Privacy Policy

1. Introduction

At BurgerFuel, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, place orders, or interact with our services.

By using our services, ordering food through our platforms, creating an account, or providing us with personal information, you agree to the terms outlined in this Privacy Policy. We never sell your personal data to third parties for profit.

This policy applies to all information collected through our website (burgerfuell.com), mobile applications, in-store visits, phone orders, delivery services, and any other services we provide in New Zealand.

2. Information We Collect

2.1 Information You Provide to Us:

• Personal Identification Information: Name, email address, phone number, date of birth, delivery address, billing address
• Account Information: Username, password, order history, dietary preferences, favorite meals, loyalty program membership details
• Payment Information: Credit card details, PayPal information, bank account details (securely encrypted and processed by our payment providers)
• Food Service Specific Information:
  • Order history and purchase patterns
  • Dietary preferences and restrictions (vegan, vegetarian, gluten-free)
  • Allergen information you provide
  • Special dietary requirements (halal, kosher, lactose-free)
  • Table reservation details and party size
  • Catering event information and special requests
  • Food preferences and customization choices
  • Loyalty program points and rewards data
• Communication: Contact form submissions, customer reviews, feedback, survey responses, customer service interactions
• Marketing Preferences: Email subscription preferences, notification settings, promotional opt-ins

2.2 Information Automatically Collected:

• Device Information: IP address, browser type, operating system, device model, mobile network information
• Usage Data: Pages visited, time spent on site, click patterns, search queries, ordering behavior, app usage statistics
• Location Data: Approximate location based on IP address, precise location (with your permission) for delivery services
• Cookie Data: Session IDs, user preferences, shopping cart contents, authentication tokens, analytics data
• Technical Data: Error logs, performance metrics, crash reports, API usage data

2.3 Information from Third Parties:

• Social Media: Profile information if you connect social media accounts (Facebook, Instagram, Google)
• Payment Processors: Transaction confirmations, payment status updates
• Delivery Partners: Delivery status, driver information, location updates
• Marketing Partners: Campaign performance data, advertising interaction metrics
• Business Partners: Franchise location information, joint promotional data

3. How We Use Your Information

3.1 Service Provision:

• Process and fulfill food orders, manage delivery and pickup
• Provide customer support and resolve order issues
• Manage your account, including login authentication and security
• Process payments securely and issue refunds when necessary
• Personalize your dining experience and recommend menu items
• Manage table reservations and catering bookings
• Track loyalty program points and apply rewards

3.2 Communication:

• Send order confirmations, delivery notifications, and pickup reminders
• Provide customer support and respond to inquiries
• Send important notices about policy changes or service updates
• Send marketing emails about new menu items, promotions, and special offers (with your consent only)
• Notify you about loyalty rewards and exclusive member benefits

3.3 Marketing and Analytics:

• Create personalized advertising campaigns based on your preferences
• Analyze website traffic and user behavior to improve our services
• Measure the effectiveness of marketing campaigns and promotions
• Conduct market research to develop new menu items and services
• Segment customers for targeted promotions and offers

3.4 Legal Compliance and Protection:

• Respond to legal requests, court orders, and regulatory requirements
• Prevent fraud, unauthorized access, and security breaches
• Protect our rights, property, and the safety of our customers and employees
• Resolve disputes and enforce our terms of service
• Comply with food safety and health regulations

4. Information Sharing and Disclosure

4.1 Service Providers:

• Payment Processors: Stripe, PayPal, and other payment providers to process transactions securely
• Delivery Companies: Third-party delivery services to fulfill orders and provide real-time tracking
• Cloud Storage Providers: AWS, Microsoft Azure for secure data storage and backup
• Email Marketing Services: Mailchimp, SendGrid for sending newsletters and promotional emails
• Analytics Tools: Google Analytics, Hotjar for website performance analysis
• Customer Support: Help desk software providers to manage customer inquiries

4.2 Legal Requirements:

• Court orders, subpoenas, and other legal processes
• Compliance with New Zealand privacy laws and food service regulations
• Protection of our legal rights and property
• Public safety emergencies and health department requirements
• Investigation of suspected fraud or illegal activities

4.3 Business Transfers:

• In case of mergers, acquisitions, or asset sales involving BurgerFuel
• We will notify customers before personal data is transferred
• The new owner must comply with this Privacy Policy
• Your rights regarding your data will remain protected

4.4 With Your Consent:

• Any other purposes specifically disclosed and consented to by you
• Sharing with marketing partners for joint promotions (with explicit consent)
• Social media integration features you choose to use

5. Data Security

5.1 Technical Measures:

• Encryption: All data transmission is protected using SSL/TLS encryption
• Firewall Protection: Advanced firewall systems protect our servers from unauthorized access
• Access Control: Only authorized personnel have access to personal data on a need-to-know basis
• 24/7 Monitoring: Continuous security monitoring and threat detection systems
• Data Backups: Regular encrypted backups stored in secure, geographically distributed locations
• Penetration Testing: Regular security assessments and vulnerability testing

5.2 Organizational Measures:

• Comprehensive employee training on data protection and privacy best practices
• Strict data handling procedures and access protocols
• Confidentiality agreements with all employees and third-party service providers
• Incident response plan for potential security breaches
• Regular security audits and compliance assessments
• Privacy by design principles in all system development

5.3 Your Security Responsibilities:

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public or shared computers
• Be cautious of phishing emails claiming to be from BurgerFuel
• Report any suspicious account activity immediately
• Keep your contact information updated for security notifications

