Overview
Mango Digital Pty Ltd ("Appetite", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our products and services.
This policy applies to all Appetite products including our point-of-sale systems, online ordering platforms, mobile applications, kitchen display systems, and our website at appetitepos.com.au.
We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and all applicable Australian data protection legislation.
Information We Collect
We collect information that you provide directly to us when you create an account, subscribe to our services, complete onboarding forms, or contact our support team. This includes: business name, ABN, trading name, venue address, contact details, owner/director names, dates of birth, and government-issued identification for KYC verification.
When you use our POS systems, we automatically collect transaction data including sale amounts, items sold, payment methods, timestamps, and staff activity logs. This data is stored locally on your hardware and synced to our cloud infrastructure.
We also collect technical data such as device information, IP addresses, browser type, and usage patterns to improve our services and provide technical support. We do not collect or store raw credit card numbers — all payment processing is handled by our PCI-DSS compliant payment partners.
How We Use Your Information
We use your information to: provide and maintain our Services, process transactions, set up and configure your POS system, build your whitelabel online ordering pages and mobile app, provide customer support, and send important service notifications.
We may use aggregated, anonymised data for analytics purposes to improve our products. This data cannot be used to identify individual businesses or persons. We will never sell your personal information to third parties for marketing purposes.
If you consent, we may send you marketing communications about new features, promotions, or industry insights. You can opt out of marketing emails at any time using the unsubscribe link in each email.
Data Security
We implement industry-standard security measures to protect your information. All data in transit is encrypted using TLS 1.3 protocols. Data at rest is encrypted using AES-256 encryption. Our infrastructure is hosted on Australian-based servers with SOC 2 compliant data centres.
Our local-first architecture means your critical business data is stored on your own hardware, ensuring continued operation even during internet outages. Data syncs to our cloud infrastructure via encrypted tunnels when connectivity is available.
We conduct regular security audits, vulnerability assessments, and penetration testing. Access to customer data is restricted to authorised personnel on a need-to-know basis, with all access logged and monitored.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide our Services. Transaction data is retained for a minimum of 7 years to comply with Australian tax record-keeping obligations.
Upon account termination, you may request a full export of your data within 90 days. After this period, your personal data will be securely deleted from our cloud systems, except where retention is required by law.
Your Rights
Under Australian Privacy law, you have the right to: access the personal information we hold about you, request correction of inaccurate information, request deletion of your information (subject to legal retention requirements), and lodge a complaint if you believe we have breached your privacy.
To exercise any of these rights, contact our Privacy Officer at privacy@appetitepos.com.au. We will respond to your request within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Children's Privacy
Our Services are designed for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or a prominent notice on our website at least 30 days before the changes take effect.
The "Last updated" date at the top of this policy indicates the most recent revision. Your continued use of our Services after changes become effective constitutes acceptance of the revised policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Privacy Officer: Email: privacy@appetitepos.com.au | Address: Adelaide, South Australia, Australia.
For urgent privacy concerns or to report a data breach, please contact us immediately at privacy@appetitepos.com.au with the subject line "URGENT: Privacy Concern".
Mango Digital Pty Ltd · ABN 25 674 715 336