Privacy Policy
1. Who we are
This Privacy Policy applies to Ben Thanh Kitchen, located at 22 Whitaker Road, Warkworth 0910, New Zealand. It explains how we collect, use, store and share personal information when you use https://benthanhkitchen.com, create an account, place an online order, contact us, or interact with our restaurant.
For privacy questions, access requests or correction requests, please contact us by phone on 020 5925 9988 or through the contact details published on our website.
2. Information we collect
Account details, such as username, email address and password reset details if you choose to create an account.
Order details, such as your name, phone number, email address, items ordered, order total, payment method, order notes and pickup timing.
Payment status information, such as whether a payment was successful, failed, refunded or disputed. Card details are handled by Stripe and are not stored by us.
Website and security information, such as IP address, device/browser information, login records, cookies, checkout session data and technical logs.
Communication information, such as messages you send to us and any replies we send about your order or enquiry.
3. Why we collect and use it
To create and manage your website account, including password reset emails.
To receive, prepare, update, cancel, refund and complete pickup orders.
To contact you about your order, including availability, timing, payment issues, cancellations or refunds.
To process card payments securely through Stripe/WooPayments and keep payment and order records.
To maintain website security, prevent misuse, diagnose technical problems, and keep basic operational records.
To meet legal, accounting, tax, food safety, consumer law and dispute-resolution obligations that apply to us.
4. Payments through Stripe
Online card payments are processed securely by Stripe through WooPayments/WooCommerce. We do not directly collect, process or store full card numbers, CVC codes or card expiry details on our website. Stripe and your card issuer may collect and process payment information to authorise, complete, monitor, refund or dispute a transaction.
If you choose “pay on pickup”, we still collect order and contact details so we can prepare and manage your order.
or privacy questions, access requests or correction requests, please contact us by phone on 020 5925 9988 or through the contact details published on our website.
5. Who we may share information with
Stripe/WooPayments, for payment processing, fraud prevention, refunds, disputes and payment records.
Website hosting and infrastructure providers, currently including Hostinger servers located outside New Zealand.
Email and communication providers used to send account, order and notification emails.
FastSite/Integraah Limited, our website provider, when support, maintenance, backups, security or troubleshooting is required.
Professional advisers, regulators, payment providers, banks, dispute bodies or law enforcement where reasonably required or legally required.
6. Storage outside New Zealand
Our website is hosted using third-party infrastructure that may store or process website data outside New Zealand, currently including Hostinger servers in Indonesia. Stripe, email providers and other service providers may also process information in other countries. We take reasonable steps to use reputable service providers and to protect personal information, but overseas privacy laws may differ from New Zealand law.
7. Cookies and analytics
Our website is hosted using third-party infrastructure that may store or process website data outside New Zealand, currently including Hostinger servers in Indonesia. Stripe, Our website may use cookies and similar technologies to keep the cart and checkout working, remember account sessions, improve security, measure website performance, and support analytics or marketing tools if enabled. Essential cookies are needed for the website and checkout to function. Where non-essential cookies are used, we will provide a cookie notice or consent control where required.email providers and other service providers may also process information in other countries. We take reasonable steps to use reputable service providers and to protect personal information, but overseas privacy laws may differ from New Zealand law.
8. How long we keep information
We keep personal information only for as long as reasonably needed for the purpose it was collected, including order management, accounting, tax, dispute handling, legal compliance, website security and backup retention. Some records may remain in backups for a limited period before automatic deletion or replacement.
9. Security
We use reasonable technical and organisational measures to protect personal information, including HTTPS, account permissions, limited staff access, hosting security controls, backups and Stripe-hosted payment handling. No website or payment system can be guaranteed to be completely secure, so customers should use strong passwords and contact us promptly if they suspect unauthorised access.
10. Accessing or correcting your information
You may ask us to confirm whether we hold personal information about you, request access to it, or ask us to correct it if it is wrong. We may need to verify your identity before responding. We will respond in accordance with the Privacy Act 2020.
11. Deletion requests
You may ask us to confirm whether we hold personal information about you, request access to it, or ask us to correct it if it is wrong. We may need to verify your identity before responding. We will respond in accordance with the Privacy Act 2020.
12. Privacy breach response
If we become aware of a privacy breach that is likely to cause serious harm, we will take steps to contain it, assess it, and notify affected people and the Office of the Privacy Commissioner where required by the Privacy Act 2020.
13. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be published on our website with the updated date.