Skip to content
Berriko's

Privacy

Your data, plainly.

What we collect, why, and how we look after it. Last updated September 2026.

Who we are

Berriko’s operates all-day diners in Melbourne at Dandenong, Ormond, Carrum, and Southern Cross Station (Docklands). This policy covers data collected through berrikos.com.au and through the Berrikos app for iPhone and Android. Contact the team at info@berrikos.com.au for any privacy question.

What we collect

  • Order information — name, email, phone, pickup time, and the items in your order. Needed so the kitchen can prepare the right food and text you when it’s ready.
  • Payment details — we never see your card. Payments are processed by Square; on the website you’re handed to their checkout, and in the app their own secure card field sends the card straight to them and hands us back a one-time token. See Square’s privacy policy.
  • Account email — if you sign in for a Berriko’s account, we store your email to send the magic-link and remember you on return.
  • Form submissions — contact, catering, booking, or newsletter forms send the fields you fill in to our team inbox.
  • Technical data — server logs (IP, user-agent, request path) kept briefly for debugging and abuse protection.

The Berrikos app

The app is another way into the same kitchen, so it uses the same records as the website. Specifically, it collects:

  • Your mobile number — the app signs you in with a code by text instead of a password. The number is also your Berrikos Rewards ID, which is how points follow you between the app, the website, the kiosk and the counter.
  • Your name and (optional) email — so the kitchen knows whose order it is and where to send a receipt.
  • Your orders and Rewards points — what you ordered, where, when, and the points earned or redeemed.
  • A push notification token — a device identifier from Apple or Google, stored against your mobile number, used only to tell you an order is ready. Notifications are opt-in on the device, and turning them off in your phone’s settings stops them.
  • Anonymous usage events — which steps of ordering are used (for example: a store picked, an item opened, added to the cart, checkout started, paid). They carry a random ID made by the app, not your number, name or account, and they stay on our own servers — no analytics companies. We use them only to make ordering faster.
  • Favourites and your cart — kept on your own phone, not on our servers.
  • Your Rewards wallet card (optional) — if you add your Berrikos Rewards card to Apple Wallet or Google Wallet, the card holds your first name, your points balance and a QR code of your mobile number so staff and the kiosk can scan it. We keep a device identifier from Apple, or a card record at Google, only so your balance can update on the card. Deleting the card from your wallet stops the updates.

The app does not collect your location, your contacts, your photos, or any advertising identifier, and it contains no advertising or third-party analytics trackers. You can browse the menu and place an order without signing in at all — an account is only needed to collect points.

What we don’t collect

  • We don’t sell, rent, or share your data with advertisers.
  • We don’t run advertising trackers. We do use simple visit analytics (Vercel Analytics and Metricool) to see how people find and use the site — for example, which social posts bring visitors here. These measure traffic; we don’t use them to build advertising profiles of you. The app has neither — its only usage counts are the anonymous events described above, kept on our own servers.
  • We don’t store your payment card details on our servers.

Who we share data with

Only the providers we need to run the site and the app:

  • Square — payments and order processing.
  • Resend — transactional email delivery (magic-link sign-in, order receipts where applicable, form submissions).
  • Vercel — website hosting and logs.
  • Turso — database for accounts, sessions and Rewards.
  • Expo — delivery of the app’s order-ready push notifications to Apple and Google.
  • Metricool — website visit analytics, so we can see which of our social posts bring people to the site.

Deleting your account

In the app, open Account and tap Delete my account. It takes effect immediately and removes your profile, your Berrikos Rewards balance and points history, your order history in the app, and every push notification registration for your number. There is no deactivation step and nothing to email us about.

One thing survives it: the receipts for orders you actually paid for stay in Square, because Australian tax law requires a business to keep its sales records for five years. Nothing there is linked to a Berrikos account once yours is gone. If you’d rather we handled the deletion for you, email info@berrikos.com.au.

Your rights

Under the Australian Privacy Principles you can ask to see what we hold about you, correct anything wrong, or ask us to delete your record. Email info@berrikos.com.au and we’ll get back to you within 30 days.

Children

The app and the site are meant for general audiences and aren’t directed at children under 13. We don’t knowingly collect their information; if you believe a child has given us theirs, email us and we’ll remove it.

Cookies

The site uses cookies strictly for sign-in sessions and for remembering your cart between visits. No advertising cookies. No cross-site tracking. The app uses no cookies — it keeps its session and cart in the phone’s own storage.

Changes to this policy

When we change this policy we’ll update the date at the top. Material changes will be flagged in a newsletter if you’re subscribed.