Privacy Policy

Only Health collects the information needed to operate an online wellness store. This may include your name, email address, phone number, delivery address, billing details, account details, order history, support messages, newsletter preferences, and website usage information.

Payment card details are handled by our payment provider and are not stored as full card numbers by Only Health. We may receive payment status, transaction references, and limited payment method details needed for order support and reconciliation.

We use customer information to process orders, provide customer support, manage accounts, send order and delivery updates, prevent fraud or misuse, improve the website, and meet operational, accounting, tax, and legal obligations.

We may use aggregated or de-identified information to understand product interest, website performance, stock planning, and customer experience trends.

We share information only where needed to operate the store. This may include ecommerce platform providers, payment providers, shipping and fulfilment partners, email and SMS service providers, analytics providers, fraud prevention tools, professional advisers, and regulators where required by law.

Some providers may process information outside New Zealand. Where this happens, we take reasonable steps to use providers with privacy and security controls appropriate for the services they provide.

Marketing messages are sent where you have opted in, subscribed, or where applicable customer communication rules allow. Every commercial marketing email should include a practical unsubscribe option.

Transactional messages such as order confirmations, delivery updates, account notices, and service messages are not marketing messages and may still be sent when needed to complete a customer request.

You can ask to access or correct personal information we hold about you. We may need to verify your identity before acting on a privacy request.

For privacy requests, contact [email protected] with enough detail for us to identify the relevant account, order, or message.