Privacy Policy

1. Our Commitment

Matcha Horikku is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, store and disclose your personal information.

2. Information We Collect

We may collect the following personal information:

• Identity & contact: name, email address, phone number, delivery address
• Account information: username, encrypted password, Google account ID (if you sign in with Google)
• Order information: items purchased, payment method, order status and history
• Usage data: pages visited, browser type, IP address (collected automatically via server logs)
• Feedback & communications: messages sent through our contact form or catering enquiry form

We do not store full credit card numbers or PayPal credentials on our servers.

3. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders
• Send order confirmation and shipping notifications
• Respond to your enquiries and catering bookings
• Manage your account and preferences
• Improve our website, products, and services
• Comply with our legal obligations

We will only send you marketing emails if you have opted in. You can unsubscribe at any time.

4. Sharing Your Information

We do not sell your personal information. We may share it with trusted third parties only where necessary:

• Payment processors (PayPal) to complete transactions
• Email service providers to send transactional emails
• Delivery providers to fulfil your order
• Cloud hosting providers (Railway, Cloudflare) who store our data securely

All third parties are required to handle your data in accordance with applicable privacy laws.

5. Cookies & Tracking

Our website uses cookies and session storage to maintain your login session and shopping cart. We do not currently use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect the functionality of the site.

6. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Measures include encrypted passwords (bcrypt), HTTPS, secure HttpOnly cookies, and restricted database access. However, no method of internet transmission is completely secure.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. You may request deletion of your account and associated data at any time.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data where it is no longer needed
• Complain about a breach of your privacy

To exercise these rights, contact us at hello@matchahorikku.com. We will respond within 30 days.

9. Complaints

If you believe we have breached your privacy, please contact us first. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. Continued use of our website constitutes acceptance of the updated policy.