Privacy

What we collect

When you order online:

• your name, email and mobile number, the shop you collect from and your pickup time;
• what you ordered, and any note you add;
• your address, only if you choose delivery;
• card payments are handled by Stripe. We never see or keep your full card number.

Only if you choose to give them:

• your birthday (day and month, no year), so we can send you a birthday treat;
• whether you want our emails or texts. We record your answer, the exact words you saw and the time, whether you said yes or no;
• a code you enter at checkout;
• an account, if you sign in with an emailed link or with Google. It keeps your order history and any Dulce Dollars;
• your email, if you join our list with the sign-up form;
• the same details on a form at our counter, if you fill one in.

When you visit the website:

• how you found us, if you arrived from a tagged link (for example our Google listing, one of our emails, or the card at the counter). Your browser keeps this for 30 days, and it is saved with your order;
• how the site is used (pages viewed, buttons tapped, device type and rough location), through Google Analytics and Vercel Analytics.

How we use it

• to make your order, have it ready at the right shop, and send you its confirmation and reminders. These order messages never carry advertising;
• to answer your questions, and to look after your account and Dulce Dollars;
• to see what people order and how the site is used, so we can improve both;
• to send you marketing, only if you said yes (see below).

Emails and texts

We only send marketing to people who said yes: the tick boxes at checkout start empty, and email and texts are separate choices. If you said yes, you may get a welcome email, a thank-you after your first order, a note if we haven't seen you in a while, our seasonal specials, a birthday email with a one-time code if you gave us your birthday, and, after you collect an order, a request to review us on Google. Texts are only sent between 9 am and 8 pm.

Every email has an unsubscribe link, and every text has an opt-out link (you can also reply STOP). We act on it straight away. We keep a record of your answer so we never message you after you said no.

Who we share it with

We never sell your details, and we never share our customer list with other businesses. We use these services to run the website and our ordering system, and they handle your details only to do that work for us:

• Stripe, for card payments;
• Resend, to send our emails, and Twilio, to send our texts;
• Vercel and Supabase, which host our website, ordering system and database;
• Google, for Google Analytics, and for signing in if you choose Google;
• a courier, only if you choose delivery, and only what they need to deliver it.

Some of these services store or process data outside Australia, for example in the United States and Asia.

Cookies and your browser

Your browser keeps your cart, your chosen shop, how you found us (for 30 days) and your last order, so the site works as you'd expect. Signing in sets a cookie that keeps you signed in. Google Analytics sets its own cookies; Vercel Analytics doesn't use cookies. You can clear all of this in your browser settings, and ordering still works.

How long we keep it

We keep order records for as long as tax law requires (usually five years). We keep the record of your marketing choice for as long as we have your details, so we can show what you agreed to and respect a no.

Your choices

You can ask to see the details we hold about you, correct them, or have them deleted (apart from records we must keep by law). Email [email protected] or call (03) 9307 7299, and we'll reply within 30 days.

If you're unhappy with how we handled your details, tell us first and we'll put it right. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change how we use your details, we'll update this page and the date at the top. Questions? Get in touch.