Privacy Policy

Last updated: 2026-07-13

1. Who we are

Riverstone Review Ltd ("Riverstone Review", "we", "us") operates the website at sproutforce.world. We are an independent editorial publisher covering men's wellness food supplements in New Zealand. Our registered address is 12 Quay Street, Auckland 1010, New Zealand. Company registration: NZBN 9429000000000. Contact: info@sproutforce.world.

2. What personal data we collect

We collect the following categories of personal data when you use our website or place an order:

  • Contact details: full name, phone number, email address (if provided via contact form).
  • Order information: name, phone number, delivery address (collected at the point of ordering Hardero).
  • Usage data: IP address, browser type, pages visited, time on site - collected via cookies and analytics tools (only with your consent).
  • Cookie data: identifiers set by Google Analytics and Google Ads (see Section 7 and our Cookie Policy).

3. Legal basis for processing (GDPR Article 6)

We process your personal data under the following legal bases:

  • Contract performance (Art. 6(1)(b)): to process your order and deliver Hardero to you.
  • Legitimate interests (Art. 6(1)(f)): to operate and improve our website, prevent fraud, and communicate about orders.
  • Consent (Art. 6(1)(a)): for analytics and advertising cookies - you can withdraw consent at any time via our cookie banner.
  • Legal obligation (Art. 6(1)(c)): where required by applicable New Zealand or EU law.

4. How we use your data

We use the personal data we collect to:

  • Process and fulfil your order for Hardero;
  • Contact you to confirm delivery details;
  • Respond to your enquiries submitted via the contact form;
  • Improve our website and editorial content (analytics - consent required);
  • Comply with legal obligations;
  • Serve relevant advertising (Google Ads - consent required).

5. Data retention

Order data is retained for 7 years to comply with tax and accounting requirements under New Zealand law. Contact form enquiries are retained for 2 years. Analytics data is retained as per Google's standard retention periods (up to 26 months). You may request deletion of your personal data at any time, subject to legal retention requirements.

6. Sharing your data

We do not sell your personal data. We may share your data with:

  • Delivery partners: name and address to fulfil your order;
  • Google LLC: analytics and advertising services (see Section 7);
  • Payment processors: where applicable;
  • Legal authorities: if required by law.

Any data shared with third parties is governed by data processing agreements in accordance with GDPR Chapter V requirements for international transfers.

7. Google services - Analytics, Ads and Consent Mode

We use the following Google services on this website:

  • Google Analytics (GA4): website analytics using cookies _ga, _gid. Data is processed by Google LLC in the United States. Used only with your consent (analytics_storage).
  • Google Ads / Remarketing: advertising measurement using cookie _gcl_au. Used only with your consent (ad_storage, ad_user_data, ad_personalization).
  • Google Consent Mode v2: all advertising and analytics consent signals default to DENIED. Consent is updated to GRANTED only upon your explicit acceptance via our cookie banner. This ensures compliance with EU/EEA and New Zealand privacy requirements.

Google may transfer your data to the United States. This transfer is governed by Standard Contractual Clauses under GDPR Chapter V. For more information, see Google's Privacy Policy.

8. Your rights

Under GDPR(continuing privacy-policy.html from Section 8) and the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate personal data;
  • Request deletion of your personal data (subject to legal retention requirements);
  • Object to or restrict processing;
  • Data portability (where processing is based on consent or contract);
  • Withdraw consent at any time without affecting the lawfulness of prior processing;
  • Lodge a complaint with a supervisory authority.

9. Supervisory authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Office of the Privacy Commissioner (OPC), New Zealand's data protection supervisory authority:

Office of the Privacy Commissioner
PO Box 10094, Wellington 6143, New Zealand
Website: privacy.org.nz

10. Cookies

We use cookies for functionality and, with your consent, for analytics and advertising. See our Cookie Policy for full details including how to manage your preferences.

11. Security

This website is served over HTTPS. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact us

To exercise your rights or raise a privacy concern, contact us at: info@sproutforce.world — Riverstone Review Ltd, 12 Quay Street, Auckland 1010, New Zealand.