Privacy policy

Who we are

Morning Cafe

To reach us about this: ask our staff, or contact us at any of our branches.

• City

What we collect

• When you order online for delivery: your name, mobile number, email if you give it, the delivery address and where it is on the map, what you order, and any notes (such as allergies) you add.
• When you order at your table with the QR code: what you order and notes you add, and your name only if you give it. We don't need to know who you are.
• When you book a table: your name, mobile, email if you give it, how many are coming, the day and time, and what you tell us (an occasion, allergies or dietary needs, a note).
• If you sign in with a Tillmora guest account: the email you sign in with, so your details fill in and you can see your orders and bookings here.
• When you pay online: the amount, whether it was approved, and the card type and last four digits. Your full card details go straight to Stripe; we never see or keep them.
• To stop abuse of online ordering and bookings: a check by Cloudflare Turnstile that a person is using the page, and the network address a request comes from, kept only as a scrambled code for a day.

Why we use it

We use your details only:

• to make, serve, deliver and charge for your order, and to contact you about it
• to keep your table, send your confirmation and a reminder the day before, and prepare for allergies or occasions
• to keep the records the law requires (bills and tax records)
• to deal with questions, complaints, refunds and disputes
• to protect our pages from abuse and fraud
• to send you our news and offers, only if you ticked the box to get them; you can stop them at any time

Who we share it with

We never sell your details. We share them only with:

• Tillmora, the company whose software runs our ordering, bookings and tills. It stores your details for us and uses them only to provide its service to us, under a data processing agreement.
• Stripe, which takes online payments for us under its own privacy policy (https://stripe.com/privacy).
• Our own drivers, who see your name, mobile, address and notes while they deliver. While your order is on its way, you can see the driver on a map.
• Email and other service providers Tillmora uses to send your confirmations and receipts, and to host its service.
• Authorities, when the law requires it.

Where it is kept and for how long

Your details are stored on Tillmora's cloud service, in India, with encryption while they travel and while they're stored. Where your details leave your country, we and Tillmora protect them as the law asks.

Bills and payments are kept for as long as tax law requires. Booking details, notes and allergies are kept while you visit us, until you ask us to remove them. Abuse checks last a day.

Your choices and rights

You can ask to see the details we hold about you, to correct them, or to have them removed. Ask us (ask our staff, or contact us at any of our branches). When we remove your details, your name and contact details come off every booking and order; the bills we must keep for tax stay, without your name.

If you have a Tillmora guest account, you can download your details, leave our restaurant, or delete your account yourself under Details when you sign in.

We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where they apply to us. If you're not happy with how we handled your request, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We update this policy when what we do changes, and the date at the top shows when. Tillmora also has its own privacy policy for guest accounts and for its service: tillmora.com/legal/privacy.