Privacy Policy

• Orders: your name, phone number, the drinks you order, notes, pickup time or table number, and payment status.
• Rewards: your phone number, name, points balance and points history.
• Online account (optional): your email address or Google sign-in, display name, verified phone number, and birthday (day and month only, no year) if you add it.
• Contact: whatever you send us by email or phone.

We do not store card numbers. Card payments at the counter are processed by the card machine's bank. For PayID payments your bank shows us the payer name and the reference you enter.

• To make your order and handle refunds or problems with it.
• To run Rewards: adding and redeeming points, and birthday treats if you opted in.
• To keep records we must keep under tax law.
• To keep our systems secure and working.

We don't sell your information and we don't send marketing messages. If we start a newsletter, it will be opt-in only.

We use only the cookies needed for the site to work: one to keep you signed in to your account, and one for staff sign-in. We don't use advertising or analytics cookies, and we don't track you across other websites.

To learn which drinks people are curious about, we count how many times each menu item page is opened per day. Your browser remembers locally which items it has already counted today, so each browser counts once per item per day. We store only the daily total for each item, never who viewed it.

We use a few service providers to run this website and our shop system:

• Neon: our database, hosted in Sydney, Australia.
• Vercel: website hosting and image storage. Vercel is based in the United States and may process data outside Australia.
• Google Firebase: sign-in for online accounts (email, Google, phone verification). Google may process data outside Australia.

These providers handle data for us under their own privacy and security commitments. By using an online account you consent to your sign-in details being handled by Google as described above.

Access to customer details is limited to our staff accounts, protected by passwords and PINs. Connections to this site are encrypted (HTTPS). If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner.

Order and payment records are kept for at least five years because tax law requires it. Rewards points follow the Rewards terms. You can ask us to close your online account and delete your details; we will remove anything we are not required to keep by law.

When we delete your details we anonymise your record: your name, phone number, email and birthday are removed, your points and wallet balance are cleared, and your online account is closed. Order records stay for tax purposes, without your name or number. If you haven't ordered, used your points or wallet, or signed in for 3 years, we anonymise your record automatically, unless you still have wallet credit, a drink pack or a gift card balance.

We keep encrypted daily backups of our system. Details you asked us to delete can stay in those backups for up to about 30 days, after which the old backups are removed automatically. If we ever need to restore a backup, we apply your deletion again before using it.

You can ask to see or correct the information we hold about you. You can also order in store without giving your name or phone number; you just won't earn Rewards points. Contact Chaempire.aus@gmail.com. We will reply within 30 days.

If you are unhappy with how we handled your information, contact Chaempire.aus@gmail.com first and we will look into it. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We will post any changes on this page with a new "last updated" date.