The references in this policy to ‘Woolworths NZ’, ‘Woolworths’, ‘we’, ‘our’ or ‘us’ refers to Woolworths New Zealand Limited (and its subsidiary companies). Woolworths NZ owns and manages the various Woolworths branded supermarkets and Metro stores, including Woolworths NZ Online Shopping, our websites or mobile apps and the Everyday Rewards loyalty programme in New Zealand. It also refers to Woolworths pharmacies, which operate in many of our supermarkets.

This Privacy Policy applies to all Woolworths NZ businesses unless that business has adopted a separate policy. This means that this Privacy Policy applies to the following businesses or brands operating in New Zealand: Woolworths supermarkets, Metro stores, Everyday Rewards, MILKRUN, Cartology and Primary Connect transport and logistics.

However, the FreshChoice and SuperValue stores (owned and operated by independent franchisee owners and supported by Woolworths NZ’s subsidiary, Wholesale Distributors Limited) for example, maintain their own privacy policies, which can be accessed on their respective websites.

What does this policy cover?

We encourage you to read this Privacy Policy, so that you understand how we collect, safeguard, use and share your personal information.

What is personal information?

Personal information is defined in the Privacy Act 2020. It means information about an identifiable individual and refers to any information which may be able to identify you, like your name, date of birth, phone numbers, Everyday Rewards number, images or audio recordings of you, your IP address, email or other contact addresses.

What personal information do we collect?

In many situations you have the choice not to provide us with any personal information we may ask for. However, because we use some personal information to manage our programmes, like the Everyday Rewards programme and Woolworths NZ Online Shopping, it may affect your use of those programmes if you don’t provide us with that information.

Depending on how you shop or interact with us, the personal information we collect from you may include:

• Your name, address, phone number, email address, date of birth and preferred gender.
• Your customer reference number or Everyday Rewards number.
• Details of the programmes you’ve joined and used (like the Everyday Rewards, or Christmas Club programmes), including any rewards you have earned.
• What, how and when you buy from us, your stated or likely preferences, like whether you may be interested in particular products or promotions and how you would like us to communicate with you.
• As with many other websites, tracking technologies, such as "cookies", are used to obtain certain types of information, like application activities, current location of your device, type and version of your browser, your device ID and other device metrics when you visit our websites, mobile apps or our trusted partners’ websites or mobile apps (see Cookie Statement for details).
• Information you provide to enter a promotion or competition.
• Video footage and audio recordings which may identify you from our cameras (including CCTV, security and team safety cameras) for security, theft prevention, or safety purposes.
• The number plate of the vehicle you have used to visit our store, if that store uses an Automatic Number Plate Recognition (ANPR) system, for security, theft prevention or safety purposes.

Payment information

When you use your debit or credit card to make purchases from us online and through our mobile apps, or if you use a bank account number and a Direct Debit account, we may collect and hold your payment information. We do this so we can process your payment, and so you can save your card or account details for the future. This information is held in an encrypted and secure manner, in compliance with the Payment Card Industry Data Security Standards (PCIDSS).

Your payment card information is not linked to your Everyday Rewards information. This means that when you shop without scanning your Everyday Rewards card at the checkout, we won’t link your purchases with your Everyday Rewards information.

How do we collect personal information?

Generally, we only collect personal information directly from you, like when you contact us, or join or use any of our programmes, or use any of our websites or mobile apps, but in some cases, we do collect it from other sources, as described below.

We collect personal information directly from you, when you:

• Register for and use a programme, like Everyday Rewards, Woolworths NZ Online Shopping or our Christmas Club.
• Visit one of our websites or use one of our mobile apps.
• Participate in a survey, promotion or competition.
• Visit our stores, as you may be recorded on our cameras (including CCTV, ANPR, security and team safety cameras) which may capture video footage and audio recordings which may identify you.
• Communicate with us, including online (e.g. through our social media channels) and with our Customer Care team.

We may collect personal information from other sources, if it’s relevant to a particular programme or service. For example:

• The Everyday Rewards programme allows Everyday Rewards cardholders to choose to redeem rewards at Woolworths stores or at other Everyday Rewards Partner stores (please refer to the Everyday Rewards Terms and Conditions for more information). If you’re an Everyday Rewards member, we may collect information from other Everyday Rewards Partners, so we can administer the Everyday Rewards programme and keep your details up to date.
• We receive some transactional data from our Everyday Rewards Partners in order to administer the Everyday Rewards programme, such as to facilitate the earning and redemption of Everyday Rewards points with our Everyday Rewards Partners.
• We may collect information from third parties such as other retailers, law enforcement agencies, and other government entities for the purpose of preventing criminal behaviour (see the ‘Safety, Security and Legal requirements’ section).
• We collect information about how you browse our websites and mobile apps, including products on promotion that you purchased, and items added to your cart.
• Tracking technologies, like ‘cookies’, are used to obtain information when you visit our websites, mobile apps or our trusted partners’ websites or mobile apps, as described above (see Cookie Statement for details).
• If you want to change the type of information we or other websites and mobile apps collect from your device, you can do this through your device settings and permissions.

