
1. Why do we have a Privacy Policy?
Retail Zoo Pty Ltd ACN 141 218 206 and its Related Entities (“Related Entities” means any entity that is a subsidiary, affiliate or otherwise related to Retail Zoo Pty Ltd) (referred to as “we”, “us” or “our”) are committed to protecting the privacy of your Personal Information.
Our privacy policy applies to all of the brands owned by us from time to time, including but not limited to, Boost Juice, Betty’s Burgers and Salsas (“Our Brands”/“Brands”).
This privacy policy describes the Personal Information we collect, how it is used and shared, and your choices regarding this Personal Information. This privacy policy applies to customers, franchisee partners, prospective franchisee partners, job seekers, suppliers and prospective suppliers of Our Brands in Australia (“AU”), New Zealand (“NZ”), the European Union (“EU”) and the United Kingdom (“UK”).
“Personal Information” means information that identifies you as an individual or from which you can be reasonably identified. This privacy policy sets out the way we handle Personal Information, and includes information on how we collect, use, disclose, keep secure and provide you with access to your Personal Information.
2. What Personal Information do we collect?
The types of Personal Information we may collect from you, for the purposes listed in this privacy policy, includes:
Contact and identity details: your full name, residential address, date of birth, age, gender, business address, email address, telephone number, occupation. For vendors, franchise applicants, job seekers and employees we may also collect signatures and photographs. For employment purposes, we may also collect birth certificates, visa information and passport details;
Financial and transaction details: credit card or payment details and transaction history;
Loyalty program information: information about your participation in Our Brands’ loyalty program(s), such as menu preferences, previous order information, IP address, individual interests, preferences, tastes and purchasing behaviour;
Location information: location information from a mobile device;
CCTV footage: such as in our stores, restaurants and support centre; and/or
Education and work experience: for job seekers and employees, education details, employment history and other information relating to your work experience.
We do not collect sensitive Personal Information, which is a sub-set of Personal Information and may include things such as health information or information about racial or ethnic groups or religious beliefs, without your express consent or as otherwise required by law. The exception to this is when you apply for a position, or to become a franchisee, in which case refer to the sections below titled “Employment Applications” and “Franchise Applications”. We will not use sensitive Personal Information for marketing purposes.
Anonymity
You have the option to deal with us anonymously. However, if you choose to deal with us anonymously, we may not be able to provide you with our products and/or services or make certain offers available to you without your Personal Information (e.g. we may not be able to process your job application, deliver our products to your home address, or contact you about our new products or promotions).
3. How do we collect Personal Information?
We collect your Personal Information in a fair and lawful manner, and not in an intrusive way. Where it is reasonably practical to do so, we will collect your Personal Information directly from you, including:
when you participate in a promotion, competition, promotional activity, survey, market research or customer behavioural activity;
when you subscribe to our mailing list or interact or follow our social media pages including Meta (which comprises Facebook and Instagram), X (formerly Twitter), Twitch and TikTok;
when you download or use Our Brands mobile applications such as VIBE for Boost Juice, Mex Club for Salsas and Betty’s Beach Club for Betty’s Burgers;
we collect information about how you interact with Our Brands and our products and/or services. This includes information such as access dates and times, mobile application features or pages viewed, mobile application crashes and other system activity;
when you provide us with Personal Information via our stores or head office or when you place an order in store, by telephone or via our mobile or electronic ordering system;
if you use social media, any information that you allow the social media site to share with us;
if you provide feedback and opinions about our products and/or services through any channel;
if you contact one of our support centres, we may record calls and so, we will collect any Personal Information you provide during the call;
if you are applying for a position with us, we will collect information as outlined in the section below titled “Employment Applications”;
if you are applying to become a franchisee with any of Our Brands, we will collect information as outlined in the section below titled “Franchise Applications”;
by accessing a website or mobile application via links in an email we have sent and/or by accessing a website or mobile application where you have identified yourself, you consent to the collection of such information where it is Personal Information. We may combine your anonymous or personal visitor session information, or other information collected through tracking technologies with other Personal Information collected from you from time to time, in order to understand and measure your online experiences, and to determine what products, promotions and services are likely to be of interest to you;
depending on the services that you use, and your mobile application settings or device permissions, we may collect your precise or approximate location information as determined through data such as GPS, IP address and Wi-Fi;
we may collect transaction details related to your use of our services, including your order details, date and time the service was provided, amount charged, and payment method. We do not store your credit card details as these details are masked and processed by our third party provider;
we may also collect Personal Information through cookies and other identification technologies, please refer to “Cookies and Web Beacons” section below;
if you use our “store locator” feature, you can agree to share your location so that you can easily find the nearest store. If you use the store locator feature on our websites the data is cached (temporarily stored) and then trashed;
if you use our mobile applications and have location services enabled, your most recent location each time you open the mobile application will be cached. Previous locations are trashed, but each mobile application open is stored; and/or
we may use CCTV in or around our businesses such as to observe trading conditions, investigate any type of incident and protect our personnel. We will restrict access to any footage.
