Privacy Policy

This Privacy Policy was updated on 15 July 2022 and sets out how we collect, store, use, and disclose the personal information that you provide to us through our websites and mobile apps.

"We" and "us" and "our": refers to Coca-Cola Oceania Limited, The Oasis Carbine Rd, Mt Wellington 1060, Auckland, New Zealand. PO Box 62042 Mt Wellington, 0800 505 123

"affiliates": refers to any of our direct or indirect parents, subsidiaries, sponsors, or affiliated companies of, and includes any authorised bottlers of, The Coca-Cola Company

"websites": refers to this website www.pump.co.nz, www.coke.co.nz, www.powerade.co.nz, and any of our other websites

"mobile apps": refers to the MyCoke mobile app, the Powerade Challenge app, and any of our other mobile apps

1. Your Agreement to this Privacy Policy

By using our websites and mobile apps, and sharing your personal information with us, you agree to the collection, use and disclosure of your personal information by us and our affiliates as set out in this Privacy Policy. Please read this Privacy Policy before using any of our websites and mobile apps, or sharing any personal information with us. Your use of our websites and mobile apps shows that you agree with all terms of this Privacy Policy, so please don't use our websites or mobile apps if you disagree with any part of this Privacy Policy.

2. Your Personal Information is Important

We recognise that your privacy is very important to you and are committed to protecting your privacy. This Privacy Policy sets out how we handle your personal information and safeguard your privacy when you use our websites and mobile apps, and engage with us.

We will comply with the New Zealand Privacy Act 2020 and other requirements of New Zealand law to protect your privacy. This Privacy Policy does not affect, limit, or exclude your rights under that Act.

3. What Personal Information do we collect and why do we collect it?

What personal information do we collect?

We may collect personal information about you that you provide to us through our websites, mobile apps, via social media, or if you otherwise contact us (eg, by text, phone, email, or mail, or by completing an entry form for a competition). We may also collect your personal information through third party loyalty cards, including FlyBuys, Countdown Onecard and the New World club card.

The personal information that we may collect includes your:

Name
Postal address
Telephone number
Email address
Date of birth
Gender
Information about Coca-Cola products that you have purchased

How do we use your personal information?

We will use your personal information for the purpose for which you have provided it to us. This may include:

To run the MyCoke promotions, including letting you register and maintain a MyCoke account, running prize draws that you enter, and giving out prizes that you win
To run the Powerade Challenge, including sending you a wristband and registration information, storing information about your participation in the Challenge, running prize draws, and giving out prizes that you win
To run other competitions, promotions and giveaways, including via social media, and to contact you so we can send you prizes. If you win, we may also (with your permission) include your name in our list of competition winners on our website
To sell Coca-Cola products through our websites and mobile apps and send them to you
To market our products, services and promotions to you, if you opt in to receiving marketing communications from us (and you may opt out at any time)
To deal with and respond to questions, comments, enquires or complaints and other customer care related activities that are submitted through the use of the "Contact Us", "Comment" or any other features on our websites and mobile apps, or by you phoning, emailing, writing to us, or contacting us on social media
To otherwise administer our websites and mobile apps, and for associated administrative and business purposes.

Please only share your personal information with us if you are happy to do so. If you don't want us to collect or use your personal information, please don't share it with us.

If you register for our websites and mobile apps

You don't need to register or provide your personal information to us to access our websites and mobile apps.

However, you must register on our websites or mobile apps if you wish to participate in the MyCoke promotion, the Powerade Challenge, other promotions that require registration, or to receive communications from us. By registering, you agree to receive communications from us and our websites and mobile apps. You may also choose to receive further communications from us through your registration. You may choose to opt out of receiving these communications by unsubscribing, and we give you the opportunity to do that each time we email you. If you want to opt out at any time from receiving communications, you may do so on your 'profile' page.

Social media

We use social media including Facebook, Instagram, Twitter, YouTube and LinkedIn to provide information about our products, and to run competitions, promotions and giveaways. If you connect with or follow us using those services and networks, they may collect your personal information for their own

purposes. Those services and networks have their own privacy policies that are independent of ours that you should read before following or engaging with us on social media.

Credit card information

If you purchase a Coca-Cola product through our website, you will be directed to one of our partners to make a credit card payment. All direct payments processed by our partners on our behalf are made using a Payment Card Industry Data Security Standard (PCI-DSS) compliant payment gateway, which helps ensure the safe and secure handling of your payment information. We do not store any of your credit card information ourselves.

Click-stream data

We use Google Analytics to gather non-identifiable web traffic data of users of our websites and mobile apps – referred to as "clickstream data". The click-stream data we collect from you may include the type of Internet browser and operating system you are using, the pages and information you accessed on our site, the total time spent on our site and the domain name of the websites or mobile apps that linked you to our site.

Clickstream data is aggregated and cannot be used to identify you personally or be associated or correlated with any site visitor in a personally identifiable manner.

Cookies – information automatically placed on your computer

When you view our websites and mobile apps, we may store certain information on your computer. This information may be in the form of a small text file called a "cookie" and can help us improve your experience with our websites and mobile apps in many ways. For example, cookies allow us to tailor our websites and mobile apps to better match your interests and preferences. Cookies also help us understand which parts of our websites and mobile apps are most popular, where our visitors are going and how much time they spend there. Cookies are read only by the server that placed them and are unable to execute any code or virus.

