Privacy Policy

Privacy Policy

Daily Food Deals Pty Limited

ABN 21 688 667 601 · Version 2.0 · Effective 25 April 2026

1. Introduction

Daily Food Deals Pty Limited (ABN 21 688 667 601) (we, us, our) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, hold, use, disclose and protect personal information, and how you can exercise your rights in relation to that information.

This policy is issued in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to our website https://www.DailyFoodDeals.co (Website), our mobile and online services, and all related dealings between you and us.

By using our Website or services, or providing personal information to us, you agree to the collection, use and disclosure of your personal information in accordance with this policy.

2. What is personal information

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether recorded in a material form or not. Sensitive information is a subset of personal information that includes information about health, ethnicity, beliefs and similar matters; we do not knowingly collect sensitive information unless you provide it voluntarily and necessarily for the service requested.

3. Information we collect

In the course of providing our services we may collect and hold the following categories of personal information:

Identity and contact details: your name, email address, billing address, shipping address (if different), telephone numbers, and (where applicable) date of birth for age verification.
Account profile: username, password (stored only in hashed form), order history, wishlists, saved preferences and reviews you publish.
Transaction details: products purchased, order values, delivery instructions, refunds and dispute records. Payment card data is processed and tokenised by our PCI-DSS compliant payment processor; we do not store full card numbers or CVV codes.
Communications: the content of emails, chat messages, social media interactions, customer support tickets and call recordings (where lawfully recorded and notified).
Technical and usage data: IP address, device identifiers, browser type and version, operating system, time zone, referring and exit URLs, pages viewed, search terms, click paths, session duration and timestamps.
Marketing data: your preferences for receiving marketing from us and your communication preferences.

Where lawful and practical, you may interact with us anonymously or under a pseudonym (for example, when making a general enquiry). We will tell you if anonymous interaction is not possible for a specific service.

4. How we collect personal information

We collect personal information:

directly from you, when you create an account, place an order, complete a form, contact us, or otherwise interact with us;
automatically, when you use our Website, through cookies, tags, pixels, web beacons and server log files (see Section 9);
from third parties, such as our payment processors, delivery partners, marketing platforms, fraud-prevention providers and publicly available sources, where it is unreasonable or impractical to collect directly from you;
from referrals, where another customer or partner provides your details (for example, gift purchases or referral programs).

5. Why we collect, hold, use and disclose personal information

We use and disclose personal information for the following primary purposes:

to register and manage your customer account and authenticate you;
to process, fulfil and deliver your orders, including screening for fraud, chargebacks and abuse;
to communicate with you about your orders, refunds, customer support enquiries and service-related notices;
to operate, secure, troubleshoot and improve our Website, mobile applications and services, including analytics and product development;
to send you direct marketing about our products and services, and (where you have not opted out) about selected third-party offers we believe may interest you;
to personalise your experience, including recommendations and targeted advertising;
to maintain business records, conduct internal audits, manage risk and comply with our legal, regulatory, tax and accounting obligations; and
to investigate, prevent or take action against suspected illegal, fraudulent or harmful activity, or breaches of our terms.

We will not use or disclose your personal information for a secondary purpose unless that purpose is related to the primary purpose, you would reasonably expect the use or disclosure, you have consented, or the use or disclosure is otherwise required or authorised by law.

6. Direct marketing and your right to opt out

We may send you direct marketing communications by email, SMS, push notification, post or telephone, where you have consented (expressly or by reasonable expectation arising from a customer relationship) and as permitted by the Privacy Act 1988 (Cth) and Spam Act 2003 (Cth).

Every electronic marketing communication we send includes a clear and functional unsubscribe mechanism. You may also withdraw consent or opt out at any time by:

clicking the unsubscribe link in any marketing email;
replying STOP to any marketing SMS;
updating your communication preferences in your account; or
emailing us at Contact@DailyFoodDeals.co with the subject line “Unsubscribe”.

Opting out of marketing does not affect transactional or service messages necessary to fulfil your orders or provide our services.

7. Disclosure to third parties

We disclose personal information only to the categories of recipients listed below, and only to the extent necessary for the relevant purpose:

Service providers: hosting, IT infrastructure, e-commerce platform (WooCommerce), customer relationship management, email and SMS delivery, customer support, analytics, fraud prevention and identity verification.
Payment and financial partners: payment processors, acquiring banks and gateway providers.
Logistics and delivery partners: couriers and fulfilment providers, who receive only the information needed to deliver your order.
Marketing and advertising partners: Meta Platforms (Facebook, Instagram), Google (including Google Ads and Google Analytics), and other advertising networks for measurement, attribution and (where consent is required) personalised advertising.
Professional advisers: lawyers, accountants, auditors, insurers and corporate advisers under duties of confidentiality.
Government, law enforcement and regulators: where required or authorised by law, court order or to protect our rights, property or safety, or those of our customers or the public.
Corporate transactions: purchasers, investors and their advisers in connection with a sale, merger, financing, restructure or insolvency of our business, subject to confidentiality obligations.

