Privacy Policy

Last Updated: July 2026

Moulya's Kitchen respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable privacy laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, create an account, place orders, submit catering enquiries, communicate with us, or otherwise use our services.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

This Privacy Policy applies to personal information collected through:

• Our website and online ordering platform;
• Customer accounts and membership services;
• Catering enquiries and catering services;
• Customer support interactions;
• Contact forms and communications;
• Promotional communications where you have provided consent; and
• Any other services where this Privacy Policy is made available.

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked from our website.

2. Personal Information We Collect

We collect personal information directly from you, automatically through your use of our website, and from trusted third-party service providers.

A. Information You Provide Directly

Depending on how you interact with our services, we may collect:

Account Information

• Full name
• Email address
• Phone number
• Username
• Account preferences

Delivery Information

• Delivery address
• Billing address
• Delivery instructions

Order Information

• Products ordered
• Order history
• Transaction details
• Catering requests

Communications

• Contact form submissions
• Customer support requests
• Catering enquiries
• Customer feedback and reviews

Authentication Information

• Login credentials
• Passwords (stored in encrypted and hashed format)
• One-time-password (OTP) verification information

B. Information Collected Automatically

When you use our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited
• Referring URLs
• Date and time of access
• Session information
• Security logs
• Error reports
• Website performance information

This information helps us improve website performance, security, and user experience.

C. Information From Third Parties

We may receive information from:

• Payment providers — Stripe payment processing services.
• Address verification services — Google Maps Platform and related location services.
• SMS providers — Twilio or other SMS providers when OTP verification is enabled.
• Email providers — Transactional email service providers used to deliver order confirmations and account notifications.

3. How We Use Personal Information

We use personal information for the following purposes.

A. To Provide Our Services

• Process food orders;
• Fulfil catering requests;
• Arrange deliveries;
• Manage customer accounts;
• Process payments;
• Provide requested services.

B. To Communicate With You

We may contact you regarding order confirmations, delivery updates, account notifications, security alerts, customer support enquiries, and catering enquiries.

C. To Secure Our Services

• Authenticate users;
• Verify customer identity;
• Prevent fraudulent transactions;
• Detect security incidents;
• Protect customer accounts;
• Enforce our Terms and Conditions.

D. To Improve Our Services

• Improve website performance;
• Identify technical issues;
• Improve customer experience;
• Develop new features and services.

E. To Comply With Legal Obligations

• Comply with tax obligations;
• Meet accounting requirements;
• Comply with consumer protection laws;
• Respond to lawful requests from government authorities.

4. How We Share Personal Information

We do not sell your personal information.

We may disclose personal information to the following categories of recipients.

A. Payment Processing Providers

We use Stripe to securely process payments. Payment card information is collected directly by Stripe and is subject to Stripe's own privacy and security policies. We do not store credit card or debit card information on our systems.

B. Delivery and Location Services

We may share relevant delivery information with Google Maps Platform, delivery partners, and address validation services.

C. SMS Service Providers

Where OTP authentication is enabled, we may share phone numbers with SMS delivery providers such as Twilio.

D. Email Service Providers

We may share email addresses with providers that deliver order confirmations, password reset emails, account notifications, and service-related communications.

E. Hosting and Infrastructure Providers

We may use cloud hosting and infrastructure providers to operate our website securely and reliably.

F. Legal and Regulatory Authorities

We may disclose personal information where required by law or where reasonably necessary to comply with legal obligations, respond to court orders, protect our rights and property, investigate fraud or illegal activities, and protect customers and the public.

5. Cookies and Similar Technologies

We use essential cookies and browser storage technologies to operate our website. These technologies help us authenticate users, maintain secure sessions, protect against fraud, store shopping cart contents, and remember user preferences.

We do not use advertising cookies. We do not sell information collected through cookies. For more information, please review our Cookie Policy.

6. Marketing Communications

We may send promotional emails only where you have provided consent or we are otherwise permitted to do so under applicable law. You may unsubscribe from marketing communications at any time using the unsubscribe link included in our emails.

Even if you opt out of marketing communications, we may still send service-related messages such as order confirmations, delivery notifications, security alerts, and account notices.

7. Data Retention

We retain personal information only for as long as necessary for legitimate business and legal purposes.

We may retain information longer where required by law.

8. Security

We implement industry-standard security measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption;
• Secure cookies;
• Password hashing;
• CSRF protection;
• Role-based access controls;
• Multi-factor authentication for administrators;
• Continuous monitoring and security logging;
• Secure payment processing through Stripe.

While we take reasonable measures to protect personal information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can remove the information where appropriate.

10. Your Privacy Rights

Subject to applicable law, you may request access to personal information we hold about you, correction of inaccurate information, deletion of personal information, withdrawal of consent where applicable, and information regarding how your personal information is processed.

To exercise these rights, please contact us using the details below. We aim to respond within 30 days.

11. Complaints

If you believe we have breached applicable privacy laws, you may submit a complaint by contacting us. We will investigate complaints and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will publish the updated version on this page and revise the "Last Updated" date above. Your continued use of our services after changes are published constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For privacy-related enquiries, requests, or complaints, please contact:

Privacy Officer
Moulya's Kitchen
Email: team@moulyaskitchen.com.au

For additional information regarding Australian privacy rights, visit https://www.oaic.gov.au.