Food&Me operates the websites foodandme.co, foodandme.co.nz, and foodandme.com.au, as well as our integrated Point of Sale (POS) applications, online ordering platforms, self-service kiosks, and related merchant software services (collectively, the "Platform").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with our Platform. We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020, the Australian Privacy Act 1988, and standard industry data protection practices.

1. Information We Collect

We collect information that helps us provide, maintain, and optimize a seamless hospitality ecosystem. This information falls into three categories:

A. Information You Provide to Us

• Account Data: Business name, contact name, email address, phone number, physical business address, and login credentials when you sign up for a Food&Me plan.
• Customer Transaction Data: When end-consumers use your direct online ordering, table QR ordering, or kiosks, we collect names, phone numbers, delivery/pickup details, and order notes to fulfill transactions on the merchant's behalf.
• Customer Support Correspondence: Information you provide when contacting support regarding hardware configurations, billing inquiries, or technical troubleshooting.

B. Information Collected Automatically

• Device & Operational Data: IP addresses, browser types, operating systems, hardware configurations (e.g., POS terminal states, printer connections, KDS logs), and interaction timestamps.
• Cookies and Tracking: We use essential cookies to keep sessions active, remember configuration preferences, and monitor platform performance.

C. Financial and Payment Data

• When processing credit card transactions via our POS bundles or online ordering channels, payment information is handled directly by secure, PCI-DSS compliant payment gateways. We do not store raw credit card numbers or sensitive CVV codes on our servers.

2. How We Use Your Information

We use the data we collect strictly to power your business operations and maintain system health:

• To set up, manage, and maintain merchant accounts and subscription billing.
• To process and route real-time online food orders, deliveries, and table reservations.
• To generate real-time business reporting, analytics dashboards, and inventory updates.
• To manage and track customer loyalty rewards, promo codes, and gift cards.
• To distribute essential system updates, product alerts, and marketing newsletters (which you can opt out of at any time).
• To detect, prevent, and mitigate fraud or technical security issues.

3. Sharing and Disclosure of Information

We do not sell, rent, or trade merchant or customer personal data to third-party advertisers. We only share information under the following structural circumstances:

• With Third-Party Service Providers: We share necessary data with trusted vendors who perform operational support on our behalf, including cloud hosting providers, integrated payment processors, SMS alert gateways, and delivery driver networks.
• Between Merchants and Consumers: End-consumer data (such as address and phone number) is shared directly with the specific restaurant or merchant from whom they ordered to ensure fulfillment.
• Legal Obligations: We may disclose information if required to do so by law, court order, or governmental authorities operating within New Zealand and Australia.

4. Data Security

We implement a variety of administrative, technical, and physical security measures designed to protect personal data. This includes standard SSL/TLS encryption for all data transmissions, secure cloud server environments, and restricted backend data access permissions. However, please remember that no system can be guaranteed 100% secure.

5. Your Rights and Choices

Depending on your location, you hold specific rights regarding your personal information, including:

• The right to request access to the personal data we hold about you.
• The right to request corrections to inaccurate or outdated personal information.
• The right to request the deletion of your account and personal details, subject to historical financial record-keeping laws (e.g., tax or corporate audit rules).