Privacy Policy

Who we are

Harry’s Cafe (“we”, “us”, “our”) is a café at 73 Dohertys Rd, Laverton North VIC 3026, run by 73 Dohertys Road Pty Ltd (ABN 80 693 758 753). This app lets you order ahead and collect from the counter. There are no accounts and no sign-up — you order as a guest.

What we collect

• Your name — asked on your first order so we can call your order out.
• Your mobile number — asked on your first order. We use it to text you once when your order is ready, and to contact you about that order. No marketing texts.
• Your email (optional) — only if you type it in, so we can email your receipt and a “ready” note.
• Your order history — what you ordered, when, the pickup time, how much you paid, any note you added (for example an allergy), and which QR code or link brought you to the app.
• Loyalty stamps — counted automatically from your orders.
• Technical data — like any website, our hosting providers log your IP address and browser details. We use these to keep the app running and to stop abuse.

What we don’t collect

• We never see your card details — they go straight to Square.
• We don’t track your location.
• We don’t sell your details or share them with anyone for marketing.

How we use it

• To make, charge for and hand over your order.
• To text you once when it’s ready, and to contact you if something’s wrong with it.
• To email your receipt, if you gave us an email.
• To count your loyalty stamps.
• To see which QR codes and steps people use, so we can make ordering faster.

We don’t send marketing texts or emails.

Who we share it with

We use these services to run the app. Each one only gets what it needs for its job:

• Square — takes your card payment and receives your order, name, mobile and any note, which print on the kitchen ticket.
• ClickSend — sends the one “your order’s ready” text to your mobile.
• Resend — sends our emails, if you gave us an email address.
• Render — runs our ordering server and the database that holds your details and orders, in Singapore.
• Vercel — hosts this website.
• PostHog — anonymous usage analytics: which screens and ordering steps are used. No name, phone, email, card details or cookies — just a random ID stored on your device. We honour your browser’s Do Not Track and Global Privacy Control settings.
• Sentry — when something breaks, a technical error report may be sent to Sentry so we can fix it.

Some of this information is stored or processed outside Australia: our database is in Singapore, PostHog stores data in the United States or the European Union, and Vercel, Resend and Sentry are United States companies.

Cookies and storage on your device

• Session cookies — when you check out we start a guest session on this device so you can track your order. Two of these cookies can’t be read by page scripts (HttpOnly), plus one small marker that tells the app you have a session.
• Local storage — your bag and note, your recent orders (for “The usual?”), which QR code you scanned (cleared after a few hours), your pickup-time choice, whether you dismissed the “add to home screen” tip, and the random analytics ID.

Clearing your browser data removes all of this from your device.

How long we keep it

We keep your details and order history while you keep ordering with us. Order and payment records are part of our business and tax records. We don’t delete anything automatically — if you want your details removed, ask us (below).

Your rights (Privacy Act 1988)

• Access and correction — email info.harryscafe@gmail.com with the name and mobile you ordered with, and we’ll tell you what we hold or fix it. We may ask about one of your orders to check it’s you.
• Deletion — email the same address and we’ll delete your name, mobile and email from our system. We may still need to keep the order and payment records themselves for tax purposes, and copies already in Square’s records of past sales may remain.
• Complaints — if you’re unhappy with how we handle your information, contact us first. You can also complain to the Office of the Australian Information Commissioner (OAIC).

Security

There are no passwords. Session cookies are HttpOnly, so page scripts can’t read them. All connections use HTTPS. Card payments are handled by Square and never touch our servers.

Contact

Questions about your privacy? Email us at info.harryscafe@gmail.com or call us on 0458 952 929.