Privacy Policy

What we collect

• Identity and contact details, including name, work or personal email, phone number, company, building and delivery information.
• Catering information, including orders, quotes, client codes, notes, team-order participation and service history.
• Account and promotion information, including sign-in identifiers, Wallet claims, loyalty activity, offer redemptions, consent choices and support enquiries.
• Technical and usage information, including approximate device or browser identifiers, IP-related security data, timestamps, referral source, QR scans and interaction events.
• Dietary or allergen information you choose to provide for food preparation. We use it only to fulfil and safely manage the relevant order; we do not use it to infer unrelated sensitive information.

You may deal with us anonymously for general browsing. We need certain details when they are necessary to provide an order, account, benefit or support response.

How we collect and use it

We collect information directly from you, an authorised workplace contact, another participant in a shared order, and automatically when our service records necessary security or usage events.

We use it to provide and deliver catering; manage quotes, accounts and client pricing; operate Wallet, loyalty and benefit programs; verify and redeem offers; respond to support; prevent fraud and misuse; maintain records; improve the service; and meet legal obligations.

If a workplace contact supplies information about another person, they must be authorised to do so and should make this policy available to that person.

Marketing

We send marketing only where we have the required consent or another lawful basis. Marketing consent is optional and is kept separate from service messages. Every commercial email includes a working unsubscribe option, and we aim to action requests within five working days. Unsubscribing from marketing does not stop essential order, security, account or redemption messages.

Who we disclose information to

We may disclose only what is reasonably necessary to our staff, delivery or service partners, technology hosting and database providers, authentication, email, analytics and support providers, professional advisers, payment providers if payments are enabled, and authorities where required or permitted by law.

Some technology providers may process or store information outside Australia. Their locations can change. Where Australian privacy law applies, we take reasonable steps appropriate to the service and risk before using overseas providers.

We do not sell personal information.

Cookies and local storage

We use essential browser storage and similar technology for sign-in, secure customer sessions, Wallet device controls, preferences, abuse prevention and service operation. We do not use these tools to create an unrelated advertising profile.

Security and retention

We use access controls, role-based administration, server-side validation, rate limits, protected credentials and audit records appropriate to the service. No internet service is completely risk-free.

We retain information only while it is reasonably needed for the purposes above, dispute handling, security, backup cycles, accounting and other legal requirements. We then delete, de-identify or securely isolate it where practicable.

Access, correction and deletion

You may ask us to access or correct personal information we hold about you, or request deletion where lawful and practicable. We may need to verify your identity. Some information must be retained for legal, transaction, fraud-prevention or dispute purposes, and some requests may be subject to exceptions under applicable law.

Data incidents

We assess suspected data incidents and, where the Notifiable Data Breaches scheme applies, notify affected people and the Office of the Australian Information Commissioner when legally required.

Questions and complaints

Contact us first so we can investigate: orders@bigitaliano.com.au, Docklands, Melbourne. Please include enough detail for us to understand the issue. We will acknowledge and handle privacy complaints within a reasonable period.

If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner.

Changes

We may update this policy when the service or legal requirements change. The date above shows the current version.