Privacy Policy

Who We Are

In this policy, "we", "us", and "our" means Arcade Kebab House. We operate an Australian restaurant ordering website and mobile app for customers, riders, and restaurant staff.

Information We Collect

We may collect:

• account details such as your name, email address, phone number, password, and role;
• ordering details such as cart items, menu selections, item notes, order history, delivery instructions, and receipts;
• delivery details such as address, coordinates you choose to provide, delivery status, and rider assignment information;
• payment information handled by Stripe, including payment status, transaction references, and limited card details such as card brand or last four digits where Stripe returns them to us;
• support and contact messages you send to us;
• device, app, and security information such as IP address, browser or device type, push notification tokens, log data, and authentication activity.

We do not intentionally collect full card numbers, bank account details, or unnecessary sensitive information.

How We Use Information

We use personal information to:

• create and manage customer, rider, and staff accounts;
• process orders, payments, refunds where applicable, delivery, and order updates;
• contact you about orders, account security, support requests, or important service messages;
• send receipts, delivery updates, and optional app notifications;
• maintain security, prevent misuse, investigate errors, and protect our services;
• comply with tax, accounting, record keeping, dispute handling, and legal obligations;
• improve menu availability, checkout, delivery, and app performance.

Payments Through Stripe

Card payments are processed by Stripe. When you pay by card, Stripe collects and processes payment information under its own terms and privacy notices. We receive payment confirmations, payment status, and related transaction references so we can confirm your order. We do not store your full card number on our servers.

When We Share Information

We only share information where needed to run the service, complete your order, or meet legal obligations. This may include sharing relevant order and contact details with restaurant staff, assigned riders, Stripe, hosting and email providers, technical service providers, professional advisers, regulators, or authorities where required by law.

We do not sell your personal information.

Cookies, Analytics, and App Data

Our website may use cookies or similar storage to keep you signed in, maintain cart and checkout sessions, protect forms, remember preferences, and improve reliability. Our mobile app may store authentication tokens, app settings, notification tokens, and cached service data on your device.

Security and Retention

We use reasonable technical and organisational measures to protect personal information, including access controls, authentication, encrypted transport where supported, and restricted administrative access. No online service is completely risk free. We keep personal information only for as long as needed for the purposes in this policy, including order records, legal compliance, accounting, dispute resolution, and security.

Access, Correction, and Complaints

You may ask to access or correct the personal information we hold about you. You may also contact us if you have a privacy concern or complaint. We will respond within a reasonable time and may need to verify your identity before acting on a request.

Children

Our ordering services are intended for customers who can lawfully place and pay for food orders. If a parent or guardian believes a child has provided personal information without appropriate permission, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.