Privacy Policy

About this Privacy Policy

This Privacy Policy explains how Meet @ Door handles personal information when you use our website, customer apps, butcher (seller) tools, driver tools, and related services.

It is written for customers and other people who deal with us in Australia. It is not a US or European privacy notice. English is the authoritative language of this policy.

This policy describes current product behaviour. It is not a statement that the Privacy Act 1988 currently applies to Meet @ Door. We still aim to handle personal information in an open, limited and careful way.

Who we are

Meet @ Door is a local marketplace and delivery platform. You choose participating butcher stores, order products (including variable-weight meat), and we arrange delivery in an active service area or in-store pickup where a store offers it.

Our public website is https://www.meetatdoor.com.au. We currently focus on Auburn NSW 2144 and nearby addresses inside active delivery zones.

We have not published a legal entity name, ABN or postal address on this page. Until those details are confirmed, use the email below for privacy matters.

Personal information we collect

The kinds of personal information we collect depend on how you use Meet @ Door.

• Customers: name, optional review/display name, email, mobile number, password or sign-in details, language preference, saved and current delivery addresses (including map coordinates), delivery instructions, substitution preference, favourites, order history, marketing opt-in, and support requests.
• Orders: products, quantities and weights, participating store, delivery or pickup, windows and timestamps, status history, refunds and cancellations, delivery or collection notes, and contact details captured at checkout (including for guest orders).
• Payments: payment status, amounts, Stripe payment identifiers, and refund references. We do not store full card numbers, CVC or the full magnetic-stripe data.
• Drivers: application and account details, contact information, vehicle notes if provided, licence/vehicle answers on a partner application if given, availability, assignments, earnings records, and GPS location while a delivery job is active.
• Butchers and applicants: business and contact details, store address, onboarding and application records (including ABN if supplied), halal verification material if supplied, and account records.
• Support and communications: support tickets, messages, optional photos, customer–driver chat on a delivery, emails, and push/device tokens if notifications are enabled.
• Technical: session and cart cookies, language cookies, a first-party analytics identifier, pages visited and allowlisted events, user agent for web-push subscriptions, and server logs that may include IP address.

How we collect information

We collect information directly from you when you create an account, sign in (including Google or Apple if you choose those options), save an address, check out, leave a review, chat with a driver, open a support case, apply as a butcher or driver, or contact us.

We also collect information automatically when you use the site or apps (cookies, cart session, language, first-party analytics, and device tokens if you allow notifications).

Drivers’ apps send location while they are fulfilling an assigned delivery. Mapping/address tools may receive the address text you enter so we can check the delivery zone and show a map.

If we receive unsolicited personal information (for example in an email we did not ask for), we keep it only if we reasonably need it for a purpose in this policy, otherwise we take reasonable steps to destroy or de-identify it.

How we use personal information

We use personal information for bounded operational purposes:

• Creating and managing accounts, sessions and security (including fraud and abuse prevention).
• Taking, preparing, delivering and collecting orders, including variable-weight packing and payment capture.
• Connecting your order with the participating butcher store and, for delivery, an assigned driver.
• Payments, refunds, disputes and financial records.
• Customer service, complaints and support tickets.
• Order updates by email, in-app notice or push, and SMS only if SMS is enabled.
• Improving how the platform works, using first-party analytics (not advertising pixels).
• Seller and driver onboarding and platform administration.
• Marketing emails only where you have opted in, or as otherwise allowed by Australian law.
• Meeting legal, accounting and record-keeping needs.

Orders and participating butcher stores

When you place an order, the participating butcher store can see information needed to prepare it. In the current product that includes the customer name, order number, items, quantities and weights, cutting notes, fulfilment mode (delivery or pickup), and the delivery or pickup window.

Butcher tools are not designed to show driver live GPS on the customer route. Stores do not receive your card number.

If you collect the order yourself (pickup), the store needs enough contact and order detail to hand it to you.

Delivery drivers and location information

Assigned drivers receive what they need to complete the job: customer name, phone, delivery address (including coordinates where stored), butcher pickup points, order items as needed for collection, and delivery notes.

Drivers send GPS (latitude, longitude, and related accuracy/heading/speed where the device provides them) while a delivery is in an active assigned stage. We store a current point for the delivery and may store sampled location history.

You can see the driver’s live location on tracking only after a driver is assigned and, on a multi-stop run, only while your drop is the next pending stop. Tracking stops when the delivery is completed, cancelled or failed. Pickup orders do not use a driver map.

Platform administrators can see location for operations. We do not publish driver GPS to other customers on the same run.

A setting exists to keep GPS history for a limited number of hours, but we do not currently run a fully automatic deletion job for all location history. We keep location information while reasonably needed for the delivery, safety, disputes and operations.

Payments

Card details are entered in Stripe’s payment form (including Apple Pay or Google Pay where Stripe offers them). Meet @ Door stores payment identifiers, amounts and status so we can authorise, capture (including variable-weight final amounts) and refund. We do not store full card numbers.

Stripe may process payment information on our behalf. Cash on delivery is only available if we have specifically enabled it for you.

Support and communications

Support tickets, photos you attach, and messages you send us are used to handle your request. Internal staff notes on a ticket are for our team.

Customer–driver chat is stored for the delivery and is available to the people on that conversation and to administrators. A 30-day chat retention setting exists; we do not currently run a fully automatic purge job.

We send operational messages about your account and orders (for example order confirmation). Those are not marketing. Marketing email is separate and requires opt-in (see Marketing).

Cookies and technical information

We use cookies and similar storage that are needed to run the service, plus first-party analytics — not advertising cookies.

• Strictly necessary: sign-in session cookies (Auth.js), cart cookie (mad_cart), delivery-area cookie (mad_delivery), and security-related cookies.
• Preferences: language cookies (mad_locale and mad_locale_src).
• Analytics: a first-party anonymous identifier (mad_aid cookie and related local storage) for visits, referrer/UTM attribution and funnel events. Event properties are allowlisted. We do not load Google Analytics, Meta Pixel or similar advertising tags in the current website.
• Apps may store a sign-in token in the device’s secure storage, a push token, and small operational caches (for example an in-progress driver run).

Marketing communications

We only send promotional email (offers, product news, Meet @ Door updates) if you tick the optional marketing box at signup or checkout, or you later turn marketing on in Communication preferences.

You can turn marketing off in your account preferences, or use the unsubscribe link on a marketing email. Unsubscribing does not stop order and account emails we need to run the service.

A global marketing switch may also be off, in which case we do not send bulk marketing even if you previously opted in.

Who we disclose information to

We disclose personal information to:

• Participating butcher stores, as described above.
• Assigned drivers, as described above.
• Service providers who help us operate the platform (payments, database hosting, application hosting, email, maps, push notifications, optional SMS, and optional file storage).
• Professional advisers or authorities if we reasonably need to, including to deal with a legal claim, safety issue, or a request we are required by law to consider.

Overseas disclosure

Some service providers are organisations that operate outside Australia, or that may store or access information from more than one country. That means personal information may be disclosed overseas.

Providers we actually use or have wired in the product include Stripe, Supabase, Hostinger, Google Maps / Google APIs, Google sign-in, Apple sign-in, Firebase Cloud Messaging, Resend, Twilio (only if SMS is enabled), and S3-compatible object storage if file storage is configured.

We have not verified a complete list of processing countries for each provider. Where it is not practicable to specify a country, we still tell you that overseas disclosure is likely.

How we protect information

We take reasonable steps to protect personal information, including access controls so staff, butchers and drivers only see what their role needs, passwords stored as hashes, signed-in sessions, encrypted connections (HTTPS) on the public site, and sending card data to Stripe rather than storing full card numbers.

No online service is completely secure. We do not claim that information can never be accessed without authorisation.

How long we keep information

We do not currently have a complete, automated retention schedule for every record type. We keep information while we reasonably need it for the purposes in this policy, including orders, payments, disputes, safety, accounting and legal records.

Some settings exist (for example about 90 days for raw analytics events, about 30 days for chat, and a limited window for GPS history samples). Those settings are not the same as a guaranteed deletion job. Account profiles and orders are not automatically wiped after a short period.

When we no longer need personal information, we take reasonable steps to destroy or de-identify it, except where we must keep a record.

Accessing and correcting information

You can view and update much of your account information while signed in (profile, addresses, communication preferences, and order history).

You can also ask us to provide access to personal information we hold about you, or to correct it if it is wrong. Email support@meetatdoor.com.au and tell us what you need. We may need to verify that the request is from you.

We will respond in a reasonable time. If we refuse access or correction where a law allows that, we will say so and explain how you can complain.

Account and deletion requests

Meet @ Door does not currently offer a self-service “delete my account” button. If you want us to close an account or delete personal information, email support@meetatdoor.com.au.

We may not be able to delete everything immediately. We may need to keep order, payment, tax, dispute or safety records. Guest orders are tied to the contact details and tracking token used at checkout.

Privacy complaints

If you are unhappy about how we have handled personal information, email support@meetatdoor.com.au with “Privacy” in the subject. We will look into the complaint and respond in a reasonable time.

If the Privacy Act 1988 applies to Meet @ Door, you may also complain to the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au. You can contact the OAIC even if you are unsure whether that Act applies; the OAIC can explain its role.

Data breaches

If we suspect a data breach, we will assess it and take steps we reasonably consider necessary. We will notify people and regulators where the law requires that, including under the Notifiable Data Breaches scheme if it applies to us.

We do not notify every minor security event. Eligible data breaches are assessed on the facts.

Children

Meet @ Door is a meat and local-goods marketplace. We do not currently operate a specific age gate. We do not seek to collect personal information from children.

If you believe a child has given us personal information, contact us and we will take reasonable steps to handle it appropriately. A formal age rule may be added later.

Changes to this Privacy Policy

We may update this policy when the product or the law changes. The “Last updated” date at the top will change. The current version is always at https://www.meetatdoor.com.au/privacy.

Contact us

Privacy contact: support@meetatdoor.com.au

Website: https://www.meetatdoor.com.au

Related pages (not part of this policy): Terms, Delivery policy, Refunds, and variable-weight information, linked from our website footer.