Privacy Policy

DiningMate (ABN 18 862 175 106) ("DiningMate", "we", "us", or "our") operates the DiningMate platform, website at diningmate.com.au, and services that link to this Privacy Policy (together, the "Platform").

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information, and how you can request access to or correction of personal information.

We aim to handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) where it applies.

1. Who this Privacy Policy applies to

This Privacy Policy applies to:

• Restaurant Managers — individuals who create or use a DiningMate account on behalf of a Restaurant; and

• Diners — individuals who make, change, cancel, or manage a restaurant booking through DiningMate without creating a DiningMate account.

A Diner does not create a DiningMate account. References to an "account" in this Privacy Policy apply only to Restaurant Managers unless stated otherwise.

2. Personal information we collect

The information we collect depends on how you use the Platform.

2.1 Restaurant Manager account and contact information

If you are a Restaurant Manager, we may collect:

• name;

• email address;

• phone number;

• account login credentials;

• account settings and preferences;

• role, access permissions, and audit activity;

• communications with DiningMate; and

• information required to verify authority to act for a Restaurant.

2.2 Restaurant operational information

If you manage a Restaurant through the Platform, we may collect Restaurant Data, including:

• restaurant name, address, contact details, trading hours, menus, photographs, descriptions, and policies;

• seating, availability, booking settings, booking rules, and operational preferences;

• staff access details;

• customer-service records; and

• information about use of Restaurant Manager features.

2.3 Subscription and billing information

If you purchase a Subscription, we may collect:

• billing contact details and billing address;

• subscription plan, billing status, invoices, transaction history, and tax information;

• payment method token or limited payment method information supplied by our payment processor, such as card type or last four digits; and

• payment failure or chargeback information.

DiningMate does not intentionally store full payment card numbers or card verification values. Payment processing is handled by our payment service providers.

2.4 Diner booking information

If you make or manage a booking as a Diner, we may collect:

• name;

• email address;

• phone number;

• booking date, time, party size, Restaurant, and booking status;

• booking-related requests, notes, communications, cancellations, and no-show status;

• booking history recorded through the Platform; and

• information you provide when you contact DiningMate about a booking.

2.5 Technical and usage information

When you use the Platform, we may collect:

• IP address;

• browser type, device type, operating system, and device identifiers;

• pages viewed, features used, dates and times of access, referring URLs, and interaction events;

• cookie identifiers and similar technology identifiers; and

• security, error, fraud-prevention, and diagnostic information.

2.6 Sensitive information and booking notes

We do not ask you to provide sensitive information unless it is reasonably necessary for a booking or service request.

Booking notes may contain information that is sensitive under privacy law, such as food allergy, health, mobility, or accessibility information. If you provide that information:

• please provide only what is reasonably necessary for the booking;

• we may share it with the relevant Restaurant so it can consider or accommodate your request; and

• you acknowledge that the Restaurant may need to handle that information to provide the requested hospitality service.

You should not include sensitive information in booking notes unless you are comfortable with the relevant Restaurant receiving it.

3. How we collect personal information

We collect personal information:

• directly from you when you create or use a Restaurant Manager account;

• directly from you when you purchase or manage a Subscription;

• directly from you when you make, modify, cancel, or enquire about a booking;

• when you contact us by email, phone, website form, or other support channel;

• automatically when you use the Platform, through cookies, logs, analytics, and similar technologies;

• from a Restaurant in connection with a booking or customer-service matter;

• from payment providers in connection with payment confirmation, billing, fraud prevention, or chargebacks; and

• from other sources where you have authorised the disclosure or where collection is otherwise permitted by law.

Where we collect personal information from a third party, we will take reasonable steps to ensure that the third party has authority to provide it.

4. Why we use personal information

4.1 Operating the Platform

We may use personal information to:

• create and administer Restaurant Manager accounts;

• authenticate users and manage access;

• provide Restaurant Manager features;

• host, maintain, monitor, and secure the Platform;

• troubleshoot, prevent fraud, and respond to security incidents; and

• respond to enquiries and provide support.

4.2 Managing bookings

We may use personal information to:

• allow Diners to search for Restaurants and make, modify, or cancel bookings;

• send booking confirmations, reminders, changes, and other booking-related communications;

• share Diner booking information with the relevant Restaurant;

• allow Restaurants to confirm, manage, and fulfil bookings;

• handle no-shows, disputes, complaints, refunds, and customer-service issues; and

• maintain records reasonably necessary for booking administration and legal compliance.

4.3 Managing subscriptions and payments

We may use personal information to:

• process Subscription payments;

• issue invoices and records;

• administer recurring billing;

• manage failed payments, chargebacks, refunds, and tax obligations; and

• communicate about your Subscription or account.

4.4 Analytics, improvement, and development

We may use information, including Platform Data, to:

• analyse Platform use, Restaurant operations, demand patterns, availability, booking activity, and performance;

• improve, test, maintain, and develop the Platform and related products and services;

• create analytics, benchmarks, rankings, forecasts, recommendations, and operational insights; and

• retain, use, analyse, combine, commercialise, license, and create derivative works from aggregated or de-identified information for operating, securing, improving, developing, marketing, and commercialising the Platform and related products and services.

Where reasonably practicable, we use aggregated or de-identified information for these purposes.

We may use aggregated or de-identified information to train, test, evaluate, improve, and develop automated systems and artificial-intelligence-enabled features.

We will not use identifiable Diner Personal Information to train, test, evaluate, or improve artificial intelligence models unless the Diner has provided valid consent or the use is otherwise permitted by applicable privacy law. We will not use sensitive information contained in booking notes for those purposes unless we have obtained any consent required by law.

We do not use identifiable Diner Personal Information for unrelated direct marketing or sell it to third parties for their own marketing purposes.

4.5 Marketing

We may send marketing communications about DiningMate's products, services, features, or promotions only where we have consent or another lawful basis to do so.

We may also send Restaurant Managers communications about features, billing, service changes, or offers that are relevant to their use of the Platform, subject to applicable law.

See section 11 for marketing choices and unsubscribe rights.

4.6 Legal, safety, and business purposes

We may use personal information where reasonably necessary to:

• comply with legal, regulatory, tax, accounting, and record-keeping obligations;

• protect the rights, property, safety, and security of DiningMate, Restaurants, Diners, and the public;

• investigate suspected fraud, misuse, security incidents, or unlawful activity;

• enforce booking policies, including managing repeated no-shows or misuse of the booking system;

• assess and restrict booking activity where we reasonably believe there is repeated no-show behaviour, fraudulent activity, or misuse of the Platform;

• enforce our Terms of Service; and

• facilitate a merger, acquisition, investment, restructuring, sale of assets, or other business transaction.

5. When we disclose personal information

5.1 To Restaurants

When a Diner makes a booking, we disclose the information reasonably necessary for the relevant Restaurant to confirm, manage, and fulfil that booking. This may include the Diner's name, phone number, email address, booking details, and booking notes.

Restaurants are contractually required to use Diner Personal Information received through DiningMate only for booking-related and hospitality-service purposes, unless the Diner separately consents to another use or the use is otherwise permitted by law.

5.2 To service providers

We may disclose personal information to service providers that help us operate the Platform, including providers of:

• cloud hosting, databases, infrastructure, content delivery, and security;

• payment processing;

• email, SMS, and communications;

• customer support;

• analytics, performance monitoring, error tracking, and fraud prevention; and

• professional services, including legal, accounting, insurance, and security services.

Our service providers may handle personal information on our behalf under contractual or other arrangements designed to protect that information.

5.3 To legal and regulatory bodies

We may disclose personal information where required or authorised by law, court order, regulator, government authority, or law-enforcement agency, or where reasonably necessary to protect people, property, or the security of the Platform.

5.4 In connection with business changes

If DiningMate is involved in a merger, acquisition, financing, reorganisation, sale of assets, or insolvency event, personal information may be disclosed to relevant parties as part of that transaction, subject to applicable law.

5.5 With your direction or consent

We may disclose personal information where you ask us to do so or give valid consent.

6. Service providers and overseas processing

DiningMate uses third-party service providers to help operate the Platform. These may include providers of cloud hosting and infrastructure, payment processing, email and SMS communications, analytics and error monitoring, security and fraud prevention, and professional services. These providers may be located in Australia, the United States, Singapore, and other countries where our service providers or their infrastructure providers operate.

Where personal information is disclosed to an overseas recipient, we take reasonable steps to protect that information in accordance with applicable Australian privacy law.

7. Restaurant access to Diner information

A Restaurant that receives Diner Personal Information through DiningMate is an independent business and may have its own privacy obligations.

DiningMate requires Restaurants to:

• use Diner Personal Information only for managing and fulfilling the relevant booking, providing the hospitality service, customer support, legal compliance, and other permitted purposes;

• keep the information secure;

• restrict access to staff who need it for those purposes; and

• not use the information for unrelated marketing without the Diner's separate consent.

DiningMate does not control a Restaurant's independent handling of Diner Personal Information outside the Platform. If you have a concern about a Restaurant's use of your information, you may contact the Restaurant directly and may also contact DiningMate at support@diningmate.com.au.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate the Platform, manage bookings and subscriptions, resolve disputes, maintain security, prevent fraud, comply with legal obligations, and maintain business records.

Retention periods vary depending on the information and purpose. For example:

• Restaurant Manager account information may be retained during the account relationship and for a reasonable period after closure;

• Diner booking information may be retained for as long as reasonably necessary to manage bookings, disputes, fraud, support, and record-keeping;

• payment, tax, and accounting records may be retained for the period required by applicable law; and

• aggregated or de-identified information may be retained indefinitely where it no longer reasonably identifies an individual.

When personal information is no longer needed, we will take reasonable steps to delete it or de-identify it, unless retention is required or permitted by law.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Our safeguards may include:

• encryption in transit;

• access controls and authentication;

• role-based permissions;

• logging and monitoring;

• secure hosting and payment providers;

• staff and contractor access controls; and

• security reviews and incident-response processes appropriate to our size and the nature of the information we handle.

No electronic transmission or storage system is completely secure. If you are a Restaurant Manager and suspect your account has been compromised, contact us promptly at support@diningmate.com.au. If you are a Diner and believe your booking information has been accessed or used without authorisation, contact us at the same address.

10. Cookies and similar technologies

We use cookies and similar technologies to operate, secure, analyse, and improve the Platform.

These may include:

• essential cookies needed for core Platform functions, security, or authentication;

• functional cookies that remember preferences;

• analytics cookies that help us understand Platform use and performance; and

• marketing cookies, where enabled, to measure campaigns or show relevant advertising.

You can manage cookies through your browser settings and, where available, our cookie preference tools.

11. Marketing communications and unsubscribe

We may send marketing messages only in accordance with applicable law.

You can unsubscribe from DiningMate marketing communications at any time by:

• using the unsubscribe link in a marketing email;

• following the opt-out instructions in a marketing SMS, where available; or

• contacting us at support@diningmate.com.au.

You do not need a DiningMate account or login to unsubscribe.

We may still send non-marketing messages that are necessary to provide the Platform or a booking, such as booking confirmations, reminders, cancellations, security notices, invoices, and service-related notices.

A Restaurant's marketing communications are separate from DiningMate's marketing communications. A Restaurant must obtain any consent required by law before sending its own marketing to a Diner.

12. Access and correction

You may request access to personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, contact:

DiningMate Privacy Officer
Email: support@diningmate.com.au
Address: Unit 2, 3 Merton Cl, Mount Waverley VIC 3149

We may need to verify your identity before responding. We will respond within a reasonable time and may refuse access or correction where permitted by law. If we refuse, we will provide written reasons where required.

Restaurant Managers may update certain account information through the Restaurant Manager dashboard. Diners do not have DiningMate accounts and should contact us directly for booking-information access or correction requests.

13. Privacy complaints

If you believe DiningMate has handled your personal information in a way that does not comply with this Privacy Policy or applicable privacy law, contact our Privacy Officer using the details above.

We will acknowledge your complaint within a reasonable time and aim to investigate and respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au

• Phone: 1300 363 992

• Post: GPO Box 5218, Sydney NSW 2001

14. Children

The Platform is not directed to children under 18. We do not knowingly collect personal information from children without appropriate authority or consent.

If you believe a child has provided personal information to DiningMate without appropriate authority, contact us at support@diningmate.com.au.

15. Third-party links

The Platform may link to third-party websites or services. This Privacy Policy does not apply to those third parties, and DiningMate is not responsible for their privacy practices. Review the privacy policy of each third-party service you use.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations.

We will publish the updated version on the Platform and update the "Last updated" date. For material changes, we may provide additional notice through the Platform, by email to Restaurant Managers, or by another reasonable method.

17. Contact

For privacy enquiries, requests, or complaints, contact:

DiningMate Privacy Officer
ABN: 18 862 175 106
Email: support@diningmate.com.au
Address: Unit 2, 3 Merton Cl, Mount Waverley VIC 3149
Website: diningmate.com.au

You can also review our Terms and Conditions for additional information about using our platform.

This Privacy Policy was last reviewed on 27 June 2026 and is compliant with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.