Privacy Policy

Last updated: 4 June 2026

The Hangi Pit Gold Coast (ABN 25 651 278 736) (we, us or our) understands that protecting your personal information is important. This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or collected by us, when you interact with us — including when you place an order or sign up for offers through our website at hangipit.com.au.

The information we collect

Personal information is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

The types of personal information we may collect about you include:

• your name and contact details, such as your email address and phone number;
• details of the orders you place, including the items ordered, any special instructions, your selected pickup time, and the amounts paid;
• payment information — card payments are processed securely by our payment provider, Stripe. We do not collect or store your full card number;
• information you provide when you sign up for our offers, promotions or mailing list (such as our free fried bread offer), or when you participate in surveys, feedback or competitions;
• your marketing and communication preferences; and
• if you use our website, information about your device and how you use the site, which may include your internet protocol (IP) address and browsing behaviour (including through cookies and analytics tools — see the “Cookies and analytics” section below).

Sensitive information is a sub-set of personal information that is given a higher level of protection (for example, information about health, religious beliefs or ethnic origin). We do not actively request sensitive information about you. If at any time we need to collect sensitive information, unless otherwise permitted by law, we will first obtain your consent and only use it as required or authorised by law.

How we collect personal information

We collect personal information in a variety of ways, including:

• when you provide it directly to us — for example, when you place an order, sign up for offers, contact us, or speak with us at the shop;
• when you complete a form on our website;
• when you use our website, including through cookies and our own website-usage analytics; and
• from our service providers, such as confirmation of a completed payment from our payment provider.

Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose your personal information for the following purposes:

• to process and fulfil your orders and arrange your pickup;
• to contact and communicate with you about your order, including order confirmations and letting you know when your order is ready to collect;
• to respond to your enquiries, feedback and complaints;
• for internal record keeping, administrative, invoicing and accounting purposes;
• for analytics, market research and business development, including to operate and improve our menu, website and service;
• for marketing, including to send you offers and promotions where you have asked to receive them (you can opt out at any time);
• to run promotions and competitions; and
• to comply with our legal obligations, or as otherwise required or authorised by law.

Our disclosures of personal information to third parties

We may disclose your personal information to third parties where it is necessary to run our business, where we have your consent, or where permitted by law. This means we may disclose personal information to:

• our personnel and contractors;
• IT service providers, data storage, web-hosting and server providers;
• our payment provider (Stripe) to process your payment;
• our email and communications provider (Resend) to send you order and service emails;
• marketing and analytics providers;
• our professional advisers, accountants and, if needed, our insurers;
• courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law; and
• any other third parties as required or permitted by law.

Overseas disclosure

We aim to store personal information in Australia. However, some of our service providers — including our payment provider, our email provider and our web-hosting provider — may store, transfer or access personal information outside Australia, including in the United States and in the European Union. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Your rights and controlling your personal information

Your choice: If you provide personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us; however, if you do not, it may affect our ability to take and fulfil your order.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. If you are providing personal information about somebody else, you confirm you have that person’s consent to do so.

Unsubscribe: To opt out of marketing communications, use the unsubscribe facility in the relevant message or contact us using the details below.

Access: You may request access to the personal information we hold about you. In some situations we may be legally permitted to withhold access; if so, we will tell you why and explain how you can complain about that decision.

Correction: If you believe any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us. We will take reasonable steps to correct it.

Complaints: If you wish to make a complaint, please contact us using the details below with full details. We will investigate and respond to you in writing. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Storage and security

We are committed to keeping the personal information we collect secure, and we take reasonable physical, electronic and managerial steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. While we are committed to security, we cannot guarantee the security of information transmitted to or by us over the internet, and any transmission is at your own risk.

Cookies and analytics

We may use cookies and similar technologies on our website. Cookies are small text files stored in your browser that help the website work and remember your preferences. By themselves, cookies do not tell us your name or contact details. You can block cookies by changing your browser settings, though some parts of the website may not work as well as a result.

We also record how our website is used, so we can see which parts of our menu people look at and where our ordering process is confusing. This includes the sections of the site you view and how long you spend on them, the menu items you open, the items you add to or remove from your cart, and the steps you complete or leave during checkout. It also includes general technical information such as the broad type of device you are using, the website or campaign you arrived from, and whether you scanned one of our in-store QR codes.

This website-usage information is collected by our own software and stored on our own systems. We do not send it to a third-party analytics provider, we do not use it for advertising, and we do not use it to track you across other websites. It is recorded against a randomly generated identifier for your visit and does not include your name, email address or phone number. If you go on to place an order, that random identifier is stored with your order so we can understand which parts of our website lead to a completed order.

We do not record video or replays of your screen, and we do not record anything you type into the checkout form.

How long we keep personal information

We keep personal information only for as long as we need it for the purposes described in this Privacy Policy, or for as long as we are required to keep it by law (for example, records we must retain for tax and business purposes).

The website-usage information described in the “Cookies and analytics” section above is kept for up to 12 months and is then deleted automatically.

When we no longer need personal information, and we are not required by law to keep it, we take reasonable steps to destroy it or to permanently de-identify it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time by publishing the updated version on our website. We recommend you check it regularly so you are aware of the current version.

Contact us

For any questions, requests or complaints about your personal information or this Privacy Policy, please contact us at: