Privacy Policy

NextGen Orders (“we”, “us”) provides QR ordering and kitchen display software for restaurants in New Zealand and Australia. This policy explains how we handle personal information in line with the NZ Privacy Act 2020 and, where applicable, the Australian Privacy Principles.

What we collect

Restaurant managers and staff: account email, name, venue details, and authentication data needed to run the service. Staff PINs are stored as hashes, not plain text.

Prospective customers: when you use the contact form — name, email, phone (optional), venue details you choose to share, and your message.

Diners (guests): guests order without creating an account. We process order content (items, quantities, table, notes) for the venue. We do not require guest email or phone for day-one ordering.

Technical data: server logs with request identifiers, and optional analytics (e.g. Google Analytics) when configured — used to operate and improve the service.

Why we use it

To provide the software, respond to enquiries, secure accounts, prevent abuse, and improve reliability. We do not sell personal information.

Payments

Guest Pay by Bank is processed by our open-banking partner (BlinkPay). Card rails, when enabled later, will use Stripe Connect on the venue’s account. We do not store full card PANs on our servers. SaaS subscription billing (when live) will use Stripe Billing.

Sharing

We use processors such as hosting (Vercel), database (Supabase), email (Resend), and payment partners as needed to run the product. They process data on our instructions.

Retention & security

We keep information as long as needed for the service, legal obligations, and dispute resolution. We use access controls, encrypted transport, and least-privilege service credentials.

Your rights

You may request access or correction of personal information we hold about you. Contact Email. You may also complain to the NZ Office of the Privacy Commissioner or the OAIC in Australia.

Contact

Questions: Contact form or Email.