Privacy Policy

This website is operated by THE TRUSTEE FOR THE YORK RIPS UNIT TRUST, trading as Third Wave BBQ.Privacy Policy

Effective Date: September 29, 2026

1. Overview

Third Wave BBQ (“we,” “us,” or “our”) is committed to protecting the privacy of our customers and website visitors. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

• Contact Information: Name, email address, phone number, and postal address.
• Transaction Details: Purchase history, order details, and payment information.
• Account Information: Login credentials, preferences, and feedback.
• Marketing Preferences: Subscriptions to newsletters or promotional materials.
• Technical Data: IP address, browser type, operating system, and browsing behavior on our website.

3. How We Collect Information

• Direct Interactions: When you make a purchase, sign up for our newsletter, participate in promotions, or contact us directly.
• Automated Technologies: Cookies and similar tracking technologies that collect technical data about your equipment and browsing actions.
• Third-Party Sources: Social media platforms and marketing partners, where permitted by law.

4. Use of Personal Information

• Process transactions and deliver products or services.
• Respond to inquiries and provide customer support.
• Send promotional communications, if you have opted in.
• Improve our website, products, and services.
• Comply with legal obligations and prevent fraudulent activities.

5. Disclosure of Personal Information

• Service Providers: Third parties who assist in operating our business, such as payment processors and delivery services.
• Legal Authorities: When required by law or to protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

7. Access and Correction

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. You can also ask us to delete it.

To make a request, email [email protected] or write to the address at the end of this policy. We will respond within a reasonable time. If we are not able to act on a request, we will tell you why.

If you are not satisfied with how we have handled your personal information, you can make a complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience. You can set your browser to refuse cookies, but some features of our website may not function properly without them.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

11. Third Wave Scanner (Staff App)

Third Wave Scanner is a mobile application used by our team members inside our venues. It is not available to the general public: it can only be used with a staff account that we issue, and there is no way to create an account from within the app.

Information the app collects. When a team member signs in, the app collects their work email address and password in order to authenticate them, and records which venue they are signed in at. When a team member serves a customer, they may record transaction details against that customer’s loyalty record, such as the amount spent, the number of people in the party, the table number, and any voucher or reward applied. That information is handled as described in sections 2, 4 and 5 of this policy.

Camera. The app asks for permission to use the device camera for one purpose only: reading the QR code or barcode on a customer’s loyalty card or gift voucher. The camera preview is processed on the device itself in order to decode the code. We do not photograph customers, and no images or video from the camera are stored on the device, transmitted to us, or shared with anyone. You can refuse the camera permission and the team member can type the code in by hand instead.

Information the app does not collect. The app does not use location services and does not track the location of the device. It contains no advertising identifiers, no advertising networks and no third-party analytics or tracking tools. It does not access contacts, photos, files, the microphone, or any other personal information on the device.

Information stored on the device. The app stores the signed-in team member’s session on the device so that they do not have to sign in at the start of every shift. Signing out removes it.

Security. All communication between the app and our systems is encrypted in transit using HTTPS.

How to request access or deletion. You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected] or writing to the address at the end of this policy. We will respond within a reasonable time and will confirm once your information has been deleted. Team members can also ask their manager, or contact us directly, to have their staff account closed.

Contact Us