Last updated: 12 September 2026
Mala’s Meals respects your privacy. This policy explains what personal information we collect through this website, why we collect it, who we may share it with, and the choices you have. Mala’s Meals is responsible for the personal information described in this policy.
Information we collect
We collect information you give us when you browse or shop with us, create an account, contact us, subscribe to marketing, leave a review, or take part in a promotion. This may include:
- your name, email address, phone number, billing address and delivery address;
- account details, order history, product choices and customer notes;
- payment method and transaction details. Payments are handled by the payment provider shown at checkout, and we do not store your full card number;
- messages, reviews and other information you choose to send us; and
- technical and browsing information, such as your IP address, browser, device, approximate location, pages viewed, links clicked, referring website and shopping activity.
How we use your information
We use personal information to:
- process payments, fulfil and deliver orders, and send order updates;
- provide your account, wishlist and shopping-cart features;
- answer questions, manage returns and provide customer support;
- prevent fraud, protect the website and troubleshoot problems;
- understand how people use our website and improve our products and service;
- send newsletters, product updates, cart reminders and other marketing through Omnisend where you have signed up or where otherwise permitted, with an unsubscribe link in every marketing email;
- measure advertising and show more relevant advertising through Google and Meta, where those tools are enabled; and
- meet our tax, accounting and other legal obligations.
If you do not provide the information marked as required at checkout, we may not be able to process or deliver your order.
WooCommerce and store accounts
Our shop runs on WordPress and WooCommerce. WooCommerce stores order and account information in our website database, including the products ordered, order date, customer contact details, billing and delivery addresses, and the payment method used. If you create an account, we also store your login details securely so you can view and manage your account.
Cookies, Google Analytics and Meta Pixel
Our website uses cookies and similar technology to keep the shop working, remember your cart and preferences, measure website use, and support marketing.
We use Google Analytics to understand visits and activity on our website. Google Analytics may collect information such as a device or browser identifier, approximate location, browser and device details, session statistics and interactions with our pages. Google Analytics uses first-party cookies, including _ga, to distinguish visitors and sessions.
We use the Meta Pixel to measure the effectiveness of advertising on Facebook and Instagram, build advertising audiences and understand actions taken after someone sees or clicks an advertisement. Meta may receive information about your browser or device, the pages and products you view, and actions such as adding a product to your cart or making a purchase. Meta may combine this information with information it already holds, subject to its own privacy policy.
We use Omnisend for email marketing and related store automation. If you subscribe, begin checkout, place an order or are otherwise identified to Omnisend, it may receive your contact details, order and cart information, product and page activity, and engagement with our messages. Omnisend uses cookies and similar technology to recognise contacts, support sign-up forms, measure activity and run automations such as cart reminders.
You can control or delete cookies through your browser and, where available, through the cookie settings shown on our website. Blocking some essential cookies may stop parts of the shop from working. You can also use the Google Analytics opt-out browser add-on, manage advertising choices in your Google and Meta accounts, and learn more in the Google Privacy Policy, Meta Privacy Policy and Omnisend Privacy Policy.
Who we share information with
We share information only where it is needed to run the store or where the law permits or requires it. Recipients may include:
- our website host and technical service providers;
- payment processors and fraud-prevention services;
- couriers and delivery providers;
- Omnisend, our email marketing and store-automation provider;
- Google and Meta for analytics, measurement and advertising; and
- professional advisers, regulators or law-enforcement agencies where reasonably necessary.
Some of these providers process information outside New Zealand. Their privacy laws may differ from New Zealand law. We use reputable providers and take reasonable steps to make sure personal information is handled appropriately.
How long we keep information
We keep personal information only for as long as we need it for the purposes described above, including support, security and legal requirements. New Zealand tax and transaction records are generally kept for at least seven years. Other information may be deleted or anonymised sooner when it is no longer needed. The retention periods used by Google, Meta, payment providers and other services may be controlled through those services and their policies.
Security
We take reasonable steps to protect personal information against loss, unauthorised access, misuse or disclosure. No website or online transmission is completely secure, so please take care when choosing passwords and contact us if you think your account has been compromised.
Children’s privacy
Our products are made for children, but this website and store are intended for adults. We do not knowingly ask children to create accounts or give us personal information.
Your choices and rights
Under the New Zealand Privacy Act 2020, you can ask whether we hold personal information about you, request a copy, and ask us to correct information that is wrong or incomplete. You may also ask us to delete information, although we may need to keep some records for legal, accounting, fraud-prevention or other legitimate reasons.
To make a privacy request, unsubscribe from marketing, or ask a question about this policy, email our privacy contact at hello@malasmeals.com. We may need to confirm your identity before providing or changing personal information.
Changes to this policy
We may update this policy when our website, providers or privacy practices change. The latest version will always appear on this page, with the date shown at the top.