With most Internet browsers, you can erase cookies from your computer hard drive, block all cookies or receive a warning before a cookie is stored. Please refer to your browser instructions or help screen to learn more about these functions. Please be aware, however, that some features and programs of our websites and mobile apps may be unavailable to you if cookies are erased or blocked.

Some uses of cookies in connection with our websites and mobile apps may be under the control of third parties that we use to manage certain programmes and fulfil specific visitor/customer requests. We require these entities to confine their use of cookies to the uses permitted by this Privacy Policy, but we cannot be responsible for third party uses of cookies.

We may also collect cookie data from third party websites and apps that you use. For example, if you order our products using an online takeaway service, that third party service may place one of our cookies on your device.

Cookies are not generally linked to your identity, unless you have accessed an online channel via links in an email or where we are otherwise able to identify you or the device accessing the online channel. We may combine information from your use of our online channels with clickstream data or other information collected from you. We do this in order to better understand your preferences and to improve our products and activities.

4. When do we disclose the personal information we collect?

Except as provided in this Privacy Policy, we will not sell, transfer or rent your personal information to third parties that are unaffiliated with us.

We will disclose your personal information if we are required to do so by New Zealand law.

We may disclose personal information that you provide through our websites and mobile apps to other people or companies that we engage to run our promotions, to send you communications or facilitate other activities that you have registered for or asked to participate in. For example, credit card payment information and data collected on our websites and mobile apps is shared with our partners, as described in this Privacy Policy.

We require the people and companies who we disclose your personal information to only use your information for the purposes that we have provided it, and to not disclose your information to others. However, we cannot be responsible for any harm caused if unaffiliated third parties fail to honour their privacy obligations to us. Similarly, we are not responsible for the privacy policies and practices of other websites and mobile apps that are linked to our websites and mobile apps.

In addition to these limited disclosures of your personal information, we may provide our affiliates or unaffiliated third parties with aggregate click-stream data about visitors to our sites. For example, we might disclose the median ages of visitors to our websites and mobile apps, or the numbers of visitors to our websites and mobile apps that come from different geographic areas. This aggregate information will not include information about any individual visitors to our websites and mobile apps.

We may also provide your personal and other information to a purchaser where we sell our business, our subsidiaries, a line of business associated with us, substantially all of our assets or our assets' subsidiaries, affiliates or lines of business.

5. Children under the age of 15

We take our responsibilities in respect of the personal information of children seriously. We make it clear on our website, mobile app, and in our terms that children under the age of 15 should not provide us with personal information or attempt to register with us. Parents should be aware that information that is voluntarily given by children – or others – through social media in chat sessions, email exchanges, bulletin boards or the like may be used by other parties to generate unsolicited emails or other contacts. We encourage all parents to teach their children safe and responsible use of the Internet.

6. How do we protect your personal information?

We take all reasonable steps to protect your personal information against loss, unauthorised access and disclosure, or other misuse. That includes measures to prevent unauthorised intrusion in our websites and mobile apps and the alteration, acquisition or misuse of personal information by unauthorised people. We make best efforts to maintain encryption of consumer data across our websites and mobile apps. However, we caution visitors to our websites and mobile apps that no network, including the Internet, is entirely secure. Accordingly, we cannot be responsible for loss, corruption or unauthorised acquisition of personal information provided to our websites and mobile apps, or for any harm that results from such loss, corruption or unauthorised acquisition.

7. Where do we store your personal information?

We use third-party providers to store and manage our customer data, including Satellite Media Limited. Our customer data is stored on their servers in New Zealand, and on Amazon Web Services servers in Australia and Singapore. That means that customer data may be transferred to, or accessed from, countries other than New Zealand.

8. How do we maintain the integrity of your personal information and how can you access, correct and delete it?

We have procedures in place to keep your personal information accurate, complete and current for the purposes for which it is collected and used. You may review the information that you have provided to us and, if you think it is incorrect, you may request that it be corrected. You may also request us to delete your personal information.

If you have questions or concerns about this Privacy Policy, wish to access or ask us to correct your personal information, or wish to request that we not use your personal information for a particular purpose or to delete it, please call our Customer Information Centre 0800 505 123, email privacyofficerAU@coca-cola.com or send a request to:

Attn: Website and mobile app Privacy Policy
Customer Information Centre
Coca-Cola Oceania Ltd
The Oasis Carbine Rd
Mt Wellington, 1060
PO Box 62042
Auckland, New Zealand

You also may obtain a copy of your personal information by contacting us by email.

9. Information placed automatically on your computer - Cookies

This Privacy Policy is the sole authorised statement of our practices with respect to the collection, storage, use and disclosure of your personal information through our websites and mobile apps. Any summaries of this Privacy Policy generated by third party software or otherwise have no legal effect, do not bind us in any way, should not be relied upon as a substitute for this Privacy Policy, and do not supersede or modify this Privacy Policy.

We may make changes this Policy from time to time. You should periodically review this Policy to ensure that you are familiar with the most current version. You can see when this Policy was last changed by looking at the date at the top of this Policy.