1. Introduction
   1. Thank you for visiting the http://www.nandos.co.nz website (the “Website”). Nando’s New Zealand Limited (CN 4995100), NNZ Restaurants Limited (CN 4995100), Nando’s Australia Pty Ltd (ABN 20 079 066 407), Nando’s Peri Peri Australia Pty Ltd (ABN 86 627 885 956) and their related companies and related body corporates (collectively referred to as “Nando’s”, “we”, “us” or “our”) recognise the importance of protecting the privacy and rights of individuals in regarding their personal information and we are committed to protecting the privacy of personal information in line with New Zealand and Australian privacy laws.
   2. We respect your rights to privacy under the New Zealand Privacy Act 2020 (the “New Zealand Act”), the New Zealand Information Privacy Principles (the “IPPs”), the Australian Privacy Act 1988 (the “Australian Act”) and the Australian Privacy Principles (the “Apps”) (together the “Privacy Laws”) and we comply with the requirements of Privacy Laws regarding the collection, use, management, storage, disclosure and access to your personal information.
   3. This Privacy Policy does not limit or exclude any of your rights under the Privacy Laws and if you would like more information regarding the Privacy Laws please visit the website of the Office of the New Zealand Privacy Commissioner (www.privacy.org.nz) or the Office of the Australian Information Commission (https://www.oaic.gov.au/).
   4. This Privacy Policy sets out Nando’s approach to handling personal information, including how we collect, use, store, keep secure, disclose and provide access to your personal information.
   5. This Privacy Policy covers handling practices for personal information by restaurants owned and operated by Nando’s in New Zealand and Australia.
   6. This Privacy Policy forms part of our terms of service of the Website and other websites that may be operated by us, which you should also read.
2. What is personal information?
   1. When used in this Privacy Policy, the term “personal information” has the meaning given to it in the New Zealand Act. In general terms, it is any information that can be used to personally identify you. This may include your name, gender, date of birth, address, telephone number, email address, credit card details, financial information and profession or occupation.
   2. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.
3. What personal information do we collect and how is it collected?
   1. We will collect your personal information in a fair and lawful way. Where practical, we will collect your personal information directly from you, and only to the extent that we reasonably need it for one or more of our business functions or activities, to provide you with a Nando’s product or service or to determine your suitability as a Nando’s employee.
   2. The kinds of personal information we may collect from you will depend on what type of interaction you have with us. It may include things like:
      1. personal information you give us when you participate in a promotion, competition, survey, market research, consumer panel, mobile service (e.g. SMS or MMS), subscribe to our mailing list, participate in our PERi-Perks loyalty program or similar, use the Nando’s mobile application (“App”), participate or contribute to our online forums or interact or follow our social media pages (e.g. Facebook, Twitter, LinkedIn, Instagram or Tik Tok). This information may include your full name, postal and physical addresses, email address, telephone numbers, age, date of birth and loyalty membership details;
      2. personal information you give us via our restaurants or when you place an order with us (e.g. via an online ordering system like order at table or orders through the Website or the App (“Online Ordering System”)), when purchasing a gift card or when you logon to wi-fi provided at one of our restaurants. This information may include your full name, postal and physical address, email address, telephone numbers, age, date of birth, menu preferences, previous order information, loyalty membership details, credit card details, financial information, Internet Protocol (“IP”) address and your demographic and other data for market research, advertising and promotional purposes;
      3. personal information you give us via telephone, email, online form, chat function or in person when making a request or enquiry or submitting compliments, complaints, queries or feedback. This information may include your full name, postal and physical address, email address, telephone numbers, age, date of birth, loyalty membership details, previous order information, credit card details, financial information and IP address;
      4. information regarding your interests, preferences, purchasing behaviour, experience with our products and services and any additional information necessary for us to deliver those products and services to you and to respond to your contact with us;
      5. if you are applying for a position with Nando’s, refer to “employment applications”; and
      6. any extra personal information you give us directly through our Online Ordering Systems, any third-party online ordering system (e.g. UberEats, DoorDash, or MenuLog), your access and use of our Website or App or indirectly by using our Website or App, social media platforms, online forums, applications, wi-fi services or online presence, through our agents and representatives and/or through our third party product and service providers.
   3. We may collect personal information about you from social media platforms and services if you register or log into your account through a third-party social media service.
   4. We may collect personal information about you from third parties where you have authorised this or where the information is publicly available.
   5. We may collect information that is not personal information because it does not identify you. For example, we may collect anonymous answers to surveys or aggregated information about how users use our Website, App or Online Ordering Systems.
   6. Except for when you apply for employment with Nando’s, we will not collect sensitive information about you (e.g. information about your racial or ethnic groups, political or religious beliefs or vaccination status) unless you have specifically consented to the collection or the collection is required by the Privacy Laws or other applicable laws.
   7. We will use your personal information only for the particular purpose that you provided it or a directly related purpose. We may also use your personal information if the other use is permitted by the Privacy Laws or other applicable laws or with your express or implied consent.
4. Cookies and web beacons
   1. Cookies are files that can identify you as a unique customer and can store your personal preferences as product preferences to tell us which website (including the Website) and website pages (including Website pages) that you have visited and in what order (“Cookies”).
   2. We may collect your personal information using Cookies, by directly, or through a third party, sending Cookies to your computer or devices, or use similar technologies, to enhance your online experience on our Website, Online Ordering Systems and across the Internet.
   3. Information we get through Cookies allows us to recognise your computer and greet you when you visit our Website or Online Ordering Systems. We use Cookies and other technical information to personalise your visit to our Website or Online Ordering Systems, to analyse traffic on our Website, to track user trends, patterns and selections for authorised downloads and for technical reasons connected with your use of our Website and Online Ordering Systems.
   4. 4.4 Cookies can either be permanent (they stay on your computer until you delete them) or temporary (they last only until you close your browser). If you do not want to receive Cookies, you can set your browser so that your computer does not accept them. But, certain areas of our Website and Online Ordering Systems can only be accessed with Cookies or similar devices.
   5. 4.5 Web beacons (or web bugs) are small strings of code that deliver graphic images on a web page to transfer data (e.g. the IP address of the computer that downloaded the page the web beacon appears, the Uniform Resource Locator (“URL”) of the page the web beacon appears, the time the page containing the web beacon was viewed, the types of browser that fetched the web beacon or the identification number of any Cookie on the computer previously placed by that server) (“Web Beacon”).
