Privacy Policy and Disclaimer


This Policy sets out how TUMU Timbers deals with your personal information or data and how we protect your privacy.

We will only deal with personal information and data in accordance with the Privacy Act 2020 (Privacy Act). The Privacy Act provides a framework for protecting the right to privacy of personal information, including the right to access your personal information, while recognising that other rights and interests may also need to be taken into account.

Collection of Personal Information/Data

  • We will, from time to time, collect personal information or data from you or others that directly relates to our business.
  • We will collect personal information from you if you interact with us.
  • We collect personal information from job candidates, employees, contractors, customers, visitors, potential customers, and people who use our website.
  • Where you interact with us, we will collect some or all of the following personal information/data:
    • Your full name;
    • Your contact details including your email address, phone number and/or postal address;
    • Your written communications with us;
    • Your bank account details;    
    • Your IRD number;
    • Your SuperGold card details if associated with a discount
    • Your engagement with our website, our social media sites and/or services.

If you are a job candidate or an employee, we may collect your personal information to assess suitability for employment and promotion, through screening, interviewing, medical checking, pre-employment vetting and reference checking, and for the efficient administration of our various business processes, such as payroll functions. If you are successful in your application for employment, we will retain the information collected in relation to that application on your personal file.

Use, storage and security of personal information

  • We will only collect, use and disclose personal information in accordance with the Privacy Act.
  • We will not sell your personal information or use it for an unlawful purpose.
  • We will only share your personal information if required by law or if we need to with trusted third parties (third parties) who provide services to our business, for example, IT support services, our legal representatives, financial advisors, our accountant etc.
  • We will use cookies to understand how an individual engages with our website and services so we can improve our services, increase engagement, and provide you with more targeted information.
  • We keep your Personal Information for as long as it is required to provide you with the products or services you requested from us and to comply with legal requirements. If we no longer require your personal information for any purpose, including legal purposes, we will take reasonable steps to securely destroy or de-identify your personal information.
  • We will take reasonable steps to ensure that your personal information is stored securely and is protected from misuse and loss and from unauthorised access, modification, or disclosure. We have a range of systems and communication security measures. Access to your Personal Information is restricted to those properly authorised to have access.

Access to and correction of Personal Information

  • We will make every effort to ensure that any personal information held by us is accurate, up to date, complete, and relevant to the purpose for which it was collected.
  • We may contact you from time to time to clarify whether your personal information is accurate and to respond to any enquiries you have made.
  • You have the right to ask for and access any personal information we hold about you, as required by the Privacy Act. If you consider any personal information we hold about you is incorrect, you can ask us to change it. Any queries about your personal information can be raised with us.
  • Where we decline to correct the information held on you, we will ask you to provide us a statement of correction which we will attach to the personal information held.

Consent to Privacy Policy

By engaging with our website, social media sites and/or our services, and/or by applying for or accepting employment with us you confirm your acceptance of this Policy, and you agree to our collection, use and disclosure of your personal information in accordance with this Policy and the Privacy Act.

If you cannot find the information you need, or you have concerns about the way we are managing your personal information, then please contact us at any time on 06 873 7500 or email

We may update this privacy statement from time to time, for example to reflect changes to the Privacy Act, so feel free to check in again occasionally to see what might have changed. 

Email Address

We will only record your email address if you subscribe to any of our services. It will only be used for the purpose for which you have provided it. We will not use your email address or any of your personal details for any other purpose without your consent and we will not disclose your email address without your consent. Electronic mail submitted to Tumu Timbers is handled and saved according to the provisions of the New Zealand Privacy Act 1993.

Clickstream Data

Clickstreams are the paths a user takes when navigating a web page or the internet in general. When you visit our website, our Internet Service Provider makes a record of your visit and logs the following information for statistical purposes - the user's assigned IP address, the user's top level domain name (for example, .gov,, .uk etc), the data and time and duration of visit to the site, and the type of browser and operating system used.


A cookie is a short piece of data that is sent from a web server to a web browser on the user's machine when the browser visits the server's site. The cookie is stored on the user's machine, but it is not an executable program and cannot do anything to your machine. Whenever a web browser requests a file from the same web server that sent the cookie, the browser sends a copy of that cookie back to the server along with the request. In this way, the server knows you have visited before and can co-ordinate your access to different pages on its website. A server cannot find out a name or email address, or anything about a user's computer, by using cookies.

This statement was last updated in October 2022.

Phone 06 873 0997 or email us for a quote.