Privacy Policy

• Contact details — name, email, phone, delivery/pickup address.
• Order details — items, totals, fulfilment choice, notes.
• Payment details — handled directly by our payment processor (Stripe); we never see or store your full card number.
• Account info — if you sign in, your authentication details and login history.
• Site usage — basic analytics such as pages viewed and approximate location (city level), to improve the site.

• To process and fulfil your orders, including pickup and delivery.
• To send order status updates (email/SMS) and receipts.
• To apply loyalty tiers and promo codes you choose to use.
• To investigate fraud, abuse and payment disputes.
• To comply with our legal obligations (tax, consumer law).
• To improve the site and our product range.

We share the minimum needed with trusted service providers:

• Payments — Stripe (card processing).
• Hosting & backend — Lovable Cloud (database, auth, storage).
• Email/SMS notifications — for order status updates.
• Analytics — aggregate usage statistics only.

We don't sell your personal information. We may disclose information where required by law or to protect our legal rights.

We use a small number of cookies and similar storage to keep you signed in, remember your cart, and measure site usage. See our Cookie policy for the full list and how to control them.

• Order records — kept for at least 7 years to meet Australian tax requirements.
• Account data — kept while your account is active and for a reasonable period after closure.
• Marketing preferences — kept until you opt out.

You can:

• request access to the personal information we hold about you,
• ask us to correct information that's wrong or out of date,
• ask us to delete your account and associated data, subject to legal record-keeping obligations,
• opt out of marketing emails at any time.

Email hello@indiatown.lovable.app with "Privacy" in the subject. If we can't resolve a concern, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use industry-standard measures to protect your information, including HTTPS, encrypted databases at our hosting provider, and role-based access controls for staff. No system is 100% secure — please use a strong, unique password for your account.

The site isn't directed at children under 16. If you believe a child has given us personal information, please contact us and we'll delete it.

We may update this policy from time to time. The "Last updated" date at the top of this page tells you when it last changed.