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and mobile applications. Below is a detailed breakdown of the types of cookies we use:

Cookie Type	Purpose	Duration	Can be Disabled
Essential Cookies	Basic site functionality, shopping cart, user authentication, security	Session only	No - Required for operation
Functional Cookies	User preferences, language settings, location data, personalization	Up to 1 year	Yes - Via browser settings
Analytics Cookies	Usage analysis, performance monitoring, site improvement	Up to 2 years	Yes - Via cookie preferences
Marketing Cookies	Personalized advertising, campaign tracking, social media integration	Up to 1 year	Yes - Via cookie preferences

Additional Tracking Technologies:

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Advertising campaign measurement and retargeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser data storage for enhanced user experience
• Session Storage: Temporary data storage during your visit

Cookie Management: You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your user experience.

7. Your Privacy Rights (GDPR/CCPA Compliance)

We respect your privacy rights and provide you with the following options to control your personal information:

7.1 Right of Access

You have the right to request and receive a copy of all personal data we hold about you, including order history, account information, and usage data.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal information in your account at any time.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal retention requirements for business records and tax purposes.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data while we address any concerns or disputes.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transfer it to another service provider.

7.6 Right to Object

You may object to processing of your data for direct marketing purposes or legitimate business interests.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling.

8. Children's Privacy

BurgerFuel services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 years old.

• If we become aware that we have collected personal data from a child under 16, we will delete that information promptly
• Parents who believe their child has provided personal information to us should contact us immediately
• We encourage parents to monitor their children's internet usage and educate them about online privacy
• If you are under 16, please do not provide any personal information through our services

9. International Data Transfers

9.1 Protection Measures:

When we transfer your personal data internationally, we implement appropriate safeguards:

• EU-Japan adequacy decisions for transfers within adequate jurisdictions
• Standard Contractual Clauses (SCCs) approved by regulatory authorities
• Comprehensive data processing agreements with international partners
• Appropriate technical and organizational security measures
• Regular compliance audits and monitoring

9.2 Transfer Destinations:

• United States: Cloud storage services, payment processing, customer support tools
• European Union: Data analytics services, marketing platforms
• Australia: Regional business operations and customer service
• Other Countries: As needed for business operations, always with appropriate protection measures

10. Data Retention Periods

We retain your personal information for different periods depending on the type of data and legal requirements:

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, potential dispute resolution
Order History & Purchase Records	7 years	Tax and accounting requirements, warranty claims
Payment Information	Maximum 18 months	Refund processing, chargeback disputes
Marketing Consent Records	3 months after withdrawal	Proof of consent compliance
Website Usage Logs	Up to 2 years	Security monitoring, analytics, fraud prevention
Customer Support Records	3 years	Service quality improvement, training purposes
CCTV Footage (In-store)	30 days	Security and safety purposes

Safe Data Disposal:

• Complete electronic deletion using secure methods that make data unrecoverable
• Physical destruction of paper records through certified shredding services
• Secure deletion of data from backup systems
• Maintenance of disposal records for audit purposes

11. Third-Party Links

Our website and mobile applications may contain links to third-party websites, social media platforms, or external services. Please be aware that:

• We are not responsible for the privacy practices of third-party websites
• These external sites have their own privacy policies and terms of use
• We encourage you to review the privacy policy of any website you visit
• Your interactions with third-party sites are governed by their policies, not ours
• We do not control or endorse the content or practices of linked sites

12. Policy Changes

12.1 Change Notification:

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will notify you through:

• Prominent notice on our website homepage
• Email notification to registered users (for significant changes)
• Pop-up notification when you log into your account
• Mobile app notifications (if applicable)
• Explicit consent requests for material changes affecting your rights

12.2 Checking for Changes:

• The most current version of this policy is always available on our website
• Check the 'Last Updated' date at the top of this page
• Continued use of our services after changes indicates acceptance
• If you disagree with changes, you may discontinue using our services

13. Contact Information

Response Commitment: We will respond to all privacy-related inquiries within 3 business days of receipt.

13.1 Complaints Process:

• Step 1: Contact us directly using the information above for resolution
• Step 2: If unsatisfied with our response, you may contact the New Zealand Privacy Commissioner:
  • Office of the Privacy Commissioner
  • Phone: 0800 803 909
  • Email: [email protected]
  • Website: privacy.org.nz

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal:

You can withdraw consent for marketing communications at any time through:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your online account
• Customer Support: Contact our team to opt out of all marketing communications
• Phone: Call +64 9 930 9123 during business hours

14.2 Account Deletion Process:

To permanently delete your account and associated data:

1. Log into your account and navigate to account settings
2. Select "Delete Account" and follow the prompts
3. Confirm your identity through email verification
4. Note: Some data may be retained for legal compliance (see retention periods above)
5. You will receive confirmation once the deletion is complete

15. Conclusion

At BurgerFuel, protecting your privacy is fundamental to our relationship with you. We are committed to maintaining the highest standards of data protection and continuously improving our privacy practices.

Your trust is essential to our business, and we take our responsibility to protect your personal information seriously. We believe in transparency, accountability, and putting you in control of your data.

If you have any questions about this Privacy Policy, our data practices, or your privacy rights, please don't hesitate to contact us. We're here to help and ensure you feel confident about how your information is handled.

Thank you for choosing BurgerFuel and for taking the time to understand our privacy practices. We look forward to continuing to serve you with delicious food and excellent service while protecting your privacy.