Privacy Policy

At SmakSpace, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Personal Information

When you register for an account, we collect information such as:

• Name and contact information (email address, phone number)
• Business information (restaurant name, address, ABN/NZBN)
• Payment information (processed securely through our payment providers)
• Account credentials

Usage Information

We automatically collect certain information when you use our platform:

• Device information (browser type, operating system)
• IP address and location data
• Usage patterns and feature engagement
• Order and transaction data

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud

3. Information Sharing

We may share your information in the following situations:

• With Service Providers: We share data with third-party vendors who perform services on our behalf (payment processing, hosting, analytics)
• For Legal Compliance: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share

We do not sell your personal information to third parties.

Menu photo import. When you use menu photo import, the photos you upload, and anything visible in them, are sent to Anthropic, PBC, which reads them on our behalf to prepare draft menu items for you to check. Anthropic does not use them to train its models and normally deletes them within 30 days; processing may take place in the United States or other countries. We do not keep the photos themselves: they are held for up to 30 minutes while they are read, and only the items read from them are kept.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. These include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you close your account, we will delete or anonymize your data within 90 days, except where we are legally required to retain it.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us at hello [at] smakspace [dot] co [dot] nz .

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings. For more information, please see our Cookie Policy.

On smakspace.co.nz, analytics cookies are optional. Google Analytics, Meta Pixel and Microsoft Clarity load only after you choose "Accept" in our cookie banner; if you choose "Decline" or make no choice, none of them load. Your choice is kept in a cookie named smk_cookie_consent for up to 180 days, renewed when you visit. To change it, use "Cookie preferences" at the bottom of any page: the banner asks again, and the Google Analytics cookies are removed.

We also set one cookie of our own, named ence_src, whatever you choose in the banner. It notes how you first reached this site and how you reached it most recently: the page you landed on, the website that linked to you, and any campaign tags in the link. It is kept for up to 180 days. Our site updates it as you arrive from a new link, and we store what it says only when you send us an enquiry or sign up to our newsletter, so we know which of our own efforts brought you here. It is never sent to Google, Meta or any other company, and it is not used to follow you on other websites.

8. Our Mobile Apps

These answers apply to the SmakSpace apps for customers and for venue staff. They are written to match what the apps that are submitted to the App Store and Google Play actually do.

• No analytics or advertising tracking. The apps contain no analytics or advertising SDK and do not track you across other apps or websites.
• Crash reports. If an app stops unexpectedly it sends a report to Sentry, our error-monitoring provider: device model, operating system version, app version and the technical details of the error. Reports are not linked to your name or email address. The apps also send anonymous app-session and unexpected-shutdown events, which are not linked to you either.
• Nothing is sold in the app. The apps sell no plans or subscriptions. Orders you place are paid at the venue.
• No push notifications are sent by the current versions of the apps.
• Permissions. The customer app uses the camera to scan QR codes and, if you choose, to take a profile photo, and your photo library only when you pick a profile photo. It asks for your location when you open Discover and uses it while you use the app to show venues near you, never in the background; your position is sent to find nearby venues and is not saved to your account. The Staff app asks for no camera, photo or location access. You can withdraw any permission in your phone's settings at any time.
• Stored on your phone. Your sign-in token and a reference to any cart you have not yet submitted, both kept in the phone's secure storage; the cart's contents are kept on our servers. Signing out removes your sign-in token from the phone, and the cart reference is cleared when that cart is ordered or removed.
• Signing in. When you sign in we record which kind of device you used and its browser or app identification string, your IP address, and when the session was last used. Signing out ends that session.

To delete a customer account, sign in at my.smakspace.co.nz/account/profile/delete and confirm; Delete account in the app's profile opens the same page. Your profile, contact details, photo, preferences, favourites, loyalty points, rewards, punch cards and sign-ins are deleted straight away. Venues keep their records of your past orders and bookings for their tax records, with your name, contact details, notes and delivery address removed. Copies in our backups are gone within 30 days. If you cannot sign in, email us from the address on the account at the address in section 13 and we will delete or anonymise your data within 90 days, as described in section 5. Staff accounts are created and removed by the venue you work for, so ask the venue owner.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand or Australia. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: