Privacy Policy

FoodyExpress Pty Ltd (ABN 71 697 930 591) ("FoodyExpress", "we", "us", "our") operates the website foodyexpress.com.au, a pure vegetarian food delivery platform based in Sydney, New South Wales, Australia.

We collect personal information that you provide directly when using our platform, including:

• Identity information: Full name
• Contact information: Phone number, email address (optional)
• Delivery information: Delivery address, suburb
• Order information: Items ordered, special instructions, order history
• Event information (catering orders): Event date, event time, number of guests, event address

We do not collect sensitive information such as health information, religious beliefs, or financial account numbers. Payment card details are never collected or stored by FoodyExpress — all payment is processed in cash or card on delivery.

We collect personal information when you:

• Place an order on our website
• Submit a catering enquiry or booking
• Contact us through Facebook Messenger or WhatsApp

We may also collect non-personally identifiable information automatically, such as browser type, operating system, and pages visited, for website analytics and security purposes.

We collect and use your personal information to:

• Process and fulfil your food delivery orders
• Send order confirmation, updates, and delivery notifications via WhatsApp
• Coordinate with Vendors (restaurants and caterers) to prepare and deliver your order
• Respond to your enquiries and customer service requests
• Improve our platform and services
• Comply with our legal obligations

We will not use your personal information for purposes other than those listed above without your consent, unless required by law.

We may share your personal information with:

• Vendors (Restaurants & Caterers): We share your name, phone number, delivery address, and order details with the relevant Vendor to fulfil your order.
• Twilio (WhatsApp messaging): We use Twilio's messaging platform to send you WhatsApp notifications. Your phone number and order details are transmitted to Twilio for this purpose.
• Supabase (Database): Your order information is stored securely in our Supabase database hosted in Australia or the United States.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may disclose your information if required by law, court order, or Australian regulatory authority.

Some of our technology service providers (including Twilio and Supabase) may store or process data outside Australia, including in the United States. We take reasonable steps to ensure these providers handle your information in accordance with the Australian Privacy Principles. By using FoodyExpress, you consent to such overseas disclosure.

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Restricted access to personal data within our team
• Use of industry-standard database security (Supabase Row Level Security)

However, no method of data transmission over the internet is 100% secure. We cannot guarantee the absolute security of your information.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records are typically retained for a minimum of 7 years to meet Australian taxation and business record-keeping obligations.

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate, incomplete, or outdated information
• Request deletion of your personal information (subject to our legal obligations)
• Complain about how we handle your personal information

To exercise any of these rights, please contact us via our Facebook page or WhatsApp. We will respond within 30 days.

If you believe we have breached the Australian Privacy Principles, you may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Our website may use cookies and similar technologies to improve your browsing experience and analyse site usage. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of our website.

We do not use tracking cookies for advertising or third-party marketing purposes.

Our platform is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at foodyexpress.com.au/legal/privacy. Continued use of our platform constitutes acceptance of the updated Policy.

For any privacy enquiries, access requests, or complaints, please contact us:

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.