Easy Eats · Your privacy
Privacy Policy
Last updated:
This policy explains how RAB Technology trading as Easy Eats ("we", "us" or "our") collects, uses, stores and shares personal information when you use our websites at easyeatsnz.co.nz and easyeats.kiwi, our customer and driver mobile applications and related ordering and delivery services.
We handle personal information in accordance with New Zealand’s Privacy Act 2020. Personal information means information about an identifiable individual.
1. Information we collect
Depending on how you use our services, we may collect:
- Your name, email address, phone number, delivery address and account details.
- Order details, delivery instructions, transaction records and communications with our support team.
- Information needed to process online payments through Stripe and Datman.
- Device, browser and usage information, such as your IP address and activity on our services.
- Customer location information, where you allow it through your device settings, to find nearby restaurants and set a delivery address, and driver location information during deliveries to support delivery tracking.
We generally collect information directly from you when you create an account, place an order, contact us or use our services. We may also receive information about your order, payment or delivery from the restaurant, delivery partner or payment provider involved.
Where we collect personal information about you from another source, we will take reasonable steps to give you the information required by the Privacy Act 2020, unless an exception applies. This may include a separate notice explaining the collection and who holds the information.
You can choose not to provide information. If information is needed to manage an account, process a payment or fulfil an order, we may be unable to provide that part of the service without it. Please only give us information about another person if you are authorised to do so, and share only the details needed for the service.
2. How we use your information
- To create and manage accounts, process orders and payments, and arrange deliveries.
- To send order updates, respond to enquiries and resolve service issues.
- To maintain, secure and improve our services, including identifying fraud and misuse.
- To send marketing communications where you have opted in. You can unsubscribe using the link in a marketing message or by contacting us.
- To meet legal obligations and manage disputes.
We use personal information for the purpose for which it was collected, a directly related purpose, or another purpose permitted by law. Using our service does not, by itself, authorise unrelated uses of your information.
4. Information handled overseas
Some service providers may store or process personal information outside New Zealand. Where a provider acts only on our behalf, we remain responsible for the information and take reasonable steps to protect it.
Where sharing information with an overseas recipient is a disclosure covered by information privacy principle 12, we will ensure the disclosure meets that principle, for example through comparable privacy safeguards or another permitted basis.
6. Retention, security and privacy breaches
We keep personal information only for as long as needed for a lawful purpose connected with our services, including transaction records, legal obligations and resolving disputes. When it is no longer needed, we take reasonable steps to securely delete it or remove identifying details. Information used for analytics is subject to the same retention principle if it can still identify you.
We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, use, alteration and disclosure. No online system is completely secure.
If a privacy breach occurs, we will take steps to contain and investigate it. Where a breach has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected people as soon as practicable, subject to the requirements and exceptions in the Privacy Act 2020.
7. Access, correction and deletion requests
You can ask us to confirm whether we hold personal information about you, request access to it, and ask us to correct it. We may need to verify your identity before providing information or making changes.
We will respond to access and correction requests as soon as reasonably practicable and within the timeframes required by law, usually within 20 working days. If a lawful extension is needed, we will explain why and tell you when to expect our response. If we decline a request, we will explain the reason and your complaint rights. If we do not make a requested correction, you may ask us to attach a statement of the correction you sought.
You can also request deletion of your account or personal information. We will consider your request and explain any information we need to retain for a lawful purpose. Deletion is not an absolute right under New Zealand’s Privacy Act.
To make a deletion request, use our data deletion request form or email info@easyeats.kiwi. The form is hosted by Typeform; you can use email instead if you prefer.
8. Children’s privacy
Our services are not intended for children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.
9. Changes to this policy
We may update this policy to reflect changes to our services or privacy obligations. We will publish the updated version on this page and revise the update date. Where required, we will also provide a separate notice about a change or a new use of personal information.
10. Contact us or make a complaint
For privacy questions, requests or complaints, contact the Privacy Officer for RAB Technology trading as Easy Eats at info@easyeats.kiwi.
Business location: New Zealand.
If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner for advice or to make a complaint.