Privacy Policy

1. About This Policy

Patricks Continental Breads ("PATRICKS BREADS", "we", "us", or "our") operates a wholesale bakery ordering platform for approved wholesale customers. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our ordering platform, mobile application, or interact with our business.

By using our platform you agree to the practices described in this policy. If you do not agree, please discontinue use and contact us to close your account.

2. Information We Collect

• Account information — business name, contact name, email address, phone number, and delivery address provided when your wholesale account is created.
• Order data — products ordered, quantities, pricing, delivery dates, and order history.
• Payment & invoicing data — invoice numbers, payment amounts, payment dates, and outstanding balances. We do not store card numbers or banking credentials directly.
• Usage data — log-in timestamps, app usage patterns, and device information used to improve platform reliability.
• Communications — messages sent to our team via the platform or email.

3. How We Use Your Information

• Processing and fulfilling your wholesale orders and scheduled deliveries.
• Generating and managing invoices for your account.
• Communicating order confirmations, delivery updates, and account notices.
• Maintaining accurate business records as required by law.
• Improving our platform, products, and services.
• Detecting and preventing fraud or unauthorised access.

4. Sharing Your Information

We do not sell your personal information. We may share data with:

• Xero — our accounting software provider. Invoice and contact data is synchronised with Xero to manage accounts receivable. Xero's privacy policy is available at xero.com/au/legal/privacy.
• Delivery and logistics providers — name and address as required to complete deliveries.
• IT and hosting providers — infrastructure partners who process data on our behalf under confidentiality agreements.
• Legal authorities — when required by law, regulation, or court order.

5. Data Storage and Security

Your data is stored on secure cloud servers. We use encrypted connections (HTTPS/TLS) for all data transmission, access controls to limit who can view your information, and regular security reviews of our platform.

While we take reasonable precautions, no system is completely secure. Please contact us immediately if you suspect unauthorised access to your account.

6. Data Retention

We retain account and order data for a minimum of seven (7) years to comply with Australian taxation and business record-keeping obligations. You may request deletion of non-essential data at any time by contacting us; we will assess the request against any legal retention requirements.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Complain about how we handle your information.

To exercise these rights, contact us using the details in Section 10. We will respond within 30 days.

8. Cookies and Analytics

Our web platform uses session cookies solely to maintain your login state. We do not use third-party advertising or tracking cookies. The mobile application does not use cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify active account holders of material changes by email at least 14 days before they take effect. The current version is always available at this URL.

10. Contact Us

For privacy enquiries, access requests, or complaints:

If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).