   6. 4.6 We may use Web Beacons to monitor your use of the Website, your use of the Online Ordering Systems or when corresponding with you via HTML capable e-mail which let us know whether you received and opened our email. By setting your web browser to display HTML emails as text only, you may be able to prevent the use of some Web Beacons if desired.
   7. 4.7 On their own, Cookies and Web Beacons do not contain or reveal any personal information. But, if you choose to give us personal information, it can be linked to the anonymous data stored in the Cookies and/or Web Beacons.
5. What happens if we can’t collect your personal information?
   1. You are not required to disclose your personal information to us, and where lawful, you may deal with us anonymously or using a pseudonym.
   2. If you remain anonymous, use a pseudonym or choose not to provide us with the personal information described above, the following may happen, we may not be able to:
      1. provide the requested products or services to you, either to the same standard or at all;
      2. provide information about products and services that you may want, including information about special promotions and competitions;
      3. provide you with details, information or an appropriate response to any enquiries or requests that you have made; and/or
      4. tailor the content of our Website, the Online Ordering Systems and/or other related sites to your preferences and your experience of our Website or Online Ordering Systems may not be as enjoyable or useful.
6. For what purposes do we collect, hold, use and disclose your personal information?
   1. We collect personal information about you so that we can perform our business activities and functions and provide the best possible quality of customer service. The way we will collect, use and disclose your personal information depends on the reasons it was collected, but generally for the following purposes:
      1. processing meal orders that you place with us in our restaurants or via an Online Ordering System (including to delivery partners where you select third-party delivery), providing you with our products and services or processing refunds;
      2. processing orders for gift cards that you place with us in our restaurants, by telephone or via our Website or Online Ordering System;
      3. where you choose to receive mobile services and content via SMS, MMS and other mobile services, including the App, we use this information to deliver such mobile services and content to you, carry out market research, track sales data, inform you of upcoming events and help plan and promote other promotional activities which may be of interest to you;
      4. to respond to any questions or queries you have and process, investigate and respond to any feedback, complaint or compliment you make;
      5. promoting, marketing and carrying out our current and future products, services, promotions, offers, games, programs and competitions to you;
      6. to improve the operation and navigation of our Website, App, Online Ordering Systems and social media platforms, and inform you of changes made to our Website, App, Online Ordering Systems and/or social media platforms;
      7. assisting you with remembering and re-ordering from our menu in the future, developing an online customer profile and keeping your personal details up to date;
      8. to obtain opinions or comments about products and/or services and to conduct other statistical and market research with a view to improving our products and services;
      9. for the purposes of and incidental to you registering for and/or using of our wi-fi services;
      10. processing and considering your employment application (see “employment applications” section below); and
      11. facilitating our internal business operations, including fulfilment of any legal, security, information technology and regulatory requirements.
   2. We may use your personal information for other purposes not listed above which will be made clear to you at the time we collect your personal information, for a directly related purpose, where you have consented to such use or disclosure or for such other purposes as may be required or permitted by the Privacy Laws or other applicable laws.
7. Who can we disclose your personal information to?
   1. For the purposes described above, we may disclose your personal information to, and share your personal information with, the following:
      1. a subsidiary or related company;
      2. our officers, employees, contractors and agents for the purpose of operating our business, our Website, App or Online Ordering Systems, fulfilling requests by you and otherwise providing products and services to you including web hosting providers, IT system administrators, agencies, advertisers, business partners and suppliers, product and service suppliers, payment processors, data entry providers, regulatory authorities, auditors and professional advisors like accountants, lawyers, business advisors and consultants;
      3. suppliers, agents, partners and other third parties we have a commercial relationships with for business, marketing and other related purposes;
      4. third parties where Privacy Laws or other applicable laws require or authorise us to; and
      5. any person or entity for any authorised purpose with your express consent.
   2. We may combine or share any personal information that we collect from you with information collected by any of our related companies within New Zealand or outside New Zealand (see the “do we disclose your personal information to anyone outside New Zealand” section below).
8. Direct marketing materials
   1. We may send you direct marketing communications and information about our own products and services and direct marketing communications on behalf of our related companies that we consider may be of interest to you. These direct marketing communications may be sent in various forms, including by post, telephone calls, SMS, MMS and email or messaging within the Website, App or Online Ordering System in accordance with Privacy Laws and other applicable laws. By providing your personal information to us, you consent to us sending you direct marketing communications in this way, unless you opt-out as described below.
   2. If you indicate a preferred communication method, we will try to use that preferred method whenever practical in the circumstance.
   3. At any time you may opt-out of receiving marketing communications from us by contacting us (see the “contacting us” section below), or by using the opt-out facilities provided in the marketing communication, and we will ensure that your details are removed from our marketing communications mailing list. You may choose to opt back in by contacting us (see the “contacting us” section below) or by resubscribing to receiving marketing information.
   4. If we obtain your prior consent, we may use your personal information for the purposes of direct marketing of products and services on behalf of selected third parties.
9. Online forums
   1. We may give opportunities for you to engage with us in written discussions, communications and comments in interactive online forums, social media platforms, consumer and market research groups and articles. Material that we deem, in our absolute discretion, to be inappropriate or offensive will be removed from these forums and platforms.
   2. All statements and opinions expressed in any discussions, communications, forums, platforms and articles are those of the individual contributors and not those of Nando’s.
   3. Information you disclose to us in discussions, communications, forums, platforms and articles may be read, collected and used by us. But, as these discussions, communications, forums, platforms and articles are public, the information may also be read, collected and used by other users, the actions of whom we cannot control and take no responsibility.
   4. We suggest using your discretion and exercising caution when providing your information.
10. Employment applications
    1. The type of personal information we generally collect about employment applicants is the information requested in an employment application (e.g. your full name, postal address, telephone numbers, email address, residency status, work rights, education details, employment history, references and other information relating to your work experience).

In considering your employment application, we may obtain personal information about you from third parties (e.g. your education institutions, employers or nominated referees). Subject to your prior consent, we may also collect sensitive information about you (e.g. information about your health (including any disability) or any criminal record).

1. We collect personal information for the following purposes:
   1. assessing you for a position with us or one of our related companies;
   2. assessing whether you are suitable to progress through each stage of recruitment ; and
   3. storing your information for future employment opportunities.
2. If you do not provide us with the information requested, we will be unable to fulfil the purposes.
3. We may disclose your information to:
   1. your referees or your other employers;
   2. recruitment agencies, agents or contractors acting on our behalf;
   3. a related company;
   4. recruitment agencies and contractors acting on our behalf, employees of related companies or global Nando’s entities, based in other locations worldwide;
   5. government agencies and service providers to verify your right to work; and
   6. law enforcement agencies to verify whether you have a criminal record.
4. If we engage third party contractors to perform services for us, which involves handling of personal information, we will take reasonable steps to prevent the contractor from using the personal information, except for the purpose it was supplied.

Nando’s Australia Pty Ltd and Nando’s Peri-Peri Australia Pty Ltd

Attn: Nando’s Privacy Officer

40 Mollison Street, Abbotsford, VIC 3067

Telephone: 1300 NANDOS (1300 626 367)

Email: ANZ.PrivacyOfficer@nandos.com.au

1. We are committed to working with our customers and employment applicants to obtain a fair resolution of any complaint or concern about privacy. To contact us with a query, feedback, compliment or complaint, please provide us with full details of your query, feedback, compliment or complaint and any supporting documentation.
2. Upon receipt of your query, feedback, compliment or complaint we will endeavour to provide you with an initial response within 7 business days and investigate and attempt to resolve your query, feedback, compliment or complaint within 30 business days, or such longer period as is necessary and notified to you by us.

This Privacy Policy was last updated on 12 August 2024.