Finally Mine Coffee House (“Finally Mine”, “we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy sets out how we collect, use, store and disclose your personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using our website, ordering from us, or otherwise providing us with personal information, you consent to the practices described in this policy.
Who we are.
Finally Mine Coffee House is a cafe, kitchen and licensed bar trading at 14 Breed Street, Traralgon, Victoria 3844.
Legal entity: Eustress Coffee Pty Ltd (Australian Private Company)
Trading as: Finally Mine Coffee House
ABN: 50 677 479 622 (GST registered)
Address: 14 Breed Street, Traralgon, Victoria 3844, Australia
Contact: hello@finallyminecoffee.com.au
The information we collect.
Depending on how you interact with us, we may collect the following types of personal information:
- Contact information, your name, email address, phone number, and postal address (where provided).
- Order information, items ordered, order time, pickup or dine-in preference, dietary preferences, and order notes.
- Payment information, payment card details are collected and processed by our payment provider, Square, Inc. We do not see, store or have access to your full card number, CVV, or expiry date. We only receive a transaction reference and the last four digits of your card.
- Gift voucher information, recipient name and email (if you are purchasing a voucher for someone else), and voucher balance.
- Age verification, where you order alcohol, a confirmation that you are 18 years or older. We do not store government ID, only the confirmation checkbox status.
- Correspondence, the content of any emails, messages or feedback you send us.
- Technical information, IP address, browser type, device type, referring URL, and pages visited. This information is collected automatically for security, troubleshooting and basic analytics.
We do not knowingly collect sensitive information (as defined under the Privacy Act) such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data.
How we collect it.
We collect personal information directly from you when you:
- Place an order on our website at finallyminecoffee.com.au;
- Purchase a gift voucher;
- Make a table reservation or event hire enquiry;
- Subscribe to our mailing list or update channels;
- Contact us by email, phone, or social media;
- Visit our venue (for in-person orders processed through Square POS); or
- Apply for a role through our Careers page.
We may also collect personal information from third parties where it is unreasonable or impracticable to collect directly from you, for example, a gift voucher recipient whose details are provided to us by the purchaser.
Why we collect it.
We collect, hold and use your personal information for purposes including:
- Processing, fulfilling and delivering your orders;
- Communicating with you about your order, reservation, or enquiry;
- Issuing gift vouchers and tracking their redemption;
- Verifying your age where required for alcohol sales;
- Processing refunds, cancellations and disputes;
- Responding to enquiries, feedback and complaints;
- Improving our website, menu and customer experience;
- Complying with our legal obligations, including under the Liquor Control Reform Act 1998 (Vic), Food Act 1984 (Vic), and taxation law; and
- Recruiting new staff (where you apply via Careers).
How we protect your information.
We take reasonable steps to protect your personal information from unauthorised access, use, disclosure, alteration, or destruction. These steps include:
- Encryption of data in transit (HTTPS/TLS) for all website interactions and API calls;
- Tokenisation of payment card information by Square before it reaches our systems, we never store full card data;
- Restricted access to customer records, only staff who need the information to perform their role can access it;
- Secure storage of our admin credentials, API keys and environment variables in encrypted cloud vaults;
- Regular review of our security practices and prompt response to any reported vulnerabilities.
No online system is completely secure. If you believe your information has been compromised or accessed without authority, please contact us immediately at hello@finallyminecoffee.com.au.
Your rights over your information.
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you;
- Correct any information you believe to be inaccurate, incomplete or out of date;
- Request deletion of your personal information (subject to our legal record-keeping obligations, including retention of tax records for 5 years and liquor licence records as required by Victorian law);
- Withdraw consent for direct marketing at any time; and
- Make a complaint about our handling of your personal information.
To exercise any of these rights, contact us at hello@finallyminecoffee.com.au. We will respond within 30 days in accordance with the Privacy Act.
Marketing communications.
Where you have provided consent (for example, by subscribing to our mailing list), we may send you marketing communications about new menu items, events, and offers.
We comply with the Spam Act 2003 (Cth). Every marketing email we send will include a clear unsubscribe link, and you can opt out at any time. Transactional emails (such as order confirmations and gift voucher receipts) are not considered marketing and will continue to be sent as required to fulfil your order.
Children & minors.
Our website and online ordering service are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will delete it promptly.
Customers aged 13 to 17 may only place online orders with parental or guardian consent. Alcohol sales are strictly limited to customers aged 18 or over, with valid photo identification required at pickup.
Data breaches.
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. In the event of an eligible data breach that is likely to result in serious harm, we will:
- Notify the Office of the Australian Information Commissioner (OAIC); and
- Notify affected individuals as soon as practicable, with details of the breach, the information involved, the steps we are taking, and what you can do to protect yourself.
Disclosure overseas.
Some of the service providers we use operate outside Australia. When your information is disclosed to these providers it may be stored or processed in the following countries:
- United States, Square, Resend, Vercel.
Where we disclose personal information to overseas recipients, we take reasonable steps to ensure they handle your information in accordance with the Australian Privacy Principles or equivalent privacy protections.
Changes to this policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our service offering. The effective date at the top of this page will be updated when we do. We encourage you to review this page periodically.
Significant changes will be communicated via email (to customers on our mailing list) and prominently on the website home page for at least 14 days.
Contact & complaints.
For any privacy-related enquiry, request, or complaint, please contact us:
Email: hello@finallyminecoffee.com.au
Post: 14 Breed Street, Traralgon, Victoria 3844, Australia
Phone: (03) 5172 9845
We will respond to privacy complaints within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001