Privacy Policy

Made In Italy Property Group Pty Ltd ("Made In Italy", "we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly and transparently. This Privacy Policy explains how we collect, use, store, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth), and the Australian Privacy Principles (APPs).

Last updated: 24 June 2026

1. Who We Are

Made In Italy Property Group Pty Ltd operates the website at https://madeinitaly.com.au and provides Italian restaurant and pizza delivery services across Sydney, NSW, Australia.

For privacy enquiries, please contact us using the details in Section 13.

2. What Personal Information We Collect

We may collect the following categories of personal information:

Identity and contact information

• Full name
• Email address
• Phone number
• Delivery address

Order and transaction information

• Order history and preferences
• Payment method type (we do not store full card details — payments are processed by third-party providers)

Technical and usage information

• IP address
• Browser type and version
• Device type and operating system
• Pages visited on our website and time spent
• Referring URLs

Marketing preferences

• Email subscription status and communication preferences

We collect personal information only when you voluntarily provide it — for example, when placing an order, contacting us, subscribing to our mailing list, or completing a form on our website. You may visit our website without providing personal information, though some features may not function fully.

3. How We Collect Personal Information

We collect personal information:

• directly from you when you place an order, register, make an enquiry, or subscribe to marketing communications;
• automatically through cookies and similar tracking technologies when you browse our website (see Section 7); and
• from third-party platforms such as our online ordering providers (e.g. Uber Eats, DoorDash, Deliverit) and analytics services, where consistent with their respective privacy policies.

4. Why We Collect and Use Your Personal Information

We use your personal information for the following purposes:

You may withdraw consent to marketing communications at any time (see Section 9).

5. Disclosure of Personal Information

We do not sell, rent or trade your personal information.

We may share your personal information with:

• Service providers who assist us in operating our website, processing orders and delivering services (e.g. delivery platforms, payment processors, email marketing providers, web hosting providers, analytics tools including Google Analytics). These providers are required to handle your information only for the purposes we specify and in accordance with applicable privacy laws.
• Professional advisers including lawyers, accountants and auditors, where required.
• Regulatory bodies and law enforcement where we are required or authorised by law to disclose.

We do not disclose personal information for purposes beyond those set out in this Policy without your consent, unless required by law.

Overseas Disclosures

Some of our service providers may be located or store data outside of Australia. We take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the APPs, including by entering into contractual arrangements where appropriate. Under the Privacy and Other Legislation Amendment Act 2024 (Cth), Australia has introduced an 'adequacy whitelist' of approved countries that provide substantially equivalent privacy protections. Where we disclose information to recipients in approved countries, we rely on this mechanism where applicable.

6. How We Protect Your Personal Information

We take the security of your personal information seriously. In line with APP 11 and the strengthened obligations introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth), we implement both technical and organisational measures to protect your information from unauthorised access, loss, misuse, disclosure, alteration or destruction.

These measures include:

• Encrypted data transmission (SSL/TLS)
• Access controls limiting who can view personal information
• Regular review of our data security practices
• Staff training on privacy and cyber security obligations
• Third-party security assessments where appropriate

No method of data transmission over the internet is completely secure. While we take all reasonable steps, we cannot guarantee absolute security. In the event of an eligible data breach that is likely to cause serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches (NDB) scheme.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse traffic, and support our marketing activities.

Types of cookies we use:

• Essential cookies — required for core website functions (e.g. shopping cart, session management)
• Analytics cookies — used to understand how visitors interact with our site (e.g. Google Analytics)
• Marketing cookies — used to measure the effectiveness of our advertising campaigns (e.g. Meta Pixel, TikTok Pixel, Google Ads tags)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we will seek your consent before placing non-essential cookies.

8. Automated Decision-Making

We may use automated tools and technologies (including on our online ordering platforms) that use your personal information to assist in delivering services. From 10 December 2026, new transparency obligations under APPs 1.7 and 1.8 of the Privacy and Other Legislation Amendment Act 2024 (Cth) require us to disclose in this Policy any automated decisions that could reasonably be expected to significantly affect your rights or interests.

At present, we do not use automated decision-making processes that significantly affect your legal rights or access to services in this way. If this changes, we will update this Policy accordingly and notify you as required by law.

9. Direct Marketing

We may use your personal information to send you promotional emails about our menu, offers, and events — but only where you have provided consent or where we have a reasonable basis to do so in accordance with the Spam Act 2003 (Cth).

Opting out: Every marketing email we send includes an unsubscribe link. You can also contact us directly (see Section 13) to opt out at any time. We will process opt-out requests promptly.

We do not sell your contact details to third parties for their marketing purposes.

10. Your Privacy Rights

Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:

• Access the personal information we hold about you
• Correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading
• Make a complaint about how we have handled your personal information

New rights from June 2025: Following amendments to the Privacy Act that took effect on 10 June 2025, individuals now have a direct right to bring court proceedings against any person (including businesses) who seriously invades their privacy — either by intruding upon their seclusion or misusing their personal information. We take this obligation seriously and are committed to handling your personal information with care and transparency.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within a reasonable time (generally 30 days).

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

11. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order and transaction records are generally retained for seven years in accordance with Australian taxation and accounting obligations. Marketing preferences are retained until you withdraw consent or request deletion.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

12. Children's Privacy

Our website and services are directed at adults and are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us immediately and we will take steps to delete it.

Note: The OAIC is developing a Children's Online Privacy Code, mandated under the Privacy and Other Legislation Amendment Act 2024 (Cth), which must be registered by 10 December 2026. This Code will impose additional obligations on organisations handling children's data. We will update this Policy accordingly when the Code comes into effect.

13. Contact Us

For any privacy-related enquiries, access or correction requests, or complaints, please contact us at:

Made In Italy Property Group Pty Ltd

Website: https://madeinitaly.com.au

We will acknowledge your enquiry and respond within a reasonable timeframe.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. When we make material changes, we will post the updated Policy on our website and update the "Last updated" date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

Upcoming changes to be aware of:

• 10 December 2026 — New automated decision-making transparency obligations (APPs 1.7 and 1.8) take effect.
• 10 December 2026 — The Children's Online Privacy Code must be registered by the OAIC.
• Further tranches of Privacy Act reform (including potential rights to erasure and expanded individual rights) are expected to be introduced in due course following ongoing government consultation.

This Privacy Policy is governed by the laws of New South Wales, Australia.