Privacy policy

Information we collect

When you order we collect your name, email address, phone number, selected food, pickup time, kitchen notes, promotion use, payment status, and order history. Stripe handles payment details; Snax does not receive or store your full card number.

When you submit a promotional opt-in form we collect your email, consent time, the answers you choose to provide, the source page, and the unique coupon issued to you. We record coupon reservation and redemption details so the same code cannot be used twice online or in the restaurant.

When you play Snax Arcade we record the campaign, anonymous session, tap inputs, scores, attempts, referral information, and reward shown. If you claim a reward, we also collect your email, optional mobile number, verification status, and your separate marketing choice.

When you browse snax.co.nz, Google Analytics records which pages you view, roughly where you are, your device and browser, and how you found us. It uses cookies and the information your browser sends, such as its IP address. We do not send it your name, email address, phone number, or payment details, and it is switched off on staff, reward, feedback, and unsubscribe pages. When your order is confirmed we send it only the order number, total, GST, and the items ordered, so we can see which visits lead to orders. You can opt out with Google's browser add-on.

When you pay for an order on snax.co.nz, we may send Meta (Facebook and Instagram) a purchase event containing one-way encrypted (hashed) versions of your name, email address, and phone number, with the order number, total, and items, so we can measure how our advertising leads to orders. The mobile app does not send this.

If you enable app notifications, we store an Expo push token linked to the relevant guest order. The token is used only for operational order updates. The app stores its cart, remembered contact details, and guest order references on your device.

How we use and share it

We use order information to validate availability, process payment, prepare and print kitchen tickets, send confirmations and status updates, prevent abuse, provide support, handle refunds, and maintain business records. Service providers currently include Stripe for payments, Plunk for transactional email, Expo for optional push delivery, Google for website analytics, Meta for measuring our advertising, and our hosting providers.

Promotional opt-in details are used to deliver the requested coupon, maintain the Snax marketing list, enforce its conditions, and let authorised staff verify dine-in redemption. Every promotional email includes an unsubscribe link.

Arcade data is used to validate scores, limit attempts, select and issue rewards, prevent duplicate redemption, and measure campaign performance. Marketing messages are sent only when you select the separate opt-in checkbox.

We do not sell personal information. The mobile app does not include advertising, cross-app tracking, session replay, or third-party product analytics, and the website uses no session replay.

Retention, security, and your choices

Operational and accounting records are retained for as long as they are reasonably needed for those purposes. Access to guest orders in the app is protected by a separate random token for each order. Push subscriptions can be disabled in device settings or in the app.

You may ask to access or correct personal information we hold about you, or ask a question about this policy, by emailing sales@snax.co.nz. We may need to verify your identity before disclosing order data.

Contact

Snax, Shop 8, 8 Commerce Street, Auckland CBD, Auckland 1010, New Zealand. Phone +64 9 300 3050.