How do we use personal information?

It's our responsibility to make sure your personal information isn’t used for anything other than what you permit us to use it for, as set out in this Privacy Policy.

There are various ways in which we may use your personal information, including to:

• Process your registration and administer your Online Shopping and Everyday Rewards account. Our Online Shopping and Everyday Rewards accounts are combined which means that by registering for an Online Shopping account, an Everyday Rewards membership number will be automatically allocated to your Online Shopping account and you will receive the benefits of the Everyday Rewards programme. The same login details can be used to access both Online Shopping and Everyday Rewards.
• Provide services to you, like processing and delivering your Online Shopping orders.
• Provide you with the benefits under the Everyday Rewards programme, such as earning points, member only rewards and personalising your offers.
• Send you direct marketing, by post and electronically, including email, phone, text/SMS and notifications through our mobile apps. This may include information about special offers, discounts, promotions and other information relating to our products and services, or the products and services of selected third parties that we think may be of interest to you. For example, our Everyday Rewards Partners, which each have their own Privacy Policies. You can opt out of receiving direct marketing from Woolworths NZ or from the Everyday Rewards programme by telling us in writing or calling our Customer Care team(see the “Contact Us” section). You can also do this by changing your preferences on the Everyday Rewards website (if you no longer want to receive direct marketing from the Everyday Rewards programme) and our Online Shopping website (if you no longer want to receive direct marketing from Woolworths about its products and services, separate to the Everyday Rewards programme).
• Enter you in a prize competition and administer the prizes. Please be aware that, in some cases, you may be automatically entered into a competition by purchasing an eligible product and using your Everyday Rewards card.
• Understand your shopping habits and likely preferences. This helps us improve our products and services and offer you a more personalised service, including sending you information about goods and services that are likely to be of most interest to you, and to show you advertising and information that is most relevant to you and your interests.
• Improve our programmes, including our range of programmes and offerings generally, and to make sure that they stay relevant and of interest to you. For example, we may contact you to ask that you take part in market research and surveys, and if you contact our Customer Care team, we may record your call for quality and training purposes.
• Improve and help you access new ways to use our services, like mobile apps and payment methods.
• Communicate with you (including through social media) to assist us in investigating your claims, complaints and enquiries.
• Protect our team, customers or property from dangerous activity and to detect crime. Recordings from our store cameras and ANPR system are used for security, theft prevention and safety purposes only and are not linked to your Online Shopping and Everyday Rewards account.

Who might we share personal information with?

We understand that your personal information belongs to you, and that you trust us to keep it safe and secure. It’s a responsibility we take very seriously and we’re committed to protecting your personal information. Like most businesses, we work with third parties so we can provide you with better experiences. This means we may share personal information we hold. This may include sharing information as follows:

Woolworths Group companies

We may share your personal information with Woolworths Group Limited (‘Woolworths Group’, our parent company) for any of the purposes explained in this Privacy Policy. For example, Woolworths Group may assist us with running a promotion. Woolworths Group is based in Australia, but may operate in other countries.

Our service providers

We work with carefully selected service providers that provide us services and carry out functions on our behalf. We may share your information with them, to enable them to provide those services and functions. These include:

• Operational and technical providers who help us provide products and services to you. These include financial institutions, software and technology providers, including security technology providers.
• Our financial, legal and regulatory advisers.
• Logistics and delivery providers, who help us deliver online shopping orders.
• Advertising, social media and search engine companies, like Google and Facebook, where we pay for advertisements to be shown. We provide them with a limited amount of your information, to help them target this advertising for you on their platforms.
• Market research partners, who help us collect your reviews and feedback and who analyse customer behaviour.
• Companies that send emails for us, because they need to know your email address to carry out these services.
• Companies that provide data matching, insights and analytics services so we can stock the right products, run relevant promotions, to improve our programmes and services and support the linking of your Everyday Rewards account with an account you hold with one of our Everyday Rewards Partners.
• If it is necessary because we are selling one of our assets or businesses.

Everyday Rewards - Partners

The Everyday Rewards programme provides the opportunity for Everyday Rewards members to earn points across a number of different businesses, who we refer to as our Everyday Rewards Partners. To allow the earning and redemption of points (and in some cases, the winning of prizes), some data needs to be shared between us and our Everyday Rewards Partners, as explained below.

