Privacy Policy

Privacy Policy

Effective: August 2024


We at Foodhub understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits our website www.food-hub.nz App or uses our Platform services (collectively our "Site"). We will only collect and use personal data in ways that are described in this Privacy Policy, and in a manner that is consistent with our obligations and your rights under the Privacy Act 2020 and the Privacy Principles (together, the “Privacy Law”).

Our Platform services include: (i) related mobile sites and mobile application(s); (ii) in-store kiosks and other online services, (iii) our use of the Third Party Point of Sale (Third Party POS) system to run aspects of our mobile application(s), and (iv) any other properties, programs, tools or technology now or in the future, in each case, that reference this Privacy Policy. Our Platform services also includes collectively the Site, Platform, online and support services Foodhub provides to its businesses ("Merchants") and individuals using our Platform ("Customers") in accordance with the respective agreements entered into between both parties, which reference this Privacy Policy.

This Privacy Policy does not cover or address the privacy practices of each Merchant's own business, including their authorized licensees and franchisees, who are available on our Site, or our privacy practices relating to the personal information of job applicants, employees, Delivery Partners, and other personnel who may be involved with this. If you see any undefined term in this Privacy Policy, it has the definition specified in our Terms of Use.

Please read this Privacy Policy carefully and ensure that you understand its contents. Your acceptance of our Privacy Policy is deemed to occur upon your first use of our Site. If you do not accept and agree with this Privacy Policy, you must stop using our Site immediately.


1. Definitions and Interpretations

In this Policy, the following terms shall have the following meanings:

Contact and profile information.

“Cookie” means a small text file placed on your computer or device by our Site when you visit certain parts of our Site and/or when you use certain features of our Site. Details of the Cookies used by our Site are set out in section 13 of this Privacy Policy, below;

“Personal Information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not (including notes, emails, recordings, photos and scans, whether in hard copy or electronic form). In this case, it means personal information you give to us via the use of our Site. This definition shall, where applicable, incorporate the definitions provided within the Privacy Law.

2. Information About Us

Our Site is operated by Foodhub, a trading name of Food Hub Limited, a company registered in the United Kingdom under company no:10619783 and whose registered office is at 55 Duke Street, Fenton, Stoke on Trent ST4 3NR. Food Hub Limited is an online service provider for the ordering of food and is part of the Food Hub Group Ltd with operations, through affiliated companies, in the UK, USA, Australia, and New Zealand.

3. What Does This Policy Cover?

This Privacy Policy applies only to your use of our Site, which may contain links to other websites. These links are included for your convenience and information purposes only.

We do not endorse or approve any of the products, services, or opinions found on the other website links provided on our Site. The website links are not managed, owned or affiliated with us, and we have no control over how your data is collected, stored or used by them. We advise you to check their privacy policy first before providing any data to them.

4. Your Rights 

4.1 This Privacy Policy explains how we use your personal information and an overview of your rights as data subject under the Privacy Law:

4.1.1 Purpose for collection of your personal information - we must only collect personal information if it is for a lawful purpose connected with our functions or activities, and the information is necessary for that purpose.

4.1.2 Source of personal information - personal information should be collected by us directly from you. The best source of information about a person is usually from the person themselves and they retain some control over their information.

4.1.3 Collection of information from you - we should be open about why we are collecting personal information from you and what we will do with it, so you can understand why.

4.1.4 Manner of collection – personal information must be collected by us in a way that is lawful and seen as fair and reasonable in the circumstances.

4.1.5 Storage and security of information – we must ensure there are safeguards in place that are reasonable in the circumstances to prevent loss, misuse or disclosure of your personal information.

4.1.6 Access to personal information - you have the right to ask for access to your own personal information held by us. You can only ask for information about yourself, unless you are acting on another person’s behalf and you have their written permission.

4.1.7 Correction of personal information - you have the right to ask us to correct information about you, if you think this is wrong.

4.1.8 Accuracy of personal information - we must check before using or disclosing personal information that it is accurate, up to date, complete, relevant and not misleading.

