PRIVACY POLICY
Personal information across our brands, customers, trade partners and suppliers

Legal entity: Niora Foods Pty Ltd
Last updated: 11 September 2026
Contact: info@niorafoods.com.au

This policy explains how Niora Foods Pty Ltd collects, holds, uses and discloses personal information across our business, including our brands, websites, online stores, wholesale and distribution activities, supplier relationships, marketing, recruitment and customer service.

Niora Foods Pty Ltd is an Australian food business and the owner and operator of the Maleny Cuisine brand and any other brands we operate from time to time. In this policy, "Niora Foods", "we", "us" and "our" refer to Niora Foods Pty Ltd, including when we act through any of our brands.

This policy applies to all of our brands. A brand website or online store may also publish its own privacy policy with more specific information about that brand's activities. Brand policies are intended to be consistent with this policy; where a brand policy gives more specific information about that brand's website or online store, that information applies to that activity and this policy applies to everything else.


1. Our commitment

We respect privacy and aim to manage personal information transparently and securely. Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to us, we handle personal information in accordance with those requirements. We may also follow these standards as a matter of good practice where an exemption applies.


2. Who this policy covers

This policy applies to personal information about people we deal with, including:

- customers of our brands, including online store customers, subscribers and people who enter competitions or leave reviews;
- wholesale customers, retailers, stockists, distributors and food-service businesses, and their owners, staff and representatives;
- suppliers, growers, manufacturers, co-packers, contractors and service providers, and their representatives;
- visitors to our websites and social media pages, and people who contact us;
- job applicants and prospective contractors;
- visitors to our premises; and
- investors, prospective purchasers of our business or assets, and their advisers.


3. Personal information we may collect

- identity and contact details, including name, delivery and billing addresses, email address and telephone number;
- business details, including business or trading name, ABN, job title and work contact details;
- order, payment status, transaction, invoice, refund, delivery and customer-service records;
- trade account applications, trading terms, payment history and trade references for wholesale customers;
- supplier and contractor information, including quotes, contracts, payment details, certifications, and quality, compliance and food-safety records;
- account credentials and preferences where customer or trade accounts are available;
- marketing preferences, competition entries, survey responses, reviews and user-generated content;
- website and device information, such as IP address, browser, device identifiers, referring pages, pages viewed, interactions and approximate location;
- communications and records of enquiries, complaints, returns, product-quality concerns, food-safety matters and wholesale or stockist enquiries;
- visitor sign-in, induction and workplace health and safety records for people who attend our premises; and
- employment or contractor application information, such as work history, qualifications and referee details.

We generally do not seek sensitive information. If a customer voluntarily provides health or allergy information in an enquiry, we will use it only as reasonably necessary to respond, manage safety and comply with law. We will only collect sensitive information from job applicants or other individuals with consent or where otherwise permitted by law.

Records relating to the employment of our current and former employees may be exempt from the Privacy Act. We nonetheless treat those records confidentially and handle them securely.


4. How we collect information

We may collect information directly through our websites and brand online stores, checkout, customer and trade accounts, contact forms, trade account applications, supplier onboarding, contracts, email, telephone, social media, trade shows, markets and events, subscriptions, competitions, surveys and dealings with our team.

We may also receive information from payment providers, e-commerce platforms, delivery and logistics providers, advertising and analytics providers, distributors, retailers, stockists, wholesale ordering platforms, recruitment platforms, referees, fraud-prevention services, publicly available sources such as business websites and public registers, and other service providers. Where we collect personal information from someone other than the individual, we take reasonable steps to make sure the individual is aware of the matters set out in this policy.


5. Why we use personal information

- to accept, process, fulfil, deliver and support orders placed through our brands and online stores;
- to manage wholesale, distribution, retail and stockist relationships, trade accounts, invoicing and payment collection;
- to engage and manage suppliers, contractors and service providers, including procurement, payments and quality assurance;
- to manage food safety, product quality, traceability, product withdrawals and recalls;
- to verify transactions, prevent fraud and protect our websites, customers and business;
- to respond to enquiries, complaints, refunds, replacements and food-safety matters;
- to manage recruitment, workplace health and safety and business operations;
- to improve our products, brands, services, websites, advertising and customer experience;
- to send marketing where permitted and manage consent and opt-outs;
- to comply with tax, accounting, record-keeping, food-safety, recall, regulatory and legal obligations;
- to consider or carry out a restructure, sale or other business transaction; and
- for other purposes notified at collection or authorised or required by law.


6. Sharing across our business and brands

Niora Foods operates each of its brands, so information collected through one brand may be accessed within Niora Foods where reasonably necessary for the purposes in this policy, such as order fulfilment, customer service, accounting, food safety and recalls. We will not use information collected through one brand to send marketing about a different brand unless the person has consented or it is otherwise permitted by law.