In some circumstances, we may collect Personal Information from publicly available sources (e.g. company or land title registers), and/or third parties such as credit reporting agencies and marketing agencies. We may combine the Personal Information collected from these sources, with other Personal Information in our possession.
We collect your Personal Information in a number of ways. We may collect your Personal Information directly from you or in the course of our dealings with you, for example:
When we collect Personal Information from someone other than you, we will take reasonable steps to notify you, either before or as soon as reasonably practicable after collection. There may be exceptions to this notification requirement, such as where you have already been made aware of the collection, where non-compliance would not prejudice your interests, or where it is not reasonably practicable for us to notify you. If you have any questions about how we collect Personal Information from third parties, please contact the relevant Privacy Officers for Our Brands using the details set out at section 17.
4. Cookies and web beacons
We may use cookies and other identification technologies on our websites, emails, and online ads for purposes described in this privacy policy.
A “cookie” is a small text file that is stored on your browser or device that can identify you as a unique customer and store your personal preferences.
As you navigate through our websites or other mediums, certain Personal Information can be passively collected (by us or our vendors) using various technologies such as cookies, internet tags or web beacons, and navigational data collection (e.g. log files, server logs and clickstream data).
Using “cookies” enables us to collect data regarding your personal preferences, including what products you have ordered, at what times and in what amounts, the pages you have visited in what order and so forth. This enables us to recognise you as a specific customer and to help us and our third-party service providers present targeted and customised advertising to you (e.g. we can keep track of the drinks you like such that if you consent, we can send you information about new products and promotions that you might be interested in).
If you do not wish to receive cookies, you can change your browser settings such that your device does not accept cookies or contact our Privacy Officer using the details set out at section 17. However, please note that certain areas of our websites may only be accessed in conjunction with cookies.
For Boost Juice users: If you live in the EU or the UK and interact with our Boost Juice Brand, please review our “cookies and other technologies policy for the UK and EU” sections below.
5. Third-party links
Our websites and/or mobile applications may include links to third-party websites, plug-ins and mobile applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control, endorse or make representations about these third-party sites and are not responsible for their privacy statements. When you leave our websites and/or mobile applications, we encourage you to read the privacy notice of every website you visit. If you choose to give Personal Information to unrelated third parties, it will not be covered by this privacy policy.
On our online services, we may also have providers of other services like apps, tools, widgets and plug-ins (e.g. Instagram “Like” features), which may also use automated methods to collect information about how you use these features. These organisations may use your Personal Information in line with their own privacy policies, and it is your responsibility to review those privacy policies to understand how your Personal Information may be handled.
6. Employment applications
We collect Personal Information when you interact with us with regards to employment, such as when you:
apply for a position with us;
complete an employment form for us;
contact one of our support centres in respect to an employment opportunity; and/or
visit our websites, social media channels or mobile applications.
In considering your application, we may also obtain Personal Information about you from third parties, such as from:
your previous employers;
recruitment agencies;
nominated referees; and/or
government agencies and regulatory authorities.
Subject to your consent, we may also collect sensitive Personal Information about you such as:
information about your health (including any disability);
visa information;
birth certificate;
passport information;
any criminal record, if it is relevant to the role that you are applying for; and/or
whether you identify as Aboriginal or Torres Strait Islander (if you are based in AU).
We collect Personal Information for a variety of purposes, including but not limited to:
verifying your identity;
Identifying your working rights;
communicating with you;
assessing you for a position with us; and/or
storing your Personal Information for future employment opportunities.
If you do not provide us with the Personal Information we request, we will be unable to do one or more of the above.
We may disclose your Personal Information to:
referees or previous employers;
recruitment agencies or agencies or contractors acting on our behalf;
within our Related Entities;
our professional advisors;
our brokers and/or insurers;
Government agencies and regulatory authorities;
law enforcement agencies to verify whether you have a criminal record; and/or
educational organisations to the extent necessary to verify your qualifications.
If we engage third party contractors to perform services for us which involves handling Personal Information, we will take reasonable steps to prevent the contractor from using the Personal Information except for the purpose for which it was supplied.
We will hold your Personal Information for future job opportunities with us, unless you tell us not to.
7. Franchise applications
We collect Personal Information about franchise applicants. This may include Personal Information about:
residency status;
employment history;
financial capacity (including bank account information; and/or
other information relating to your qualifications and experience.
We collect your Personal Information when you:
apply to be a franchisee with any of Our Brands;
complete a form for any of Our Brands (e.g. Franchise Application Form);
contact our support centres;
visit our websites, social media channels and/or mobile applications; and/or
otherwise provide Personal Information to us.
We may combine and compare Personal Information that we hold about you with other Personal Information collected from, or held by, others.
In considering your application, we may also obtain Personal Information about you from third parties, e.g. from your previous employers, business contacts or nominated referees.
Subject to your consent, we may also collect sensitive Personal Information about you such as:
information about any criminal record you may have; and/or
your membership of any professional or trade association.
We collect Personal Information for any one or more of the following purposes:
assessing your application to become a franchisee;
assessing whether you are suitable to progress to each stage of the franchise recruitment process; and/or
storing your information for future franchise opportunities.
If you do not provide us with the Personal Information we request, we will be unable to do one or more of the above.
We may disclose your Personal Information to:
referees or previous employers;
recruitment agencies or agencies or contractors acting on our behalf;
within our Related Entities;
our professional advisors;
our brokers and/or insurers;
law enforcement agencies to verify whether you have a criminal record; and/or
educational organisations to the extent necessary to verify your qualifications.
If we engage third party contractors to perform services for us which involves handling Personal Information, we will take reasonable steps to prevent the contractor from using the Personal Information except for the purpose for which it was supplied.
8. Franchisees
A number of Our Brands businesses are owned and operated by franchisees. Our Brands franchisees are expected to apply similar policies as this privacy policy. If you are concerned that a franchisee is in breach of this privacy policy, please contact the relevant franchisee entity or us directly.
This privacy policy does not apply to our franchisee’s conduct on websites or mobile applications. They operate independently.
9. Personal information retention and deletion
We retain user profile and other information for as long as you maintain your loyalty membership or other account(s) with any of Our Brands.
Users may request deletion of their accounts with any of Our Brands at any time by contacting our Privacy Officer using the details set out at section 17. Following such request, the account and Personal Information will be deleted by the relevant Brand, unless we are legally required to retain it. Please note that if your personal information is held by more than one of Our Brands, a deletion request to one Brand will only remove your information from that specific Brand. If you wish for your personal information to be deleted across all Our Brands, please specify this in your request.
If you withdraw consent to the collection or use of Personal Information with a particular Brand, we will delete the Personal Information held by that Brand, unless we are legally required to retain it. Please note that if your Personal Information is held by more than one of Our Brands, withdrawing consent for one Brand will not affect the other Brands. If you wish to withdraw consent across all Our Brands, please specify this in your request.
We only keep your Personal Information for as long as it is required for the purpose for which it was collected or as otherwise required by law. We will take appropriate measures to destroy or permanently de-identify your Personal Information if we no longer need to retain it. These measures may vary depending on the type of information concerned, the way it was collected and how it was stored.
There may be circumstances relating to employment, franchise applications, inappropriate or legal conduct, which prevent us from permanently deleting your Personal Information (e.g. in the case of fraud or where litigation has been threatened).
10. How your Personal Information will be used
We may collect, hold and use your Personal Information for the following reasons:
Providing services and features
We use the Personal Information we collect to provide, personalise, maintain and improve our products and/or services. This includes using the Personal Information to:
create and update your account and verify your identity;
manage your loyalty memberships by giving you points and rewards;
assist us in providing products and/or services to you and to maintain your accounts on our websites and mobile applications;
process orders you place with Our Brands in our stores or via our electronic or mobile ordering system, providing you with email or SMS confirmation of your orders, processing payments, providing you with any of Our Brands products and processing refunds where applicable;
perform internal operations necessary to provide Our Brands products and/or services and improve our service and customer experience, including testing the usability and effectiveness of our systems and services, to troubleshoot software bugs and operational problems, to conduct data analysis, testing, and research, and to monitor and analyse shopping patterns, usage and activity trends;
provide features to personalise your experience on our platforms;
identify services and/or products that may be of interest to you;
assist you with remembering and re-ordering from any of Our Brands menu in future as well as provide you with discounts (where applicable);
administer and conduct traineeships;
facilitate our internal business operations, including fulfilment of any legal and regulatory requirements;
facilitate the “5 star” feedback program;
process and consider your employment application and conducting reference checks (refer to Employment Application section above); and/or
provide information that you request about our franchises and processing and considering your franchise application and conducting record checks (refer to Franchise Application section above).
We do not sell your Personal Information to third parties.
