Privacy Policy

1. Who we are

Miko Tiramisu, ABN 99 656 316 356, operates mikotiramisu.com on the Sunshine Coast, Queensland, Australia. This policy explains how we handle personal information connected with our website, orders and customer enquiries.

For privacy questions, email contact@mikotiramisu.com.

2. Information we collect

We collect information you provide directly and information needed to run checkout:

• Order and contact details: your name, email, phone number, selected products, quantities, fulfilment date and, for delivery, your address and preferred delivery period.
• Address searches: the address text you type or submit, matching locations and the result of our delivery-area check.
• Payment records: checkout and order references, amounts, payment or refund status, and receipt information returned by Square. We can retain a checkout record even if you do not complete payment.
• Enquiries: messages and information you choose to send us about an order, ingredient question or privacy request.
• Technical and security information: connection information such as an IP address, checkout session identifiers and request records used to operate and protect the site. Our checkout uses a hashed connection identifier to help limit abusive requests.

You enter card details on Square’s checkout page. Miko’s website does not collect or store your full card number or card security code.

3. How we use your information

We use your information to check delivery eligibility, create and reconcile payments, prepare and fulfil orders, contact you about your order, respond to enquiries, handle refunds or disputes, prevent duplicate or fraudulent checkout attempts, and maintain business records or meet legal obligations.

The website’s checkout does not include a mailing-list subscription. Order updates are communications about your purchase.

Please share only information relevant to your enquiry. If you choose to tell us about an allergy or dietary requirement, we use that information to respond to your question and discuss your order.

4. Services we use & information sharing

• Square: we send order and contact details to Square to create hosted checkout and receive payment updates. Square handles payment information under its Buyer Privacy Notice.
• Geoapify: address text is sent through our server to Geoapify to find matching locations and verify delivery eligibility. This can happen while you type, before you place an order. Read Geoapify’s Privacy Policy.
• Website and business services: our hosting and email providers process information needed to operate the website, store order records and handle correspondence. People helping us prepare or deliver an order may receive the details needed for that work.
• Legal and professional support: information may be disclosed where required by law or where necessary to resolve a dispute, obtain professional advice or protect against fraud.

If you follow an external link, such as Instagram, that service’s privacy practices apply to your interaction with it.

5. Overseas processing

Some service providers process information outside Australia. Square’s Buyer Privacy Notice describes processing in countries including the United States, Canada, Japan, Ireland, France, Spain and the United Kingdom.

Geoapify lists infrastructure in Germany and Finland and uses Cloudflare for the standard API endpoint used by our website. Its data processing agreement identifies its providers, including Cloudflare entities in the United States and Germany.

Provider arrangements can change. Contact us if you need more information about overseas handling of your order or enquiry.

6. Cookies & browser storage

Our website uses browser storage to make ordering work:

• Basket session storage remembers your selected products and quantities in your browsing session. It does not store your contact details in the basket.
• Checkout session storage keeps checkout references, verification tokens and a hashed order fingerprint so you can check payment or retry an interrupted checkout. It does not save your name, email, phone number or address as plain text.
• A checkout security cookie associates requests with the same browser session and helps prevent duplicate or abusive checkout attempts. It expires after 24 hours.

Session storage normally clears when the browsing session ends, although browser session-restore settings can affect this. You can clear or block storage in your browser, but checkout and payment verification may stop working. Keep your payment receipt before clearing it.

The current Miko storefront does not include advertising pixels or third-party analytics scripts. Square may use its own cookies and storage on its hosted checkout, as explained in its privacy notice.

7. Security & retention

Order information is kept in private server-side records, with access controls for the kitchen’s order-management tools. We use safeguards to protect this information, but no internet transmission or storage system can be guaranteed completely secure.

Closing your browser or clearing your basket does not delete server-side checkout and order records. Those records can be needed for fulfilment, payment reconciliation, accounting, fraud prevention, disputes and legal obligations. Retention depends on the type of record and why it is needed; contact us to ask about a particular record or request deletion.

Square and other providers have their own retention practices, described in their privacy notices.

8. Access, corrections & your choices

You can browse the menu without providing order details. We need sufficient contact and fulfilment information to accept and deliver an order; without it, we may be unable to provide that service.

Email contact@mikotiramisu.com to ask what personal information we hold about you, request access or a correction, or ask us to delete information. Include enough detail to identify the relevant order or enquiry, but do not send card details.

We may need to verify your identity before releasing or changing information. If information must be retained, or we cannot fulfil a request, we will explain the reason and discuss the available options, subject to applicable law.

9. Privacy concerns & policy updates

If you are concerned about how your information has been handled, email contact@mikotiramisu.com with the details so we can investigate and respond.

If your concern remains unresolved, the Office of the Australian Information Commissioner (OAIC) provides information about privacy complaints and whether it can consider your matter.

We may update this policy as the website or our practices change. The date at the top shows the latest revision. You can also read our Terms of Use.