Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Last Updated: January 1, 2025

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

  • Place an order through our website or mobile app
  • Create an account with us
  • Subscribe to our newsletter
  • Contact us through our contact forms
  • Participate in promotions or surveys
  • Apply for employment opportunities

Types of Personal Information:

  • Contact Information: Name, email address, phone number, postal address
  • Account Information: Username, password, preferences
  • Payment Information: Credit card details, billing address
  • Order Information: Food preferences, delivery instructions, order history
  • Communication Data: Messages sent through our contact forms or customer service

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website
  • Device identifiers

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

  • Process and fulfill your food orders
  • Manage your account and preferences
  • Provide customer support and respond to inquiries
  • Send order confirmations and delivery updates

Communication

  • Send promotional emails and newsletters (with consent)
  • Notify you about new menu items and special offers
  • Conduct customer satisfaction surveys
  • Provide important service announcements

Business Operations

  • Analyze website usage to improve our services
  • Prevent fraud and enhance security
  • Comply with legal obligations
  • Develop new products and services

Legal Basis for Processing

We process your personal information based on:

  • Contract: To fulfill our services to you
  • Consent: For marketing communications and cookies
  • Legitimate Interest: For business operations and security
  • Legal Obligation: To comply with applicable laws

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.

What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

Essential Cookies

Required for website functionality. These cannot be disabled:

  • Session management
  • Security features
  • Shopping cart functionality
  • User authentication

Analytics Cookies

Help us understand how visitors interact with our website:

  • Google Analytics for website performance
  • User behavior analysis
  • Popular pages and content
  • Website optimization

Advertising Cookies

Used for personalized advertising and marketing:

  • Facebook Pixel for social media advertising
  • Google Ads for search advertising
  • Retargeting campaigns
  • Ad performance measurement

Cookie Management

You can control cookies through:

  • Our cookie consent banner
  • Your browser settings
  • Third-party opt-out tools

Note: Disabling essential cookies may affect website functionality.

Google Consent Mode v2

We implement Google Consent Mode v2 to respect your privacy choices:

  • ad_storage: Controls advertising cookie storage
  • ad_user_data: Manages user data for advertising
  • ad_personalization: Controls personalized advertising
  • analytics_storage: Manages analytics data storage

Third-Party Services

We work with trusted third-party service providers to deliver our services effectively:

Payment Processors

  • Stripe: Secure payment processing
  • PayPal: Alternative payment method
  • Square: Point-of-sale transactions

Delivery Partners

  • Uber Eats: Food delivery platform
  • DoorDash: Delivery service integration
  • Menulog: Online ordering platform

Marketing & Analytics

  • Google Analytics: Website analytics
  • Facebook: Social media marketing
  • Mailchimp: Email marketing service
  • Hotjar: User experience analytics

Cloud Services

  • Amazon Web Services: Hosting and data storage
  • Microsoft Azure: Cloud computing services
  • Cloudflare: Content delivery and security

Third-Party Agreements

All third-party services are bound by:

  • Strict data processing agreements
  • Industry-standard security requirements
  • Privacy compliance obligations
  • Data retention limitations

Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

  • Encryption: SSL/TLS encryption for data transmission
  • Secure Storage: Encrypted databases and secure servers
  • Access Controls: Multi-factor authentication and role-based access
  • Regular Updates: Security patches and system updates

Organizational Measures

  • Staff Training: Regular privacy and security training
  • Access Limitation: Need-to-know basis for data access
  • Incident Response: Established breach response procedures
  • Regular Audits: Security assessments and compliance reviews

Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records

Data Breach Notification

In the unlikely event of a data breach:

  • We will assess the risk to your personal information
  • Notify relevant authorities within 72 hours if required
  • Inform affected users if there's a high risk to their rights
  • Take immediate steps to secure the breach

Your Privacy Rights

Under Australian Privacy Principles and international privacy laws, you have the following rights:

Access Rights

  • Right to Know: Request information about what personal data we hold
  • Right of Access: Obtain a copy of your personal information
  • Data Portability: Receive your data in a structured, machine-readable format

Control Rights

  • Right to Rectification: Correct inaccurate personal information
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict: Limit the processing of your information
  • Right to Object: Opt-out of certain data processing activities

Marketing Rights

  • Email Unsubscribe: Opt-out of marketing emails at any time
  • SMS Opt-out: Stop receiving promotional text messages
  • Cookie Management: Control tracking and advertising cookies

How to Exercise Your Rights

To exercise any of your privacy rights, you can:

  • Email us at: [email protected]
  • Call us at: +61 499 038 878
  • Use the contact form on our website
  • Send written request to our business address

Response Timeframes

We will respond to your privacy requests:

  • Acknowledgment: Within 48 hours of receiving your request
  • Full Response: Within 30 days for most requests
  • Complex Requests: May require up to 90 days with notification
  • Urgent Requests: Expedited processing for security concerns

Contact Our Privacy Team

If you have questions about this Privacy Policy or our data practices, please contact us:

Privacy Officer

Postal Address

Privacy Team
Guzman y Gomez
Unit 3/152 Bussell Hwy
Margaret River WA 6285
Australia

Complaints Process

If you believe we have not handled your personal information appropriately:

  1. Contact Us First: Reach out to our Privacy Officer
  2. Formal Complaint: Submit a written complaint with details
  3. Investigation: We will investigate and respond within 30 days
  4. External Bodies: You may also contact the Office of the Australian Information Commissioner (OAIC)

External Regulatory Body

Office of the Australian Information Commissioner (OAIC)

Questions About This Policy?

Our Privacy Team is here to help. Contact us anytime for clarification about our privacy practices.

Contact Privacy Team