To support transactions which earn points at our Everyday Rewards Partners, we will receive some data from our Everyday Rewards Partner. This includes your Everyday Rewards number and any transaction data required to calculate your points, which may include the items purchased, your total spend, the Everyday Rewards Partner business ID, and the date, time and location of the transaction.

To support redemption of points via Everyday Rewards Partners who accept Everyday Rewards vouchers, we will share a limited amount of data with those Everyday Rewards Partners. This includes your available Everyday Rewards points and Everyday Rewards voucher balance.

If you choose to link your Everyday Rewards account to an account that you hold with one of our Everyday Rewards Partners, we will support this process in a way that minimises the amount of your data that is shared. The only piece of data shared with these Everyday Rewards Partners would be your hashed Everyday Rewards number that is only readable by our Everyday Rewards programme within Woolworths NZ.

If an Everyday Rewards Partner runs a prize draw on a product and swiping your EDR Rewards card is the entry mechanic, and you are drawn as the prize winner, we will need to share your contact information with the Everyday Rewards Partner to enable them (or the supplier offering the prize) to notify you about the prize.

Supplier prize competitions and product issues

Generally, we’ll never provide your personal information to any suppliers who supply products for sale at our stores and for Woolworths NZ Online Shopping. There are limited exceptions to this. For example, we may provide your contact details to a supplier, so they can contact you if you win a prize from them. Please be aware that this may include providing your contact details to a supplier if you win a competition that you were automatically entered into by purchasing an eligible product and swiping your Everyday Rewards card. Another example is if there is a food safety or other issue with a product that you have bought from us. We may need to share your personal information with the supplier so that the issue can be investigated and resolved.

Credit checks

We don’t normally do credit checks. If we need to do a credit check, we’ll notify you and obtain your express consent before doing so.

Safety, Security and Legal requirements

We may share personal information, such as recordings from our store camera and ANPR system, for security and safety investigations, complaints and crime prevention. This may include sharing it with law enforcement agencies to assist with their investigations, and to other retailers, where we reasonably believe that it is necessary in order to protect our team, customers or property, or to assist other businesses to do the same.

We may disclose personal information if permitted or required to do so by law, for example to government or enforcement agencies and regulatory bodies. We will only provide the necessary information to comply with legal obligations.

How do we handle your personal information if you apply for a role?

When you apply for a role within Woolworths NZ, we’ll collect the personal information that you provide in your application, like your education and career history. Some roles may also require your health information or a criminal history check. We also collect demographic information, if you choose to provide it, to support our diversity and inclusion goals. We may share your personal information with Woolworths Group in Australia. In some cases we work with third parties to help with certain parts of the recruitment process, like candidate assessments, recruitment services, and criminal history checks. Our job ads and recruitment processes set out further information about relevant third parties that we work with.

What are your responsibilities?

We take great care to protect your privacy and make sure your personal information is secure, however there are some responsibilities that you have that you need to be aware of.

• You’re responsible for keeping your payment card and Everyday Rewards card and other details private and secure. The New Zealand Privacy Commissioner's website has some advice on keeping your personal information safe.
• You’re responsible for making sure your Internet browser, software and computer system are secure and up to date (like making sure they are free and secure from viruses).
• You’re also responsible for complying with any security requirements we notify you about. For example, you must keep your Woolworths NZ Online Shopping sign-in details safe and confidential at all times, and always log out of your account if you access Woolworths NZ Online Shopping using a public computer.
• We rely on you to update us if your contact details change (please see the Contact Us section).

How can you access or correct your personal information?

You can ask to access your personal information, or correct it, at any time by contacting us using the details below. Before we provide you with access to your information, we may require some proof of identity. You can also update your personal information, and change your communication preferences, by signing into your account.

We’re committed to protecting your privacy, and making sure you’re comfortable with the way we handle your personal information. If you have any questions or concerns, please get in touch.

Please contact us any time via our customer care team or calling us on 0800 40 40 40. You can also write to us at:

Privacy Officer
Woolworths New Zealand Limited
Private Bag 93306
Otahuhu, Auckland 1640

We may need to update this Privacy Policy from time to time, to reflect changes in the law or changes to our programmes. If we make significant changes to this Privacy Policy, we’ll give at least two weeks’ notice of the change by publishing our updated Privacy Policy on our website. We may also take extra steps to bring the changes to your attention, including notifying you directly.

By continuing to use our programmes, you confirm that you agree to our updated Privacy Policy.

This Privacy Policy explains how we collect, hold, secure, use and share your personal information, but we also protect your privacy through other obligations that we have, in addition to those outlined in this policy. For example, through our

Everyday Rewards Terms and Conditions, or as required by law, like the Privacy Act 2020.

This policy was last updated on 5 March 2024.