Skip to main content

Privacy Policy

1. Purpose of this Policy

Mystic Winds is committed to protecting your personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPP). This privacy policy sets out how we collect, protect, use, and share your personal information. We will take all reasonable steps to ensure that personal information that we collect, disclose or use is stored in a secure environment and is accessed only by authorised personnel for legitimate business purposes.


'”Personal information"' means information about an identifiable living as defined by the Privacy Act 2020 and includes, but is not limited to, your name, contact information, meter data, payment information, interaction records, and any health information (i.e. relating to medically dependant persons). This does not include anonymised information. This policy also applies to any additional authorities that have been named on your account.


In this policy "we", "us", or ''our'' or "Mystic Winds" refers to Awhitu Windfarms Limited (company number 2330459), including its offices, employees, contractors, [and our related companies].


We may update this policy at any time by updating the information shown on our website. This policy was last updated on 24 March 2026. We recommend that you review this policy periodically.


2. Collection

Mystic Winds will collect personal information either directly from you, or from an authority registered on your account, from third party service providers (including your previous retailer), cookies (including Google Analytics), and/or publicly available sources.


We need your personal information so that we can discuss and possibly provide you with our electricity services. We will only collection information that is necessary for these purposes (IPP 1). Even those registering on behalf of a company are required to provide some personal information. If you are providing personal information on behalf of someone else, it is your responsibility to ensure you have their consent to disclose their personal information.


You may choose not to provide us with your personal information; however, this may result is us being unable to provide you with our services.

You must ensure that any information you provide to us is accurate and up to date. If your information changes, please contact us promptly to update it.


By contacting us, accessing our website, and/or using the products or services provided by us, you consent to us collecting your personal information. When personal information is collected from a third party, we will take reasonable steps to inform you of the collection, purpose, recipients, and your rights under the Privacy Act (IPP 3A).

We may collect your Personal Information that includes:


  • Name, date of birth, health information (where relevant), contact information, property information
  • Payment methods, payment history, bank account details
  • Meter information and consumption data (including electricity export data under our buyback offer so that we can match it with the spot price)
  • Emails, telephone recordings, and other forms of communications we may have with you
  • Details of authorised users or alternative contact persons as authorised by Part 11A of the Electricity Industry Participation Code 2010.


We also may collect information via cookies and analytics tools. You can manage or opt out of cookies through your browser settings. Google Analytics data is anonymised where applicable.


3. Usage and disclosure

Mystic Winds will use your personal information for the purpose (or directly related purpose) that the information was collected for. This includes:


  • To provide you with our electricity services and customer service including all administration and account management
  • To confirm your identity and the identity of any other authorised persons on your account
  • To conduct credit checks, collect any debt owed to us, or for fraud detection services
  • To provide to third party organisations (i.e. distribution or metering) with the required information to provide you with electricity services or to enforce our rights under contracts with third parties
  • To enable third party organisations to provide you with any eligible rebates or discounts
  • To appropriate third-party organisations with your consent (e.g. utility disputes or financial advisers) or where reasonably necessary and legally authorised
  • To enable us to fulfil our responsibilities set out in the Electricity Authority Consumer Care Obligations
  • To support you in an emergency by providing any necessary information with the emergency services
  • To support our general business development purposes and improve our services and marketing
  • To contact you regarding our products or services which may include deals or promotions (you may opt out of marketing communications at any time)
  • To comply with any legal or regulatory requirements
  • For any other activities you have authorised us to do


We may disclose personal information to third parties only for purposes consistent with the purpose it was collect, with your consent, or as authorised by law.

If we transfer personal information outside New Zealand, we will ensure comparable safeguards are in place as required by the Privacy Act (IPP 12).

Each category of information collected is only used for the purposes necessary to provide our electricity services or comply with legal/regulatory requirements.


4. Access, storage and security, and retention

Mystic Winds will take all reasonable steps to protect your personal information that we hold. We implement reasonable technical and organisational safeguards to protect against loss, unauthorised use, modification, or disclosure.


In the event of a privacy breach causing or likely to cause serious harm, we will notify affected individuals and the Privacy Commissioner in accordance with the Privacy Act 2020. We maintain internation internal procedures to detect, assess, and respond to privacy breaches.


We will retain personal information only as long as necessary to fulfil the purposes for which it was collected or as required by law, including after you stop using our products and services.


We will take reasonable steps to verify your identity before acting on any request relating to your personal information or account. This may include requesting additional identifying information or documentation.


You are entitled to receive confirmation of any personal information that we hold about you, and request correction of that information. Requests to access or correct personal information can be made by contacting us (info@mysticwinds.co.nz).


5. Complaints

Please get in contact with us if you have any privacy-related complaints and we will do our best to resolve the issue.


If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner.