Privacy policy
Petra Daily is a café at Cnr Petra St & Canning Hwy, Bicton WA, run by Coffee Rituals Pty Ltd, ABN 33 630 324 024. In this policy "we", "us" and "our" mean Coffee Rituals Pty Ltd.
This policy explains how we handle personal information when you visit petradaily.com.au, order from us online, or hear from us. As a small business, we're likely exempt from the Privacy Act 1988 (Cth). Even so, we follow its Australian Privacy Principles as the standard for how we handle your information.
What we collect
When you create an account (needed before you pay):
- your first name, and your last name if you give it;
- a mobile number or an email address, which we confirm by sending you a one-time code;
- whether you'd like marketing by email and by SMS, and when and where you told us.
If you choose to give them later, for example to receive a birthday offer:
- your date of birth;
- your postcode.
When you order:
- what you ordered, when, how much you paid and any offers or vouchers you used;
- your pickup time or table number;
- any notes you add to the order.
When you pay, your card details go straight to our payment provider, Stripe. We never see or store your full card number. We receive a payment reference, and may see the card type and last four digits.
When you use the site:
- which pages you view and what you do on them (for example, adding an item to your cart), along with your device, browser and approximate location from your IP address;
- the campaign that brought you to the site, if the link you followed was tagged (known as UTM tags: source, medium, campaign, term, content and the page you landed on).
We don't collect your postcode or address from your card details. We don't ask for sensitive information such as health details. If you tell us about an allergy in an order note, we use it only to make that order.
You can browse the menu and build a cart without telling us who you are. You can't order anonymously, because we need to know whose order it is and to send you a receipt.
Why we collect it
We use your information to:
- run your account, and make and hand over your order (your name is called out when your order is ready);
- take payment, send your tax invoice, and give refunds;
- keep your saved offers and vouchers, including the free coffee you get when you sign up;
- send you news and offers, but only if you've opted in to that channel (see Marketing, below);
- understand how the site is used so we can improve it, and see which campaigns lead to orders;
- prevent fraud and abuse, such as fake sign-ups made to claim offers more than once;
- meet our legal obligations, such as keeping tax records.
We don't sell your personal information. Checkout automatically applies the combination of your saved offers that saves you the most, and you can change which offers are used. We don't make any other decisions about you by automated means.
Who we share it with
We use these service providers to run the site and the café. Each one handles your information only to provide its service to us.
| Provider | What they do for us | Where your data is held |
|---|---|---|
| Supabase | Our database and sign-in system: your account, orders and offers | Australia (Sydney) |
| Cloudflare | Hosts the website, stores images and checks for bots | Worldwide network, including the United States |
| Stripe | Processes card, Apple Pay and Google Pay payments | United States and other countries |
| Lightspeed | Our point-of-sale system. Your order, name, pickup time or table go onto our docket | United States, Canada and other countries |
| Brevo | Sends your tax invoice and email sign-in codes, and our marketing if you opt in | European Union |
| Twilio | Sends SMS sign-in codes | United States |
| PostHog | Website analytics | United States |
Uber Eats. If you order from us through Uber Eats, Uber collects your details under its own privacy notice. Uber passes us your order and the name on it so we can make it.
We may also disclose information when the law requires it, or to our professional advisers, such as our accountant, under confidentiality.
Information held overseas
Some of the providers above store or process information outside Australia, in the countries listed in the table. We choose providers that publish strong security and privacy commitments, and we take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.
Analytics and cookies
We use PostHog to see how people use the site: page views, clicks and what's added to carts. PostHog sets a cookie and uses your browser's local storage from your first visit. When you sign in, we link that activity to your account using an internal ID, not your name or contact details. We don't record your screen or sessions. Our analytics data is stored in the United States.
We also use your browser's storage to keep you signed in, to remember your cart, and to remember which campaign brought you to the site so we can attach it to your order.
We don't use advertising cookies or share your activity with ad networks. You can clear or block cookies in your browser settings. The site will still work, but you may need to sign in again.
Marketing
We only send marketing messages if you've opted in. Email and SMS are separate choices, both are off unless you turn them on, and we record when and how you opted in. You never have to opt in to receive an offer, including the free coffee when you sign up.
Every marketing email and SMS identifies us and includes a way to unsubscribe. We act on unsubscribes within five working days. You can also change your choices at any time in your account or by emailing hello@petradaily.com.au.
Messages about your orders, such as your tax invoice, aren't marketing. You'll still get them if you unsubscribe.
How we keep it safe and how long we keep it
Your information is stored with the providers above, which use encryption and access controls. Only people who need it to run the café can see customer details. Staff at the counter see the name, items and pickup time or table on each order.
We keep order and payment records for at least five years, as Australian tax law requires. We keep your account until you ask us to close it. When we no longer need your information, we delete it or make it anonymous.
If a data breach is likely to cause you serious harm, we'll tell you as soon as we can, and the Office of the Australian Information Commissioner (OAIC) where the law requires it.
Accessing and correcting your information
You can see and update your name, contact details and marketing choices in your account. To ask for a copy of the information we hold about you, to correct it, or to close your account, email hello@petradaily.com.au. We'll reply within 30 days. We may need to confirm your identity first. If we can't do what you ask, for example because we have to keep tax records, we'll explain why.
Complaints
If you think we've mishandled your information, email hello@petradaily.com.au and tell us what happened. We'll respond within 30 days. If you're not happy with our response, you can contact the OAIC on 1300 363 992.
Changes to this policy
We'll update this page if the way we handle information changes, and change the date at the top. If a change is significant, we'll let account holders know by email or on the site.
Contact us
Coffee Rituals Pty Ltd, trading as Petra Daily
Postal address: 1/258 Canning Highway, Bicton WA 6157
hello@petradaily.com.au
Last updated 9 October 2026