Privacy Policy

DineMode is a New Zealand-based online ordering and point-of-sale platform. You can contact our privacy team at dinemode@gmail.com.

• Account details — name, email, phone number, password hash, and (for restaurant staff) role, PIN and shift information.
• Order details — items ordered, notes, dine-in / takeaway / delivery mode, table number, delivery address, and order history.
• Payment details — card brand and last four digits, and a Stripe payment reference. We do not store full card numbers or CVV; those are handled directly by Stripe.
• Device and usage data — device type, operating system, app version, push notification token, IP address, approximate location (only if you allow it), and basic analytics about how features are used.
• Communications — messages you send to us, and email/SMS delivery status for order confirmations and receipts.

• Take, process, and deliver your orders and bookings.
• Process payments and issue receipts and refunds.
• Send transactional emails and push notifications (order status, receipts).
• Provide the Partner app’s POS, kitchen display, waiter and reporting features.
• Prevent fraud, secure accounts, and comply with legal obligations.
• Improve the service through aggregated analytics. We do not sell your personal information.

When you place an order, we share the details needed to fulfil it with the restaurant you ordered from (name, contact details, items, notes, address for delivery). We also use trusted service providers that host or power parts of the service:

• Stripe — payments
• Supabase / Cloudflare — hosting, database, and email delivery
• Google Maps — address autocomplete and maps
• Apple Push Notification service and Firebase Cloud Messaging — push notifications

These providers are only permitted to use your information to deliver their services to us.

We use a small number of cookies and local storage keys to keep you signed in, remember your cart, and understand how the site is used. You can clear these at any time from your browser settings.

We keep account and order records for as long as your account is active, and for a reasonable period afterwards to meet tax, accounting and dispute-resolution obligations. You can ask us to close your account and delete your personal information at any time.

Under the Privacy Act 2020 you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is wrong.
• Ask us to delete your account and associated personal information.
• Unsubscribe from marketing emails at any time (transactional emails will still be sent).

To make a request, email dinemode@gmail.com. We aim to respond within 20 working days.

We use encryption in transit (HTTPS), encrypted storage, row-level security on our database, and role-based access controls for staff. No online service is 100% secure, but we work hard to protect your information and will notify affected users if a serious privacy breach ever occurs, as required by law.

DineMode is not directed at children under 13. If you believe a child has provided us with personal information, please contact us and we will remove it.

Our iOS and Android apps use the same data practices as this website. In addition, the apps may request access to notifications, Bluetooth (for connecting to receipt printers), and — for the Partner app — the ability to stay awake while in use. You can change these permissions at any time in your device settings.

We may update this policy from time to time. The “Last updated” date at the top will always reflect the latest version, and material changes will be highlighted on our website.

Questions or complaints? Email dinemode@gmail.com or write to us via our contact page. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.