We do not sell personal information.

8. Overseas disclosures

Some of our service providers and marketing partners are located outside Australia, or may store or process personal information outside Australia. The countries to which personal information is likely to be disclosed include:

the United States of America (cloud hosting, analytics, advertising, e-commerce and CRM platforms);
the European Union and the United Kingdom (selected hosting and processing partners);
other jurisdictions where our service providers operate from time to time, which may include Singapore, India, the Philippines and New Zealand.

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information, including by entering into contractual data-protection commitments. You acknowledge that, in some cases, by consenting to overseas disclosure for which we obtain your consent, the obligation in APP 8.1 does not apply and we will not be accountable under section 16C of the Privacy Act for any breach by the overseas recipient.

9. Cookies and tracking technologies

Our Website uses cookies, web beacons, pixels, tags and similar technologies to operate the Website, remember your preferences, analyse usage, and deliver and measure advertising.

Strictly necessary cookies: required to operate the Website (for example, login, cart and checkout).
Performance and analytics cookies: help us understand how the Website is used and improve performance.
Functional cookies: remember your preferences and personalise content.
Advertising cookies: used by us and third parties to deliver and measure advertising on this Website and across other sites.

You can control cookies through your browser settings, our Website cookie preferences (where available), and platform-level opt-out tools such as Your Online Choices (youronlinechoices.com.au), the Network Advertising Initiative opt-out, and platform-specific ad-personalisation controls offered by Meta and Google. Disabling certain cookies may affect Website functionality.

10. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Our safeguards include:

encryption of data in transit (TLS) and at rest where appropriate;
access controls, authentication and least-privilege principles for staff and contractors;
network security, monitoring and patching of our infrastructure;
contractual obligations on service providers;
staff training on privacy and information-security obligations; and
incident response and business continuity procedures.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

11. How long we keep personal information

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law, including:

Customer accounts: for the duration of your account plus up to 24 months after closure or last activity, unless a longer period is required by law.
Transaction and tax records: for at least 7 years from the end of the relevant financial year, in accordance with Australian tax and corporate record-keeping laws.
Marketing data: until you opt out, after which we retain a minimal suppression record to honour your opt-out.
Website analytics and logs: typically up to 26 months, depending on the platform and purpose.
Customer support communications: up to 7 years from the date of last contact.

When personal information is no longer required and we are not legally obliged to retain it, we will take reasonable steps to delete or de-identify it.

12. Your rights: access, correction and complaints

Subject to law, you have the right to:

Access: request a copy of the personal information we hold about you. We will respond within 30 days. We do not charge for making a request, but we may charge a reasonable cost-recovery fee for providing copies (for example, where extensive material is involved); we will notify you of any fee before incurring it.
Correction: request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
Withdraw consent: where we rely on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
Opt out of direct marketing: as set out in Section 6.
Complaint: make a complaint about our handling of your personal information.

To exercise any of these rights, please contact us using the details in Section 17. We may need to verify your identity before responding to a request.

13. Anonymity and pseudonymity

Where lawful and practicable, you may deal with us anonymously or under a pseudonym. This option is generally not available where we need to verify your identity to provide a service (for example, processing an order, managing an account, processing a payment, or complying with a legal obligation).

14. Children

Our Website and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe we have collected information from a child without appropriate consent, please contact us and we will take reasonable steps to delete it.

15. Notifiable data breaches

We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If we suffer an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, in accordance with the law.

16. International users (EEA, UK and others)

If you access our Website or services from outside Australia, you acknowledge that your personal information will be transferred to and processed in Australia and other jurisdictions, which may have data-protection laws different from those in your country.

If the EU or UK General Data Protection Regulation applies to our processing of your personal information, the legal bases on which we rely are: performance of a contract with you, your consent, our legitimate interests (for example, to operate, secure and improve our services and to conduct direct marketing of our own similar products to existing customers), and compliance with legal obligations. EEA and UK users may have additional rights including erasure, restriction, portability and objection; please contact us to exercise them.

17. Contact and Privacy Officer

All privacy enquiries, requests for access or correction, opt-out requests and complaints should be directed to our Privacy Officer:

Privacy Officer — Daily Food Deals Pty Limited

Email: Contact@DailyFoodDeals.co

Website: https://www.DailyFoodDeals.co

We will acknowledge your enquiry promptly and aim to respond substantively within 30 days.

18. Complaints escalation

If you are not satisfied with our response to a privacy complaint, you may refer the matter to the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Telephone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001

19. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations or business operations. The current version is identified by the version number and effective date at the top of this policy. We will publish any revised version on our Website and, where the changes are material, we will provide reasonable advance notice (for example, by email to registered customers or by prominent notice on the Website) before the changes take effect. Your continued use of our Website or services after the effective date constitutes acceptance of the revised policy.

— End of Privacy Policy —