Skip to content Skip to footer

Privacy Policy

Close

Effective Date: 15 May 2025

Chilli Everest (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website (https://chillieverest.com.au) or use our services.

This policy complies with:

  • The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)

  • The General Data Protection Regulation (EU) 2016/679 (GDPR)

1. Data Controller

Chilli Everest operates the following locations, each of which can respond to privacy-related inquiries:

2. What Information We Collect

We may collect and hold:

  • Identity Data: Name, date of birth (if applicable)

  • Contact Data: Email address, phone number, address

  • Order Data: Food order preferences, delivery instructions

  • Technical Data: IP address, browser type, time zone, device identifiers

  • Usage Data: Website browsing and interaction behavior

  • Marketing Preferences: Communication preferences

We do not collect sensitive information (e.g. health, race) unless you provide it voluntarily and it is necessary for service provision (e.g., food allergies).

3. How We Collect Your Data

Your data is collected via:

  • Direct interactions: Orders, forms, feedback, newsletter signups

  • Automated technologies: Cookies, analytics tools

  • Third parties: Delivery platforms (Uber Eats, DoorDash, Menulog), payment providers, analytics partners (e.g., Google Analytics)

4. Why We Collect It (Purposes & Legal Bases)

We use your data to:

  • Process food orders and manage deliveries

  • Respond to customer service requests

  • Improve website functionality and customer experience

  • Send marketing communications with your consent

  • Meet legal and compliance obligations

Legal Bases under GDPR:

  • Consent (Art. 6(1)(a))

  • Performance of contract (Art. 6(1)(b))

  • Legitimate interest (Art. 6(1)(f))

  • Legal obligation (Art. 6(1)(c))

5. Disclosure of Your Data

We may disclose your information to:

  • IT and service providers

  • Delivery partners and payment processors

  • Analytics and marketing platforms

  • Regulatory authorities, when required

All third parties must adhere to strict confidentiality and data protection obligations.

6. Data Retention

We only retain your personal data for as long as necessary to:

  • Fulfill the purposes outlined above

  • Satisfy legal, accounting, and tax requirements

Standard retention is up to 6 years after your last interaction, unless otherwise required.

7. Data Security

We implement reasonable safeguards to protect your data, including:

  • SSL encryption

  • Firewalls and access control systems

  • Staff confidentiality agreements

  • Regular audits and software updates

8. International Transfers

If your personal data is transferred outside Australia or the European Economic Area (EEA), we ensure it is protected via:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions by the European Commission

  • Other legally approved mechanisms

9. Your Rights

Under GDPR and the Privacy Act, you have the right to:

  • Access your personal information

  • Correct inaccuracies

  • Request deletion

  • Restrict or object to processing

  • Withdraw consent

  • Request data portability

To exercise these rights, contact the relevant branch listed above.

10. Children’s Privacy

We do not knowingly collect personal information from individuals under 18 years of age without verifiable parental or guardian consent.

11. Cookies and Analytics

We use cookies and similar technologies for:

  • Website functionality

  • Analytics (e.g., Google Analytics)

  • Personalization

You can manage cookies through your browser settings.

12. Complaints and Regulatory Oversight

If you have a privacy-related complaint, please contact us first so we can address your concerns.

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the law, our data practices, or technology. Updates will be posted on our website and dated.

Last updated: 15 May 2025

14. Contact Us

For all privacy-related questions or to exercise your rights, please contact us at:

Melbourne Central
360 Elizabeth St, Melbourne VIC 3000
Email: chillieverest360@gmail.com
Phone: (03) 9041 1755

Collins Street
595 Collins St, Melbourne VIC 3000
Email: chillieverest595collins@gmail.com
Phone: (03) 9191 6780

Mernda
Shop 1-2/1435 Plenty Rd, Mernda VIC 3754
Email: cemernda1435@gmail.com
Phone: 0451 010 584