This Privacy Policy explains how Tacos y Masa collects, uses, and handles any information you provide when using our website. We keep this simple because our approach to your data is simple: we collect as little as possible and we don't store it.

The short version: We do not store, sell, share, or retain any personal information you submit through this website. Contact form submissions are used solely to respond to your enquiry and are not saved to any database.

1. Who We Are

Tacos y Masa is a sole-trader food business operated by Joel Larson on Waiheke Island, New Zealand. This Privacy Policy applies to the Tacos y Masa website and any information you submit through it.

Contact: eat@tacosymasa.com

2. What Information We Collect

We only collect information that you voluntarily provide through our contact form. This may include:

We do not collect any other personal information. We do not use tracking cookies, advertising pixels, or behavioural analytics tools on this website.

3. How We Use Your Information

Information submitted via our contact form is used for one purpose only: to respond to your enquiry. Your details are transmitted directly to our email inbox and are not saved, stored in a database, or used for any other purpose.

We will not:

4. Cookies and Tracking

This website does not use cookies to track your behaviour. We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising tools.

Google Fonts are loaded from Google's servers to display our chosen typefaces. This may result in Google's servers logging your IP address as part of the font request. This is standard browser behaviour and is outside our control. You can read Google's privacy policy at policies.google.com/privacy.

5. Third-Party Platforms

Our website links to our Facebook and Instagram profiles. If you visit those platforms, their own privacy policies apply. We have no control over how those platforms collect or use your data.

6. Data Storage and Security

Because we do not store personal data in any database or CRM system, there is no repository of your personal information held by us. Correspondence received via email is handled with reasonable care and is subject to the security practices of our email provider.

Our website is hosted on a secure server. While we take reasonable steps to protect the information transmitted to us, no internet transmission is completely secure and we cannot guarantee absolute security.

7. Your Rights Under New Zealand Law

Under the New Zealand Privacy Act 2020, you have the right to:

Given that we do not retain contact form data beyond the purpose of responding to your enquiry, it is unlikely we hold any stored personal information about you. If you have any concerns or requests, please contact us at eat@tacosymasa.com and we will respond promptly.

If you believe your privacy has been breached, you also have the right to make a complaint to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

8. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has submitted personal information through our website, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on this page, with the date last updated shown at the top.

10. Contact

For any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us at eat@tacosymasa.com.