Privacy Policy
Last updated: February 2026
Introduction
Your privacy is important to us. This Privacy Policy explains how we collect, use, store and share your personal information as permitted by the Privacy Act 2020.
Personal information means identifiable information about you that we collect or obtain when you interact with us, either in person or across the websites that we own and operate and services we provide (collectively, the Site).
We may make changes to this Privacy Policy from time to time, with or without notice to you. When we do so we will publish an updated version on our Site, and update the “last updated” notice on this page.
Who are 'we'
‘We’, ‘our’ or ‘us’ refers to companies trading as Westland Milk Products, Westgold, Westpro, Oceania Dairy, EasiYo, Canary Foods, Pure Nutrition and all subsidiary companies owned or controlled by the Yili Group that are registered in New Zealand.
If you are an EasiYo customer in Europe or the United Kingdom, please refer to our EasiYo EU privacy policy.
What personal information we collect
This Privacy Policy applies to personal information we process from our customers, milk suppliers, vendors and other business partners.
When you visit the Site or use our services, we collect personal information. The type of personal information we collect will vary depending on the circumstances of collection and the kind of interaction you have with us, but could include:
-
Your name, address and contact details;
-
Information necessary for specific purposes, for example:
-
your date of birth, qualifications, CV/resume, references, right to work visa status, or work history if you are applying for a job with us;
-
data stored in our customer, milk supplier or other business databases, during the performance of the agreements between us and you;
-
-
information about how you interact with us and our Site including technical information about your device;
-
CCTV footage if you visit one of our sites;
-
Information we obtain from other third-party sources, such as credit agencies, debt collection agencies and other data providers that may relate to your interactions with us; and
-
any other personal information you provide to us, or authorise us to collect as part of your interaction with us, the Site and our other IT systems.
Before collecting personal information, we will take reasonable steps to inform you why we’re collecting it, who will receive it and what happens if you don’t provide it.
When we collect personal information
We collect personal information from you when you:
-
enter into discussions with us in relation to becoming a customer, milk supplier, vendor, contractor or employee of or one of our companies in the Yili Group that are registered in New Zealand;
-
enter into any document or contract with us;
-
purchase products from us;
-
apply for employment with us;
-
create an account with us and update your account information;
-
sign up to our mailing list to receive direct marketing;
-
contact or interact with us, including through our digital and social media channels; and
-
visit one of our premises.
You may choose not to provide this information to us but this might limit your access to certain services and this Site, and we may not be able to communicate with you or respond to your enquiries.
Collection of personal information from third parties
In some circumstances, we may collect personal information about you from third parties rather than directly from you. This may occur, for example, during recruitment processes (including through recruitment agencies, referees, or pre‑employment checks), or where information is provided by our related companies or service providers.
Where we collect personal information indirectly, we will take reasonable steps to notify you that the information has been collected and to identify the source of that information as soon as reasonably practicable, unless an exception under the Privacy Act applies.
Why we collect personal information and what we use it for
We will collect personal information directly from you or with your authorisation. We use your personal information as reasonably necessary to carry out our business and our functions as a group of dairy companies. We may also collect information to fulfil administrative functions associated with these services, like billing for example.
We may use your personal information:
-
to assist with providing a product or service you have requested or to receive a product or service that we request from you;
-
to manage your customer account and transaction;
-
to send you information about our products and services;
-
to answer your questions and handle complaints and otherwise communicate with you;
-
to allow you to participate in our competitions or events;
-
to provide information to our related companies within the Yili Group in New Zealand;
-
to manage our debt recovery efforts;
-
to improve or update this Site;
-
to progress or process your application if you apply for a job with us;
-
to comply with our legal obligations or where otherwise legally permitted, including in applicable terms and conditions between you and use;
-
in the case of our suppliers, to facilitate your compliance with your legal and regulatory farm management obligations;
-
to protect health, safety, security and integrity;
-
for other purposes relating to the dairy industry; and
-
for any other purposes authorised by you or that are notified to you at the time of collection.
We will only share personal information with other organisations or individuals as authorised by law which includes the following circumstances:
-
To our related companies in the Yili Group of companies in New Zealand;
-
To third party service providers to achieve or help us operate to achieve the purposes listed above on our behalf, these may include:
-
vendors or agents involved in delivering the products and services you’ve purchased from us;
-
web hosting and storage providers, IT system administrators;
-
debt recovering organisations, credit reference, or other credit scoring agencies;
-
third parties for joint promotions with that third party;
-
third parties we use for marketing and that we advertise with; and
-
approved auditors;
-
-
To improve our cyber security measures or systems;
-
Where we have your prior authorisation, or as instructed by you;
-
Where the law requires or permits us to, including to regulatory or investigating authorities; where there is a significant health and welfare issue (including for animals); and
-
To enforce or apply our rights or protect our group of companies, staff or customers the rights, property and safety of us, our customers or other third parties.
When third parties are given access to your personal information, we will take the required contractual, technical and organisational measures to ensure that your personal information is only processed to the extent necessary, and in accordance with applicable law. We will not sell your personal information to third parties.
How we hold and store personal information
Personal information collected from this Site is stored by us or by a third-party storage provider we contract with. We will use reasonable endeavours to protect your personal information from unauthorised access, use and disclosure, alteration or destruction.
We keep your personal information only for as long as we need it for the purposes mentioned in this policy or as required by law.
If you are an EasiYo customer we may retain details about your transactions with us including the products you have purchased or, if you sign up for a customer account, your login/profile details and any order history and use of the site. When you are making a payment through the Site, the Site directs you to a secure payment processing website to make payment. Information which you supply Shopify Payments (Stripe) is subject to Shopify and Stripe’s own privacy policies and terms and conditions. We do not retain any of your credit card details.
Who has access to your personal information?
As a global group of companies, we may transfer your personal data internationally. These disclosures may occur for purposes such as recruitment, workforce planning, corporate governance, and group‑level reporting. If we send your data to countries without privacy protections equal to those in New Zealand (such as to our head office in China), we will ensure adequate safeguards as required by law.
We take reasonable steps to ensure that any overseas disclosures are limited to what is necessary and are handled securely.
Website analytics and use of cookies
Our Site uses cookies and similar technologies such as Google analytics to collect information about how you use the Site when you visit it. This includes:
-
your IP address and domain name;
-
your operating system and browser type;
-
any search engine or link you used to find us;
-
when and for how long you visit; and
-
which pages viewed by you.
You can control cookies through your browser settings, but some Site features may not work properly if you disable them. We aggregate cookie data before we use or share it, which means it won't identify you personally.
Social media
We use social media websites, like Facebook, Instagram, TikTok and LinkedIn to communicate with the public about us and our products. If you interact with us on social media (for example, by posting on our Facebook page or liking our posts), you share your social media profile with us. We only use this information to interact with you on social media. This information is collected from you by the relevant social media platform and is governed by that platform’s terms and privacy policy.
Your rights and choices
Under the Privacy Act, you have rights to:
-
know what personal information we hold about you, and to make sure its correct and up to date;
-
ask us to correct any wrong information; and
-
make a complaint if you think we have mishandled your personal information.
We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up to date.
You can help us to do this by letting us know if you notice errors or discrepancies in the information we hold about you and letting us know if your personal details change.
We aim to resolve all privacy queries within 20 working days. If we need more time, we’ll let you know. If you’re not satisfied with our response, you can contact the Privacy Commissioner at privacy.org.nz or your local Data Protection Authority.
How to contact us
We have an appointed Privacy Officer for Westland Milk Products, Oceania Dairy, Pure Nutrition, Canary, and EasiYo.
If you have any questions or concerns about this privacy policy or about the way your personal information has been handled, or you want to request access to and correct any personal information we hold about you, please contact us at:
Email: [email protected]
Writing: 56 Livingstone Street Hokitika, 7810, PO Box 96, Hokitika 7842
Attn: Privacy Officer