Privacy - Mystic Winds

Privacy Policy

1. Introduction

We are committed to protecting your personal information in accordance with the Privacy Act 2020. This privacy policy sets out how we collect, protect, use, and share your personal information, and applies whenever you contact us, sign up for our services, or otherwise share information with us.

“Personal information” means information that can be used to identify you, and includes your name, contact information, payment information, interaction records, health information (e.g. relating to medically dependent persons) and cookies. Personal information does not include anonymised information.

In this policy “we”, “us”, or “our” refers to Awhitu Windfarms Limited (company number 2330459) trading as Mystic Winds.

We may make changes to this policy from time to time by publishing an updated version of this policy on our website. This policy was last updated on 26 March 2026. We recommend that you review this policy periodically.

2. Collection

We may collect personal information directly from you, or from your representatives (including authorised persons on your account), our third party service providers and partner organisations (including your previous electricity retailer and power comparison service providers), your devices, our website or publicly available sources.

We need your personal information so that we can discuss, and possibly provide you with, electricity and associated services. You may choose not to provide us with your personal information; however, this may result is us being unable to provide you with our services.

If you are providing personal information on behalf of someone else, it is your responsibility to ensure you have their consent to disclose their personal information.

You must ensure that any information you provide to us is accurate and up to date. If your information changes, please contact us promptly to update it.

We also may collect information via cookies and analytics tools. You can manage or opt out of our collection and use of cookies from your devices through your internet browser settings.

3. Usage and disclosure

We will only use your personal information for the purpose for which the information was collected or any related legitimate business purpose. This may include using or disclosing (as applicable) your personal information:

to provide you with electricity and associated services, including administration and account management;
to confirm your identity and the identity of any other authorised persons or alternate contact persons on your account;
to conduct credit checks, collect any debt owed to us, or for fraud detection services;
to third party service providers (e.g. electricity distribution and metering companies), to enable them to perform services relating to your electricity supply or to enable us to enforce our rights against them;
to enable us and third parties to calculate and provide you with any rebates or discounts you are eligible for;
to our advisers and agents to assist them in performing their roles;
to facilitate you switching to another electricity retailer;
to support you in an emergency by sharing any necessary information with the emergency services;
to support our general business development and improve our services and marketing;
to assist with responding to, and preventing, any privacy beaches;
to legitimate electricity comparison websites (e.g. billy.govt.nz) to assist with onboarding and assessing your eligibility to plans;
to budgeting agencies, financial advisors and other appropriate third party, with your consent;
to comply with our legal or regulatory obligations, including industry codes and standards, and for dispute resolution purposes;
to facilitate the transfer of our business; and
for any other purpose you authorise.

Without limiting the above, we may disclose personal information to third parties for purposes consistent with the purpose(s) for which the personal information was collected.

We may use personal information for marketing purposes, including sending you communications about our services and any deals or promotions. You may opt out of marketing communications at any time by contacting us via our website or by using the unsubscribe facility located in our marketing emails.

If we transfer personal information outside New Zealand, we take reasonable steps to ensure comparable safeguards are in place, as required by the Privacy Act 2020.

4. Access, storage and security, and retention

We will take all reasonable steps to protect your personal information that we hold. We implement reasonable technical and organisational safeguards to protect against loss, unauthorised use, modification, or disclosure.

We will limit access of personal information to those who need to access it for the purpose for which the information was collected.

In the event of a privacy breach (or suspected privacy breach), we will notify affected individuals and the Privacy Commissioner if required by the Privacy Act 2020. We maintain internal procedures to detect, assess, and respond to privacy breaches.

We will retain personal information only for as long as necessary to fulfil the purpose(s) for which it was collected, or as required by applicable law. This may involve us retaining the information for a period after you stop being our customer and using our services.

We will take reasonable steps to verify your identity before acting on any request relating to your personal information or account. This may include requesting identifying information or documentation.

You are entitled to request access to any personal information that we hold about you, and request correction of that information. Requests to access or correct personal information can be made by contacting us, or by emailing us at info@mysticwinds.co.nz.

5. Complaints

Please get in contact with us if you have any privacy-related complaints and we will do our best to resolve the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner.