legal obligations change. The latest version will appear on this page with its effective date.