Privacy Policy

This Privacy Policy explains how Ikigailand Pty Ltd (ABN 12 345 678 901) ("we", "us", "our") collects, uses, stores, and discloses personal information when you visit ikigailand.com.au, place an order, make a booking, or interact with us by email, phone, or in-restaurant.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

We collect the minimum personal information needed to operate the restaurant and provide our services. This includes:

• Contact details: name, email address, mobile number.
• Order details: items ordered, delivery address (if applicable), order notes, dietary preferences.
• Payment details: processed by Stripe Payments Australia Pty Ltd. We never see your full card number — we receive only the last four digits and the card brand.
• Account information: when you choose to create one.
• Technical information: device type, browser, IP address (hashed for analytics), pages visited. See our Cookie Policy.

We do not knowingly collect personal information from children under 15. If a parent or guardian believes their child has provided us information, please contact us and we will delete it.

Why we collect it

We use your personal information to:

• Take and fulfil orders and bookings;
• Communicate about your orders or bookings;
• Send our newsletter (only if you opt in, and only what we describe in the signup);
• Respond to your messages, applications, or feedback;
• Improve the site and our service;
• Comply with our legal obligations.

We do not sell your personal information. We do not share it with third parties for their marketing purposes.

Who we share it with

We share personal information only with service providers necessary to operate the business:

| Provider | Purpose | Location | | --- | --- | --- | | Stripe Payments Australia Pty Ltd | Payment processing | Australia | | Supabase | Database hosting | Australia (Sydney region) | | Resend | Transactional email and newsletter | Regional / EU; data minimisation applies | | Vercel | Web hosting and AI Gateway | Multi-region | | OAIC-listed delivery riders | Order delivery (in-house) | Australia |

We may also disclose personal information where required by law, to enforce our Terms, or to protect our rights or the rights of others.

How we store and protect it

Personal information is stored in encrypted databases in Australia. Access is restricted to authorised staff. We use TLS in transit, access logs, and row-level isolation between any future tenant brands hosted on the same platform. We retain order and tax records for 7 years as required by the Australian Taxation Office. We delete other personal information when no longer needed.

Your rights

Under the APPs you have the right to:

• Access your personal information.
• Correct information that is inaccurate or out of date.
• Delete your personal information (subject to legal retention requirements).
• Withdraw consent to marketing communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, email privacy@ikigailand.com.au. We will respond within 30 days.

Direct marketing

We send marketing emails only with your express opt-in. Every marketing email contains an unsubscribe link that takes one click. You may also email privacy@ikigailand.com.au to opt out.

Automated decisions

Parts of our service use automated systems — including AI — to personalise recommendations, prioritise enquiries, and draft responses that our team reviews. No decision with legal or similarly significant effect is made about you by automation alone. You can ask us to explain or review any automated outcome via privacy@ikigailand.com.au.

Data breaches

If we become aware of a data breach that may cause serious harm, we will follow the Notifiable Data Breaches scheme under the Privacy Act and notify affected individuals and the OAIC.

Cross-border transfers

Some of our service providers process data outside Australia. Where this occurs, we take reasonable steps to ensure those providers handle personal information consistently with the APPs.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page reflects the latest revision. Material changes will be notified by email to anyone with a registered account.

Contact

Privacy Officer Ikigailand Pty Ltd 188 Yarra St, Warrandyte VIC 3113 privacy@ikigailand.com.au (03) 9815 7777