Privacy Policy

Last Updated: 15 June 2026

Grab & Bites ("we", "us", or "our") operates the Grab & Bites website and food ordering platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or place an order with us.

1. Information We Collect

Personal Information

When you place an order or interact with our website, we may collect:

• Full name (first and last name)
• Email address
• Phone number
• Delivery address
• Payment information (processed securely via Stripe — we do not store card details)
• Order history and preferences

Automatically Collected Information

• IP address and approximate location (to verify delivery area)
• Browser type and device information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your food orders
• Send order confirmations and status updates via email or SMS
• Communicate with you regarding your orders or enquiries
• Provide estimated delivery/pickup times
• Process payments securely
• Improve our website, menu offerings, and customer experience
• Send promotional offers and newsletters (only with your consent)
• Prevent fraud and ensure security of transactions

3. Payment Security

All payments are processed securely through Stripe, a PCI-DSS compliant payment gateway. We never store your full credit/debit card details on our servers. Payment information is encrypted and handled directly by Stripe's secure infrastructure.

4. Sharing Your Information

We do not sell, trade, or rent your personal information. We may share your data only with:

• Payment Processors: Stripe, for secure payment processing
• Delivery Partners: If applicable, to complete your delivery order
• Email Service Providers: To send transactional emails (order confirmations, updates)
• Legal Requirements: If required by law or to protect our rights

5. Cookies

We use cookies to:

• Keep your cart items saved during your browsing session
• Remember your preferences
• Analyse website traffic and usage patterns

You can disable cookies in your browser settings, but this may affect some website functionality.

6. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Order data is typically retained for 2 years for accounting and legal purposes.

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Privacy Commissioner

8. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: hello@grabandbites.co.nz
• Phone: +64 9 123 4567
• Address: New Zealand
• Contact Form: Click here