OrderGrid.

Legal

Privacy Policy

Last updated 2026-06-03

This is a plain-English draft for transparency. It is being reviewed by a qualified Australian lawyer and is not yet final legal advice.

OrderGrid, an OOHAi company ("OrderGrid", "we", "us") respects your privacy. This policy explains what personal information we collect, why, how we hold it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Who this covers

Two kinds of people interact with OrderGrid: operators (the venues who subscribe to our platform) and their customers (diners who order through an operator's storefront or phone line). This policy describes how we, as the platform provider, handle personal information for both.

What we collect

From operators: business and contact details, login credentials, billing information, and the menu, sales and operational data you enter or upload.

From diners: the details needed to place and fulfil an order: typically name, contact number or email, order contents, and (for delivery) an address. Card payments are processed by our payment providers; we do not store full card numbers.

Automatically: basic device and usage information, and cookies as described in our Cookie Policy.

Why we collect it

To provide the platform: take and fulfil orders, run the point of sale and kitchen, manage menus and stock, process billing, and provide support.

To improve and secure the service, and to send service and (where you have consented) marketing communications. Marketing consent is handled per the Spam Act 2003 (Cth) and you can opt out at any time.

How we hold and protect it

Your data is stored in Australia on Amazon Web Services (ap-southeast-2, Sydney), encrypted in transit and at rest, and isolated per tenant. Access is restricted to authorised personnel on a need-to-know basis.

Who we share it with

We share personal information only as needed to run the service (for example with payment processors, SMS/email delivery providers, and cloud hosting) under contracts that require them to protect it. We do not sell your personal information.

An operator is the controller of their own customers' data; we process it on their behalf.

Your rights

You may request access to, or correction of, the personal information we hold about you, and you may export your data. To make a request, or to raise a privacy concern, contact us at privacy@ordergrid.com.au. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (OAIC).

Contact

Privacy enquiries: privacy@ordergrid.com.au.