Privacy & terms of use

1. Privacy

Waffled is a dessert café in Yarraville, Victoria. We respect your privacy and we keep the personal information we hold to the minimum we need to serve you. This policy explains what we collect, why we collect it, who we share it with, and how you can get it corrected or removed.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whether or not we are legally required to. Marketing messages are handled in line with the Spam Act 2003 (Cth).

2. What we collect

In the café, you can buy from us without giving us your name. If you pay by card, we do not see or store your card number — that stays with our payment provider.

We collect personal information when you choose to give it to us, including:

• Online and phone orders — your name, phone number, email address, order details, and a delivery address if you ask for delivery.
• Payments — the amount, date and result of a transaction. Full card numbers are handled by our payment provider, not by us.
• Enquiries — anything you send us by email, phone, or a message on social media.
• Allergy and dietary information — only what you tell our team so we can serve you safely. This is health information, so we use it for that order and do not add it to any marketing list.
• Marketing sign-ups — your name and email or mobile number, if you ask to hear from us. We are not running a mailing list at the moment; if we start one, you will only be on it because you asked to be.
• Job applications — your résumé and the details you send with it.

We do not buy contact lists, and we do not collect personal information about you from anyone else without your knowledge.

CCTV. The café is fitted with security cameras, which record images inside the shop and at the entrance for the safety of our customers and staff and for the prevention of theft. Footage is stored securely, is viewed only by management or by police where there has been an incident, and is overwritten automatically in the normal course of recording. We do not use CCTV footage for marketing, and we do not use facial recognition.

3. How we use it

• To take, prepare, and hand over or deliver your order
• To contact you about an order — for example if an item has sold out or a delivery is running late
• To process payments and issue receipts
• To answer your questions, feedback or complaints
• To meet our food safety, tax and other legal obligations
• To send you offers and news, only if you have asked us to

We do not use your information for any unrelated purpose without telling you first.

4. Who we share it with

We never sell or rent your personal information. We share it only where we need to, with:

• Our online ordering and payment provider, Yoello — they process online orders and card payments on our behalf and hold that data under their own privacy policy.
• Delivery partners, where you have asked for delivery and we use one. They receive only your name, phone number and address.
• Our point-of-sale, accounting and email providers, who store data for us as part of running the business.
• Police, regulators or courts, where we are required or authorised by law.

Some of these providers store data on servers outside Australia. Where that happens, we take reasonable steps to check they protect your information to a comparable standard.

5. Storage & security

We keep personal information in password-protected systems, limit access to the people who need it to do their job, and delete or de-identify it when we no longer need it — except where we must keep records for tax, food safety or other legal reasons.

No system is perfectly secure. If we ever have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as we can.

6. Email & SMS

You will only hear from us if you have asked to, or if you have an existing relationship with us such as a recent order or a rewards account. We keep the frequency sensible — we are a dessert shop, not a newsletter.

Every marketing email and text includes a way to unsubscribe, and we action unsubscribes promptly. You can also reply to any message, or email us, and we will take you off the list.

We will never share your email address or mobile number with another business for their own marketing, and we will not disclose your individual details without your permission unless we are required to by law.

If you receive a message that claims to be from Waffled and you did not sign up for it, please tell us at contact@waffled.com.au so we can look into it.

7. Cookies & third parties

This website does not set cookies of its own, and we do not run analytics or advertising trackers on it. Two things on the site do load from other companies:

• Google Maps — the map on our Find Us section is embedded from Google, which may set cookies and collect usage data under Google's own privacy policy.
• Fontshare — our fonts load from Fontshare's servers.

When you click Order online, you leave this website and continue on our ordering provider's page, which has its own privacy policy and cookies. Our Instagram and TikTok links work the same way.

You can block or delete cookies in your browser settings. The site works fine without them.

8. Access, correction & complaints

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email us using the details below and we will respond within a reasonable time, normally within 30 days. We may need to verify who you are first. There is no charge to ask.

If you are unhappy with how we have handled your information, tell us first and we will try to fix it. If you are still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

9. Copyright

© 2026 MHDV Ventures Pty Ltd, trading as Waffled. All rights reserved.

The content on this website — including text, menu descriptions, photographs, illustrations, layout and code — belongs to us or is used with permission. You are welcome to view it, print it for your own use, and share links to it. You may not copy, republish, sell or reuse it for your own business without our written permission. For permission requests, email us using the details below.

10. Trade marks

"Waffled" and the Waffled logo are trade marks of MHDV Ventures Pty Ltd. Other company, product and brand names on this site — including any confectionery or ingredient brands named in our menu — are the trade marks of their respective owners, and are referred to only to describe what is in our food.

11. Accuracy & changes

We try to keep this site accurate, but it may contain typographical errors or out-of-date information. Menu items, prices and opening hours can change without notice, and an item shown here may be sold out. Photographs are for illustration; your order may look a little different.

We may update this policy from time to time. The current version always lives on this page, with the date it was last updated at the top. If we make a significant change to how we handle your information, we will say so here.

12. Contact us

For anything about this policy, your personal information, or permission to use our content:

MHDV Ventures Pty Ltd trading as Waffled
ABN 87 701 624 197 · ACN 701 624 197
16 Ballarat Street, Yarraville VIC 3013
Email contact@waffled.com.au