Privacy Policy

Privacy Policy Effective Date: July 2026

At First Retail Group ("we", "us", "our"), we are committed to protecting your privacy and ensuring your personal information is handled securely and transparently. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in accordance with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (Cth) (including the Australian Privacy Principles).

  1. What Personal Information We Collect We collect personal information necessary to deliver our services, respond to enquiries, and maintain our website. This information may include:

Contact Information: Your name, email address, phone number, organisation, and any details you provide when filling out contact forms, making an information request, or leaving comments.

Technical & Usage Data: Your IP address, browser type, operating system, device information, user agent string, and page interaction data collected via cookies and analytics.

User Contributions & Media: Comments submitted on our site and any files or images uploaded to our platforms.

  1. How We Collect and Use Your Data We collect and use your personal information for specific, lawful purposes, including to:

Respond to Enquiries: Process and respond to your service requests, consultations, and general messages.

Improve Website Functionality: Analyse visitor behaviour, optimise user experience, detect spam, and maintain site security.

Direct Communications: Send relevant updates, newsletters, or strategy collateral where you have consented or where legally permitted.

  1. Cookies, Comments & Embedded Content Comments & Spam Detection When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist with automated spam detection.

An anonymised string generated from your email address (also called a hash) may be provided to the Gravatar service to verify if you are using it. The Gravatar privacy policy is available at: https://automattic.com/privacy/. Upon comment approval, your profile picture is visible to the public alongside your comment.

Cookies: We use cookies to enhance your browsing experience:

Comment Cookies: If you leave a comment, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so you do not have to fill in your details again for future comments. These cookies last for one year.

Session & Login Cookies: If you access our login pages, a temporary cookie is set to determine if your browser accepts cookies (contains no personal data and is discarded when you close your browser). When logged in, login cookies persist for two days, and screen options cookies last for one year. Selecting "Remember Me" keeps your login active for two weeks.

Content Publishing Cookies: If you edit or publish an article on our platform, an additional cookie indicating the post ID is saved in your browser and expires after 1 day.

Embedded Content from External Websites Articles on this site may include embedded content (e.g., videos, images, maps, or external tools). Embedded content from third-party websites behaves in the exact same manner as if you visited the external website directly.

These third-party sites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that content (especially if you possess an active account and are logged into that third-party website).

  1. Overseas Disclosures & Third-Party Service Providers To operate our services, we may engage third-party software, cloud hosting providers, and web analytics tools located outside of New Zealand and Australia (e.g., in the United States or European Union).

When transferring data overseas, we take reasonable steps to ensure that third-party recipients uphold privacy standards comparable to those established under the NZ Privacy Act 2020 (Information Privacy Principle 12) and the Australian Privacy Act 1988 (Australian Privacy Principle 8).

  1. Data Retention & Security We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected or to satisfy administrative, legal, accounting, or security obligations.

We employ reasonable technical and organisational security measures to protect your information against loss, unauthorised access, misuse, modification, or disclosure.

  1. Your Rights: Accessing & Correcting Your Information Under both New Zealand and Australian privacy legislation, you have the right to request access to the personal information we hold about you and to request corrections if you believe it is inaccurate, out of date, or incomplete.

You may also request that we erase any personal data we hold about you. This does not include data we are legally, administratively, or securely obligated to retain.

To exercise your rights, please contact our Privacy Officer using the details below.

  1. Contact Us & Complaints Process If you have questions about this Privacy Policy, wish to access or correct your personal data, or wish to make a complaint regarding a potential privacy breach, please contact us at:

Entity: First Retail Group Ltd (FRG)

Regulatory Oversight & Escalation If you are unsatisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant regulatory authority:

In New Zealand:

Office of the Privacy Commissioner (OPC)

In Australia:

Office of the Australian Information Commissioner (OAIC)