Privacy policy
This policy explains how Big Boss Pizza & Pasta handles your personal information, and how we meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Online ordering for Big Boss Pizza & Pasta is provided by OrderMint, which stores and processes this information on the shop’s behalf.
What we collect
When you place an order we collect only what is needed to prepare and deliver it:
- your name;
- your mobile number, so we can text you order updates;
- your email address, so we can send your confirmation and tax invoice;
- your company name, if you give one (catering orders are often for a workplace);
- your delivery address and suburb, for delivery orders;
- any notes you add to the order — please include dietary or allergy information here if it is relevant, and nothing more sensitive than that; and
- the contents, time and total of your order.
We never see or store your card details. Card payments are entered directly into a secure form hosted by Stripe and go straight to Stripe. Your card number never reaches our servers, and we only ever receive confirmation that a payment succeeded.
Why we collect it
To take, prepare, and deliver your order; to contact you about it; to issue a tax invoice as required by Australian tax law; to process a refund if one is due; and to keep the business records we are legally obliged to keep.
Who we share it with
We do not sell your personal information and we do not use it for marketing unless you ask us to. We share it only with the service providers that make ordering work:
- Stripe — card payment processing (United States and Australia).
- Twilio — sending order-status text messages (United States).
- Resend — sending confirmation emails and tax invoices (United States).
- Neon — database hosting (Sydney, Australia).
- Fly.io — application hosting (Sydney, Australia).
Some of these providers are located overseas, so under APP 8 your information may be disclosed outside Australia — principally to the United States. We only use providers that commit to protecting it under contractual and legal safeguards.
How we protect it
Your information is encrypted in transit (HTTPS on every page) and encrypted at rest by our database provider. Access to order data is restricted to the shop it belongs to and to authorised OrderMint staff, is protected by individual accounts rather than shared passwords, and administrative actions are recorded in an audit log.
How long we keep it
We keep order records identifying you for two years from the date of your order, after which they are deleted or de-identified. Some records must be retained for longer where tax law requires it; those are kept only for that purpose.
Accessing or correcting your information
Under APP 12 and APP 13 you may ask for a copy of the personal information we hold about you, or ask us to correct it. Email privacy@ordermint.com.au or contact Big Boss Pizza & Pasta directly on (03) 5390 1686. We will respond within 30 days. You can also ask us to delete your information, and we will do so unless we are required to keep it.
Complaints
If you think we have mishandled your personal information, please tell us first at privacy@ordermint.com.au so we can put it right. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Data breaches
If a breach of your personal information occurs that is likely to result in serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be notified at checkout.