7. Payments

Online payments are processed by third-party payment providers. We may receive transaction identifiers, payment status and limited payment details, but we do not ordinarily store complete card numbers or security codes. Payment providers handle information under their own privacy and security terms.

Where trade customers, suppliers or contractors pay or are paid by invoice or bank transfer, we hold the banking and payment details reasonably necessary to process those payments and refunds, and we protect them in accordance with section 13 of this policy.


8. Cookies, analytics and advertising technologies

Our websites and brand online stores may use cookies, local storage, pixels, tags and similar technologies to operate checkout and accounts, remember preferences, measure traffic and performance, detect fraud, understand customer journeys and deliver or measure advertising. Providers may include our e-commerce platforms, Google, Meta and other technology partners enabled on the relevant website.

Users can adjust browser settings and any cookie controls offered on our websites. Blocking some technologies may affect website functionality. Where consent is required, non-essential technologies should not be activated until the required consent is obtained.


9. Marketing communications

We may send email, SMS or other commercial electronic messages, including brand marketing to consumers and product, pricing and trade updates to business contacts, where we have the recipient's consent or are otherwise permitted by law. Messages will identify the sender and include a functional unsubscribe method. We will action unsubscribe requests within the period required by law. Transactional messages should be kept separate from promotional content unless applicable marketing requirements are satisfied.


10. Automated decisions

Our payment, e-commerce and fraud-prevention providers may use automated tools to screen transactions, which can result in a transaction being declined or held for manual review. The information used may include order details, payment status, delivery details and device and IP information. We do not otherwise use computer programs to make decisions that could reasonably be expected to significantly affect an individual's rights or interests. If this changes, we will update this policy to describe the kinds of personal information used and the kinds of decisions made.


11. Disclosure to service providers and others

We may disclose relevant information to e-commerce and website providers, payment processors, banks, carriers and freight providers such as Australia Post, warehouses and fulfilment providers, contract manufacturers and co-packers, distributors and retailers where needed to fulfil orders or manage product recalls, email and SMS platforms, cloud hosting, accounting, inventory and data-storage providers, recruitment platforms, accountants, auditors, lawyers and other advisers, insurers, debt-collection agencies, food-safety auditors and certification bodies, regulators and food-safety authorities, law-enforcement bodies, fraud-prevention services, advertising and analytics providers, and prospective purchasers or advisers in a business transaction.

We disclose only information reasonably necessary for the relevant purpose, and we do not sell personal information.


12. Overseas recipients

Some technology, payment, analytics, advertising, cloud and support providers may store or access information outside Australia. The countries may vary according to the providers in use and may include the United States and other locations disclosed by those providers. Where required, we take reasonable steps in relation to overseas disclosures. Individuals may contact us for current information about material overseas service arrangements.


13. Security and retention

We use reasonable administrative, technical and physical measures to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. No online transmission or storage system is completely secure. We retain information only for as long as reasonably required for the purposes described, including legal, accounting, tax, food-safety, traceability, recall, dispute and fraud-prevention requirements, then delete or de-identify it where appropriate.


14. Data breaches

We maintain processes for assessing suspected data breaches. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will take the steps required by law, which may include notifying affected individuals and the Office of the Australian Information Commissioner.


15. Access and correction

An individual may request access to personal information we hold about them or ask us to correct inaccurate, out-of-date, incomplete, irrelevant or misleading information. We may need to verify identity. We will respond within a reasonable period and explain any lawful refusal. We will not charge for making a request, although the law may permit a reasonable charge in limited circumstances for providing access.


16. Anonymity and children

People may contact us anonymously or using a pseudonym where lawful and practicable, but we need accurate identifying and delivery information to process an order, and accurate business details to open a trade account or engage a supplier. Our brand online stores are intended for adults. We do not knowingly seek personal information directly from children without appropriate involvement from a parent or guardian.


17. Complaints

Send a privacy complaint to the contact details below with sufficient information for us to investigate. We will acknowledge and assess the complaint and aim to respond within a reasonable period. If a person is dissatisfied with our response, they may be able to complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).


18. Policy changes

We may update this policy to reflect changes to our business, brands, practices, technology, service providers or legal obligations. The current version and effective date will be published on our website. We recommend reviewing it periodically.


Contact us

Questions, requests or complaints about this policy, or about how any of our brands handle personal information, can be sent to our Privacy Officer at info@niorafoods.com.au, or by post to Niora Foods Pty Ltd, 4/25 Runway Drive, Marcoola, QLD 4564, Australia.