Privacy Policy
Last updated: 10/10/2026
At Wilko's, looking after people is the whole point, and that includes looking after your personal information. This policy explains what we collect, why we collect it, who we share it with, and what you can ask us to do with it.
This policy covers our website at wilkos.co.nz, bookings and enquiries made through it, our emails, and anything you share with us in person at the venue. It is written to meet our obligations under the New Zealand Privacy Act 2020.
Who we are
Wilko's Supper House is a restaurant and bar at 157 Point Chevalier Road, Point Chevalier, Auckland. The venue is operated by Unknown Hospitality Limited (NZBN 9429053521217). When this policy says "Wilko's", "we", "us" or "our", it means that company. "You" means anyone who visits our website, books a table, enquires about a function, signs up to hear from us, or dines with us.
The short version
-
We only collect what we need to look after your booking, your visit and our relationship with you.
-
We don't sell your personal information to anyone.
-
We only send you marketing emails if you've said yes, and you can opt out at any time.
-
Some of our systems (like our booking and email platforms) are run by trusted providers who may store data overseas.
-
You can ask to see or correct the information we hold about you whenever you like.
What we collect, and why
Most of what we hold comes straight from you. Here's what that looks like in practice:
1. Your name, email address and phone number
-
When: When you book a table, make an enquiry or contact us.
-
Why: To confirm and manage your booking, send reminders, and get in touch if something changes.
2. Booking details
-
What: Date, time, party size, seating preference and any occasion you tell us about.
-
When: When you book.
-
Why: To set up your table and make the visit feel right.
3. Dietary requirements and allergies
-
When: When you choose to tell us, at booking or in the venue.
-
Why: So our kitchen can prepare your food safely. We use this information for nothing else.
4. Email newsletter details
-
What: Your email address and first name.
-
When: When you sign up to our emails.
-
Why: To send you news, menus and invitations to things we think you’ll enjoy.
5. Contact and event details
-
When: When you enquire about a function or full venue hire.
-
Why: To quote, plan and run your event.
6. Website usage information
-
What: Device, browser, pages visited and approximate location.
-
When: Automatically, when you use our website.
-
Why: To understand how the site is used, fix problems, improve it and measure our advertising.
7. Messages, reviews and feedback
-
When: When you email, message us on social media or leave a review.
-
Why: To reply to you and keep getting better.
8. CCTV footage, if installed
-
When: While you’re at the venue.
-
Why: For the safety and security of our guests, team and premises.
Information from other people
Sometimes someone else gives us your details, for example when a friend books a table for your group, or a colleague organises a work function. If you're booking on behalf of others, please let them know you're sharing their details with us and point them to this policy.
We may also receive limited information from the platforms we use, such as our booking system or social media, when you interact with us through them.
You don't have to give us anything
Providing your information is voluntary. The only catch is that without some basics (like a name and a phone number) we may not be able to hold a booking for you.
Hearing from us
If you sign up to our emails, or tick the box to hear from us when you book, we'll send you the occasional update about new menus, events and what's happening at Wilko's. We won't add you to our list without your say so.
Every email includes an unsubscribe link, or you can simply ask us to take you off the list. Opting out of marketing won't affect booking confirmations or other messages about a visit you've arranged with us.
Who we share it with
We don't sell or rent your personal information. We share it only where we need to in order to run the business, and only with providers who are expected to keep it safe. These include:
-
Our booking platform Now Book It, which manages reservations and booking communications.
-
Our website platform Wix, which hosts our website and any forms on it.
-
Our email platform Mailchimp, which sends our newsletters and campaigns.
-
Analytics and advertising partners such as Google and Meta, which help us understand how our website is used and show our ads to the right people.
-
Our professional advisers, such as our accountants, lawyers and our marketing agency, where they need it to do their job for us.
We may also share information where the law requires it, to protect the safety of our guests or team, or if the business is sold or restructured (in which case your information would continue to be protected in line with this policy).
Cookies and analytics
Like most websites, ours uses cookies and similar tools. Some are needed for the site and booking widget to work properly. Others help us see which pages are useful, and measure how our ads perform on platforms like Google, Facebook and Instagram.
You can block or delete cookies through your browser settings. The site will still work, although some features (like the booking widget) may not behave as expected.
Keeping it safe
We take reasonable steps to protect your information from loss, misuse and unauthorised access. Access is limited to the people on our team who need it, and we use reputable platforms with their own security measures. No system is completely secure though, so please avoid sending us sensitive information (like card numbers) by email or social media message.
If we ever have a privacy breach that is likely to cause someone serious harm, we will let the people affected and the Office of the Privacy Commissioner know, as the Privacy Act requires.
Information stored overseas
Some of the providers listed above store data on servers outside New Zealand, including in Australia, the United States and Europe. When we use them, we take reasonable steps to make sure your information is protected to a standard comparable to New Zealand law.
How long we keep it
We keep personal information only for as long as we need it for the purpose we collected it, or as long as the law requires (for example, financial records). Booking history is kept for 30 days so we can recognise returning guests. CCTV footage is kept for 90 days unless needed for an incident. After that, we securely delete or anonymise it.
Your rights
Under the Privacy Act 2020 you can:
-
ask us whether we hold personal information about you, and ask to see it
-
ask us to correct information you think is wrong
-
ask us to stop sending you marketing
Just email us at the address below. We may need to confirm who you are before we release anything, and we'll respond as soon as we can, and within 20 working days. There is no charge for asking.
If we can't do what you've asked, we'll explain why. If we decline to correct something, you can ask us to attach a note to your information recording the correction you wanted.
Children
Our website and emails are intended for adults. We don't knowingly collect personal information from children under 16. If you're a parent or guardian and think your child has given us their details, get in touch and we'll delete them.
Links to other websites
Our website links to other sites, such as our booking platform and our social media pages. Those sites have their own privacy policies, and we aren't responsible for how they handle your information.
Changes to this policy
We may update this policy from time to time, for example when we add a new system or the law changes. The latest version will always be on this page, with the date it was last updated at the top.
Questions or concerns
If you have a question about this policy, or want to access or correct your information, please contact our Privacy Officer:
James Wilkinson, Privacy Officer
Wilko's (Unknown Hospitality Limited)
Email: hello@wilkos.co.nz
Phone:+64 9 281 4949
157 Point Chevalier Road, Point Chevalier, Auckland 1022
If you're not happy with how we've handled a privacy concern, you can contact the Office of the Privacy Commissioner at privacy.org.nz.