4.1.9 Retention of personal information - we should not keep personal information for longer than it is required for the purpose it may lawfully be used.

4.1.10 Limits on use of personal information - we can generally only use your personal information for the purpose it was collected, and there are limits using your personal information for different purposes.

4.1.11 Disclosure of personal information – we may generally only disclose personal information for the purpose for which it was originally collected or obtained. Sometimes other reasons for disclosure are allowed, such as disclosure for a directly related purpose, or if the data subject gives their permission for the disclosure.

4.1.12 Disclosure outside New Zealand - we must follow the rules around sending personal information to organisations or people outside New Zealand, as described in further detail in the Privacy Act 2020.

4.1.13 Unique identifiers - we have restrictions on assigning identifying numbers and other unique identifiers to individuals. We can only assign unique identifiers to people when it is necessary for our function to do so.

4.2 For further specific information about your rights and our obligations, please contact the office of the Privact Commissioner (https://www.privacy.org.nz/) or seek professional advice.

5. What Data Do We Collect?

5.1 When you use our Site, we may choose to collect some or all of the following personal and non-personal information (please also see section 13 on our use of Cookies and similar technologies):

5.1.1 name;

5.1.2 address;

5.1.3 contact information such as email addresses and telephone numbers;

5.1.4 delivery address if you place an order with us;

5.1.5 demographic information such as postcode, preferences, and interests;

5.1.6 IP address;

5.1.7 web browser type and version; and

5.1.8 your operating system.

5.2 Please note that personal information is collected when you place an order with us through our Site for the purpose of completing your purchase, contacting you if there is a problem with the order and arranging for the delivery of your goods, if required.

5.3 When you complete an order, we may ask you for payment details such as billing information or credit or debit card information. However, all payments made via our Site go through a third-party payment processor, such as PayPal or similar. We have no access to your payment data and we are only given very basic detail for identifying and resolving any problems.

5.4 When you complete an order, a separate contractual relationship is created between you and the payment processor under their terms and conditions. Third parties provide this service and we cannot be held liable for any errors, actions, omissions or incorrect charges that may be applied by them.

6. How Do We Use Your Data?

6.1 All personal information is processed and stored securely, for no longer than is necessary, in light of the purpose(s) for which it was first collected. We will always comply with our obligations and safeguard your rights under the Privacy Law. For more details on security see section 7, below.

6.2 Our use of your personal information will always have a lawful basis, either because it is necessary for the performance of our contract with you (e.g. by placing an order with us), because you have consented to our use of your personal information (e.g. by subscribing to SMS and emails or providing consent), or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:

6.2.1 Providing and managing your access to our Site;

6.2.2 Personalising and tailoring your experience on our Site;

6.2.3 Supplying our goods and services to you (please note that we require your personal data in order to enter into a contract with you);

6.2.4 Replying to emails from you;

6.2.5 Supplying you with SMS and emails that you have opted into (you may unsubscribe using the link at the bottom of each email and SMS or you may opt-out at any time by emailing us directly [email protected]); and

6.2.6 Analysing your use of our Site to enable us to continually improve our Site and your user experience.

6.3 With your permission and/or if permitted by law, we may also use your data for marketing purposes which may include contacting you by email and SMS with information, news and offers on our services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the Privacy Law

6.4 Third parties whose content appears on our Site may use third party Cookies, as detailed below in section 13. Please refer to this section for more information on controlling Cookies. Please note that we do not control the activities of such third parties, nor the data they collect and use, and we advise you to check the privacy policies of any such third parties.

6.5 You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it (you may unsubscribe using the link at the bottom of each email and SMS or you may opt-out at any time by emailing us directly at [email protected]).

6.6 We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.

7. How Do We Store Your Data?

7.1 We only keep your personal data for as long as we need to in order to use it as described above in section 6, and/or for as long as we have your permission to keep it.

7.2 Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected through our Site.

8. Do We Share Your Data?

8.1 As a part of the services, we provide to you, we may also sometimes contract with other third parties to supply goods and services on our behalf. These may include, payment processors, search engine facilities and sub-contractors. In some cases, these third parties may require access to some or all of your data to perform their services. Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the Privacy Law.

