Data Protection

Privacy Policy

Compliant with the Australian Privacy Principles (APPs) — Privacy Act 1988 (Cth)

1. Information We Collect

Cardamom Restaurant respects your privacy. We collect personal information necessary to provide food ordering, delivery, table reservations, and customer support:

  • Contact Details: Name, email address, phone number, and delivery street address.
  • Order & Booking Data: Purchased items, order history, table booking preferences, and special dietary requests.
  • Payment Information: Payments are processed via PCI-DSS compliant Stripe checkout. We do not store raw credit card numbers or CVVs on our servers.

2. How We Use Your Data

Your information is collected strictly for operational purposes:

  • Processing and fulfilling food orders and table reservations.
  • Sending transactional email and WhatsApp notifications (order confirmations, booking reminders).
  • Improving menu offerings and website security.

3. Third-Party Service Providers

We disclose necessary operational data to trusted infrastructure partners:

  • Stripe Payments (Payment Processing & Webhook Verification).
  • Supabase (Database Storage & Authentication).
  • Resend API (Transactional Email Dispatch).

4. Access & Correction Rights

Under the Privacy Act 1988, you have the right to request access to or correction of personal information held about you. To submit a privacy query, contact us at orders@cardamomrestaurant.com.au.