Privacy Policy

1. Purpose and scope

This Privacy Policy explains how AFROFUSIONPLATE PTY LTD (AfroFusionPlate, we, us or our) handles personal information when you use our website, create or manage an account, order meals, subscribe to a meal plan, make a catering or Academy enquiry or booking, use NDIS-related services, contact us, or otherwise interact with us.

We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable privacy, health, disability, consumer and communications laws.

2. Information we may collect

• Identity and contact information, including name, email address, mobile number and delivery or billing address.

• Account information, login identifiers, preferences, subscription status and account activity.

• Order and transaction information, including meal selections, delivery instructions, invoices, payment status and Stripe payment references or tokens. We do not intentionally store full payment-card numbers.

• Dietary, allergen, food preference and nutritional information you choose to provide.

• NDIS-related and other sensitive information where relevant, including disability, health, support needs, goals, plan or funding details, support coordinator or plan manager details, sensory requirements and information needed to provide appropriate services.

• Catering and Academy booking information, including event details, participant requirements, emergency or guardian contact information where relevant.

• Communications information, including enquiries, complaints, feedback, marketing preferences, SMS/email delivery records and verification status.

• Technical information, such as device/browser information, IP address, security logs, cookie data and website usage information where collected by our systems or authorised providers.

3. How we collect information

We generally collect information directly from you through website forms, account registration, checkout, subscriptions, bookings, phone or email contact, NDIS service interactions and support enquiries. We may also receive information from a person authorised to act for you, such as a nominee, guardian, support coordinator, plan manager, family member or authorised representative.

We may receive limited technical, payment, communication, delivery or service information from our authorised providers when required to operate the service.

4. Sensitive information and NDIS information

We only collect sensitive information where it is reasonably necessary for our functions or activities and where we have consent or another lawful basis. Sensitive information may include health or disability information, dietary or allergen information and information about support needs.

Where practical, we will explain why sensitive information is needed. You may choose not to provide information that is optional, but we may be unable to safely or appropriately provide a particular meal, Academy activity, NDIS support or service without necessary information.

5. How we use information

• to create and manage accounts, subscriptions and bookings;

• to process orders and payments, arrange delivery and provide receipts or account notices;

• to provide meal, catering, Academy and NDIS-related services;

• to tailor services to dietary, allergen, accessibility, learning or support needs where appropriate;

• to verify phone numbers, issue one-time passcodes (OTPs), protect accounts and prevent misuse or fraud;

• to send delivery-status, service, payment, security and other transactional communications;

• to provide customer support, handle feedback and resolve complaints;

• to improve website functionality, service quality, safety and customer experience;

• to meet legal, regulatory, food-safety, disability-service, accounting, recordkeeping and risk-management obligations;

• to send marketing communications where permitted and in accordance with your preferences.

6. Service providers and disclosure

We do not sell personal information. We may disclose only the information reasonably necessary to providers that help us operate AfroFusionPlate, subject to appropriate contractual, technical or legal safeguards.

• Stripe: payment processing and payment-security functions.

• Ozibus: email delivery, SMS delivery-status communications, phone-number verification and OTP/security messaging; and marketing email where you have not opted out.

• Makeitdomain: website hosting, platform and related website services.

• Namecheap: underlying hosting or infrastructure supporting the website arrangement.

• Be Cool Refrigerated Couriers: refrigerated/frozen delivery and logistics fulfilment, including delivery address and safe-place instructions, route/status information and other details reasonably necessary to complete delivery.

• professional advisers and service providers: legal, accounting, insurance, technology, security or compliance support where required.

We may also disclose information where required or authorised by law, to respond to lawful requests, to protect safety or legal rights, or in connection with a genuine business restructure or transfer subject to applicable privacy obligations.

7. Overseas processing and cross-border disclosures

Some technology, payment, communications or infrastructure providers may store or process information outside Australia. The countries involved can change according to provider infrastructure. Where the Privacy Act requires it, we take reasonable steps in relation to cross-border disclosures and remain accountable as required by law. You may contact us for current information about material overseas processing arrangements known to us.

8. Marketing and communications preferences

Marketing email is optional. You can unsubscribe at any time using the unsubscribe facility in the message or by contacting us. We will action valid electronic unsubscribe requests within the timeframe required by Australian spam laws.

Unsubscribing from marketing does not prevent us from sending non-marketing communications that are reasonably necessary for an order, subscription, delivery, account, security, phone verification, OTP, NDIS service, booking or legal obligation.

9. Cookies and website technology

We may use cookies and similar technologies to operate sessions, accounts, carts, preferences and security features. If optional analytics, performance or advertising technologies are enabled, they will be handled in accordance with our Cookie & Tracking Technologies Policy and applicable consent requirements.

10. Security

We take reasonable technical, organisational and contractual steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet-based service can be guaranteed to be completely secure, so customers should also protect passwords, verification codes and devices.

11. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide services, resolve disputes, maintain lawful records, meet NDIS, tax, accounting, food-safety or other regulatory requirements, or protect legitimate legal interests. When information is no longer required, we take reasonable steps to delete or de-identify it where lawful and practicable.

12. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before responding and may refuse or limit a request where permitted by law, in which case we will explain the reason where required.

13. Privacy complaints

If you have a privacy concern, contact us at info@afrofusionplate.com.au or 0480 737 709. We will assess the matter and respond within a reasonable period. If you are not satisfied, you may have the right to contact the Office of the Australian Information Commissioner (OAIC) or another relevant regulator.

14. Changes to this policy

We may update this policy when our services, providers, technology or legal obligations change. The current version will be published on our website with its effective or last-updated date. Material changes may also be communicated through the website, email or account notices where appropriate.