8.2 We may compile statistics about the use of our Site including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the Privacy Law.

8.3 We may sometimes use third party data processors that are located in overseas territories. Where we are required to transfer any personal information outside of New Zealand to an overseas territory to meet our purpose, we will ensure your data is secure, safe and we comply with the Privacy Law for the transfer of this information.

8.4 In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority. We will only provide your data where we are legally complying with our obligations to do so.

9. What Happens If Our Business Changes Hands?

9.1 We may, from time to time, expand or reduce our business, which may involve the sale and/or the transfer of control of all or part of our business. Any personal information that you have provided relevant to the part of our business being expanded or reduced, may be transferred to the new owner or newly controlling party. They will, under the terms of this Privacy Policy, only be permitted to use that data for the same purposes as we originally collected it.

9.2 If any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.

10. How Can You Control Your Data?

10.1 In addition to your rights under the Privacy Law, set out in section 4, when you submit personal data to us via email or via our Site, you may be given options to restrict our use of your data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving SMS and emails from us which you may do by unsubscribing using the links provided in our SMS and emails, at the point of providing your details and by contacting us at [email protected]).

11. Your Right to Withhold Information

11.1 There are areas of our Site you may use without providing any personal information to us. However, some areas of our Site may be restricted without this and not all features or functions will be made available to you, without the submission or the collection of certain data, including your personal information.

11.2 By default, most internet browsers accept Cookies but this can be customised and you have the option to restrict our use of Cookies by disabling these in your internet browser or deleting these from your device at any time. However, deleting or disabling Cookies may have an effect on the performance and efficiency of your device accessing our Site. For further details, please consult the help menu in your internet browser or consult the documentation that came with your device.

12. How Can You Access Your Data?

12.1 You have the right to submit a DSAR to us (data subject access request) and obtain a copy of your personal information held in our records (where such data is held). DSAR requests for personal information should be submitted by email to [email protected].

12.2 Any DSAR requests received for personal information held by us, will be acknowledged and processed within a reasonable period after the request is made. In most cases this will not exceed 30 calendar days, unless the volume of personal information held is large or complex. We will advise you if this is to exceed 30 calendar days.

13. Our Use of Cookies

13.1 Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our Site and to provide and improve our services. All Cookies used on our Site are used in accordance with current Privacy Law.

13.2 Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies, you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies but certain features of our Site may not function fully or as intended.

13.3 Certain features of our Site depend on Cookies to function. The Privacy Law deems these Cookies to be "strictly necessary". Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser's settings as detailed below, but again our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing these Cookies to function.

13.4 Our Site uses Google Analytics. Website analytics refers to a set of tools to collect and analyse anonymous usage information, enabling us to better understand how our Site is used and to improve the services offered through it. You do not have to allow the use these Cookies, however they do not pose any risk to your privacy or your safe use of our Site. These Cookies do enable us to continually improve our Site, making it a better, more efficient and more of a useful experience for you. Google's privacy policy is available at: https://www.google.com/policies/privacy/

13.5 In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser, please see section 11.2 for more details. We recommend you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

14. Complaints

14.1 If you have any cause for query or complaint about our use of your personal information, please contact us by email at [email protected] or by logging into your account through our Site and using the Live Chat to report this.

14.2 We will always do our best to resolve any problems you have as quickly as we can. If we are unable to help or you are not happy with our response, then you also have the right to lodge a complaint with the office of the Privacy Commissioner (https://www.privacy.org.nz/) or seek professional advice.

15. Contacting Us and Privacy Policy Changes

15.1 If you have any questions about our Site or this Privacy Policy, please contact us by email at [email protected] or by logging into your account through our Site and using the Live Chat to report your query. General queries (not related to this Privacy Policy) can be send to [email protected]. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you (see section 12, above).

15.2 We may change this Privacy Policy from time to time (for example, if there are changes to the Privacy Law). Any changes will be immediately posted on our Site, and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our Site following the alterations. We recommend that you check this page regularly to keep up to date.