Privacy Policy

Introduction

This Privacy Policy explains how MealRoute ("we", "us", or "our") collects, uses, discloses, and safeguards your personal information when you use our website, mobile application, and food delivery services. We are committed to protecting your privacy and complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as well as the European Union's General Data Protection Regulation (GDPR) where applicable to our users in the European Economic Area.

Information We Collect

We may collect the following categories of personal information:

Contact details: your name, email address, phone number, and postal address.
Order information: details about the meals you order, delivery preferences, and payment transaction data.
Account credentials: username, password hash, and authentication tokens.
Usage data: browsing behaviour, device type, IP address, and cookies as described in our Cookie Policy.
Communications: records of your correspondence with our support team and marketing preferences.

How We Use Your Information

We use your personal information for the following purposes:

To provide, maintain, and improve our delivery services and personalise your meal recommendations.
To process transactions and send you transactional notifications.
To communicate with you about service updates, promotions, and special offers (where you have opted in).
To perform analytics and research to enhance user experience and operational efficiency.
To comply with legal obligations, enforce our Terms & Conditions, and protect the security of our platform.

Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data under the following legal bases:

Contractual necessity: to fulfil the services you have requested under our Terms & Conditions.
Legitimate interests: to improve our services, ensure network security, and conduct direct marketing where permitted.
Consent: for the use of non-essential cookies and certain marketing communications.
Legal compliance: when we are required to process data to satisfy a legal obligation.

Data Sharing and Disclosures

We do not sell your personal information. We may share your data with third parties in the following circumstances:

Delivery partners who help us fulfil your orders, including couriers and restaurant partners.
Payment processors to handle transactions securely on our behalf.
IT and cloud service providers for hosting, database management, and analytics tools.
Professional advisors and legal authorities when required by law or to protect our rights.

All third-party providers are required to respect your privacy and only process data in accordance with our instructions.

Data Retention and Security

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. We implement appropriate technical and organisational measures, including encryption, access controls, and regular security assessments, to protect your data from unauthorised access, alteration, disclosure, or destruction.

Your Rights

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data, subject to legal exceptions.
Object to processing based on legitimate interests.
Request restriction of processing in certain circumstances.
Data portability where technically feasible.

To exercise any of these rights, contact us using the details provided below. We will respond to your request within a reasonable timeframe (usually within 30 days). If you are in the EEA, you may also lodge a complaint with your local data protection authority.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at {{ EMAIL }} or by writing to us at 36 Wickham Terrace, Spring Hill QLD 4000, Australia.