Privacy Policy
Updated 1 October 2026
This policy explains how Hospora Pty Ltd collects, uses, shares and protects your personal information when you order, book or buy a gift card from a venue that uses Hospora.
1. About this policy
Hospora Pty Ltd (Hospora, we, us) handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers the information we handle when you use ordering, booking and gift card services powered by Hospora (the Platform).
Hospora provides the Platform to hospitality venues. The venue you buy from (the Venue) receives the information it needs to serve you, and handles it under its own privacy practices as well.
By using the Platform you agree to the practices described here. If you don't agree, please don't use it.
2. What we collect
Information you give us
- Orders: your name, phone number and email address. For delivery orders, your delivery address. For dine-in orders, your table number. Optionally, notes for the Venue and a promo code.
- Bookings: your first and last name, email address, phone number and party size, and the details of your booking. For large group and function enquiries, also the event type, occasion and requirements. You can add notes.
- Gift cards: your name and email address, the recipient's name and email address, an optional personal message and an optional delivery date.
- Looking up a booking: your email address and booking reference.
- Loyalty rewards, where a Venue offers them: your email address, your name and phone number if you join, your points balance, and your order count and dates.
Notes are free text. If you include health-related information, such as dietary or accessibility needs, you agree that we and the Venue may use it to provide the service. If you give us someone else's details, such as a gift card recipient's, you confirm you are allowed to.
Payment information
You enter your card details into Square's secure payment form, and they go straight to Square. We never receive or store your full card number. We keep the payment reference, the amount and the fee details.
Technical information
When you use the Platform, our hosting and security systems receive your IP address, device and browser details and the pages you visit. We also use an error monitoring service that records errors and performance, and some sessions are recorded to help us fix problems. In those recordings, text and form fields are masked. The addresses of pages you visit can include a booking reference or tracking link.
3. How we use it
We use personal information to:
- take, confirm and fulfil your orders, bookings and gift cards;
- process payments and refunds, and invoice the Venue for the Platform Fee;
- send confirmations, booking reminders, gift cards and other messages about your purchase;
- run loyalty programmes, where a Venue offers one;
- give you and the Venue help when something goes wrong;
- keep the Platform secure, prevent fraud and fix errors;
- improve the Platform; and
- meet our legal obligations.
We don't use your personal information for direct marketing, and we won't without your consent.
5. Overseas disclosure
Some of our providers operate outside Australia, including in the United States and the European Union. Cloudflare also stores and moves data across its global network. Your information may be sent to and handled in those places. We take reasonable steps to make sure overseas providers handle it consistently with the Australian Privacy Principles.
6. How long we keep it
We keep personal information for as long as we need it for the purposes above, or the law requires, such as for tax and accounting. When we no longer need it, we take reasonable steps to delete or de-identify it. Order and customer records in a Venue's Square account follow that Venue's and Square's retention.
Hospora Mail keeps email copies and delivery details for up to 90 days. Short-term technical records, such as those that limit repeated requests, are kept for minutes or days.
7. Browser storage and cookies
The ordering app saves your name, email, phone number and address, and your cart, in your browser's local storage so you don't have to re-enter them. They stay on your device until you clear the site's data in your browser, and they reach us only when you place an order. Our apps also use short-lived session storage to recover from errors and to support error monitoring.
Our apps don't set their own cookies. Cloudflare, Square and wallet providers may use cookies or similar technologies that are needed for security and payments, and the Platform can't work properly without them.
8. Security
We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including by sending data over encrypted connections and leaving card handling to Square. No method of sending information over the internet is completely secure.
9. Access, correction and deletion
You can ask us to:
- give you access to the personal information we hold about you;
- correct information that is inaccurate, out of date or incomplete; and
- delete your information, including your loyalty membership, where we are not required to keep it.
Email hello@hospora.app and tell us which Venue and email address you used. We reply within 30 days. For records held by a Venue, such as in its Square account, we may need to pass your request to the Venue.
10. Children
The Platform isn't directed at children under 13, and we don't knowingly collect their personal information. If you think a child has given us theirs, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed, and continuing to use the Platform after a change means you accept it.
12. Contact and complaints
For privacy questions or complaints, email Hospora Pty Ltd at hello@hospora.app. If you aren't satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.