MANDY’S BEVERAGE CO PTY LTD (“Mandy’s”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you access our website and use our online ordering services.

This policy complies with the Australian Privacy Act 1988.

2.1 Personal Information

We may collect the following personal information:

• Name
• Phone number
• Email address
• Delivery address (if applicable)
• Payment details (processed securely via third-party providers)

2.2 Order Information

• Order details (items purchased, preferences)
• Transaction amount
• Promotion usage (e.g., discounts, loyalty rewards)

2.3 Technical Information

• IP address
• Browser type
• Device information
• Cookies and usage data

2.4 Mobile App Data

When you use our iOS or Android app, we additionally collect:

• Push notification token (issued by Apple APNs or Google FCM via Expo) — used solely to notify you when your order is ready for pickup
• App version and platform (iOS or Android) — for support and diagnostics
• Anonymous sign-in identifiers from Apple Sign In or Google Sign In, when you choose those login methods

We do not collect precise location, contacts, photos, or any data not listed above. The app does not use third-party advertising or analytics SDKs.

We use your information to:

• Process and fulfill orders
• Provide pickup or delivery services
• Manage customer support
• Operate loyalty and promotional programs
• Send marketing communications (if opted-in)
• Improve our website and services

By registering or placing an order, you may receive promotional messages (e.g., offers, discounts). You can opt out at any time by following the unsubscribe instructions or contacting us.

We do not sell your personal information. We share only the minimum data required with the following trusted service providers:

• Square, Inc. (payments, catalog, order management, loyalty stars) — receives your name, phone number, order details, and payment information. See Square’s Privacy Notice.
• Supabase, Inc. (authentication, account database) — stores your phone number, name, and account metadata. See Supabase Privacy Policy.
• Expo / Apple APNs / Google FCM(push notification delivery) — receives your anonymous device push token and the notification payload (e.g., “Your order is ready”).
• Apple Inc. and Google LLC — if you choose Sign in with Apple or Sign in with Google, they provide us with an anonymous user identifier and, if you consent, your name.
• Twilio Inc. (SMS delivery for one-time login codes, via Supabase) — receives your phone number and the OTP message body.
• Vercel Inc. (web hosting) — processes incoming web requests; does not retain personal data beyond standard server logs.

All third parties are contractually or legally required to comply with privacy obligations and use your data only for the services they provide to us.

We take reasonable steps to protect your information, including:

• Secure encryption (SSL)
• Trusted payment gateways
• Restricted internal access

We use cookies to:

• Enhance user experience
• Remember preferences
• Analyse website traffic

You may disable cookies through your browser settings.

You have the right to:

• Request access to your personal information
• Request corrections to inaccurate data

Please contact us using the details below.

You may delete your Mandy’s account at any time. This permanently removes:

• Your phone number, name, and login credentials
• Your device push notification tokens
• Your linked Square customer record (loyalty stars balance, promotion eligibility)

How to delete:

• In the mobile app:open the Account tab, scroll to the bottom, and tap “Delete Account”. Confirm the prompt. Your account is deleted immediately.
• Alternatively: email or call us using the contact details below and we will delete your account within 7 days.

Past order records (including amounts and items) are retained in anonymised form for up to 7 years to comply with Australian tax and accounting law. These records no longer contain your name, phone number, or any information that can identify you.

MANDY’S BEVERAGE CO PTY LTD

Address: 34 Davenport St, Southport QLD 4215

Phone: 0404 978 238

By accessing our website or using our online ordering services, you agree to be bound by these Terms of Service.

• All orders must be paid online or in accordance with in-store payment policies
• Once an order is confirmed, it may not be modified or cancelled
• We reserve the right to cancel orders due to system errors, pricing issues, or product unavailability, with a full refund provided

3.1 First Order 30% Off

• Available to first-time registered users only
• Limited to one use per account
• Cannot be combined with other promotions or discounts
• Mandy’s reserves the right to cancel orders or accounts suspected of abusing this promotion

3.2 Loyalty Program (Buy 9 Get 1 Free)

We offer a loyalty reward program as follows:

• Each purchased drink counts toward your loyalty progress
• After purchasing 9 drinks, you are eligible to redeem 1 free drink

Conditions:

• The free drink will be of equal or lesser value than the purchased items or as determined by Mandy’s
• Not redeemable for cash
• Non-transferable
• Cannot be used in conjunction with other promotions
• Refunded or cancelled orders will not count toward loyalty progress

You are responsible for maintaining the confidentiality and accuracy of your account information. We reserve the right to suspend or terminate accounts in case of suspicious or fraudulent activity.

• Products are subject to availability
• Menu images are for illustrative purposes only
• Actual products may vary slightly

• Orders that have already been prepared are generally non-refundable
• If there is an issue with your order, please contact us promptly
• We may offer a remake, store credit, or compensation at our discretion

To the maximum extent permitted by law, Mandy’s shall not be liable for:

• Indirect or consequential losses
• Delivery delays
• Issues caused by third-party services

We reserve the right to update these Terms of Service at any time. Changes will be posted on our website.

These Terms are governed by the laws of Australia.

MANDY’S BEVERAGE CO PTY LTD

Address: 34 Davenport St, Southport QLD 4215

Phone: 0404 978 238