Meta and TikTok Custom Audiences
If you use Meta and/or TikTok, we may use your email address in an encrypted format to match with your Meta and/or TikTok profile so that we can provide you with personalised advertising on Meta and/or TikTok. This is subject to the privacy settings you have chosen on Meta and/or TikTok.
Meta and TikTok Lookalike Audiences
If you use Meta and/or TikTok, we may use your email address in an encrypted format to enable Meta and/or TikTok to find other registered users of their services that share similar interests to you based on how you interact with any of Our Brands and what information Meta and/or TikTok has about you. This is subject to the privacy settings you have chosen on Meta and/or TikTok.
Customer support
We use the Personal Information we collect to provide customer support services, including to:
direct your questions to the appropriate customer support person;
investigate and address your concerns;
monitor and improve our customer support responses; and/or
administer, process and respond to your enquiries or feedback.
Legal proceedings and requirements
We may share your Personal Information if we believe it is required by applicable law, regulation, operating agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
Communications from Our Brands
We may use the Personal Information we collect to communicate with you about:
promoting and marketing current and future products, services, promotions, offers, studies, surveys, news, updates and events;
conducting, and allowing you to participate in, a promotion, competition, promotional activity, survey or market research; fulfil any related awards, and serve you relevant ads and content about Our Brands products and/or services and those of our business partners; and/or
special promotions and offers and analysing Our Brands products and/or services so as to improve and develop new products and/or services.
With your Consent
We may share your Personal Information, other than as described in this privacy policy, if we notify you and you consent to the sharing.
Vendors
We may share your Personal Information with vendors who provide services to us, such as fulfilling orders (e.g. UberEats, DoorDash), carrying out research (data processing), managing promotions, personalising customer experiences and other information technology services. We do not permit these vendors to use this information or to share it for any purpose other than to provide services on our behalf.
We collect Personal Information of our suppliers in order to receive products and/or services, process payments and activities related to maintaining supplier accounts and contracts.
11. Marketing Opt-Outs
By providing your Personal Information to us, you consent to receiving direct marketing communications from us. These communications (including direct marketing materials) may be delivered via email, text message, phone, other digital services (such as through Our Brands mobile apps), or through internet-based marketing, including targeted online advertising and online behavioural marketing.
At any time, you may opt-out of receiving direct marketing communications from us or Our Brands. We will then ensure your details are removed from our and/or Our Brands mailing lists and stop sending direct marketing communications to you within a reasonable period after your request is made (usually within 5 business days from receiving your request). To opt-out, follow the instructions in the marketing communications we send you or contact our Privacy Officer using the details set out at section 17.
Please note that if you opt out, we may still send you non-promotional messages as permitted by applicable privacy laws. These may include transactional or service related communications, such as receipts, updates about your account, important notices about your transactions, or information necessary for Our Brands to provide you with products and/or services you have requested.
12. Disclosure of personal information to third parties
We may disclose Personal Information we collect from you:
to our Related Entities, suppliers, consultants, contractors or agents for the purposes set out in this privacy policy or for other purposes directly related to the purpose for which the Personal Information is collected;
to relevant federal, state and territory authorities, including but not limited for the purpose of investigating a food safety and/or health issue;
to our franchisee partners if you have made an enquiry or complaint relating to a store that is owned and operated by one of our franchisees;.
where the law requires or authorises us to do so;
to our professional advisors;
to others that you have been informed of at the time any Personal Information is collected from you; and/or
with your consent (express or implied) to others.
13. Overseas disclosures
Some of our Related Entities and third-party products and/or services providers are located outside of AU, NZ, the EU and the UK. We may therefore need to share your Personal Information with organisations or persons located outside of AU, NZ, the EU and the UK.
The countries in which these organisations or persons are located will depend on the circumstances, but currently and in the course of our ordinary operations, we disclose Personal Information in the United States.
If we disclose Personal Information to a third party in a country which does not have equivalent privacy laws to AU, NZ, the EU and the UK, we will take steps to ensure that you are provided with appropriate safeguards in respect of your Personal Information. This might include but is not limited to entering into contractual clauses with that third-party that place obligations on the third-party in relation to their handling of your Personal Information.
14. Security
We take protecting your Personal Information seriously and are continuously developing our security systems and processes. We take reasonable steps to protect your Personal Information from misuse and loss and unauthorised access, modification or disclosure. We do this by having physical and electronic security systems and by limiting who can access your Personal Information. We also have online and network security systems in place for our websites, so that the information you provide us online is protected and secure. Your Personal Information may be held in electronic or hard copy form. We use third party service providers to store some Personal Information.
As our websites and mobile applications are linked to the internet, which is inherently insecure, we cannot provide any assurance regarding the security of the information you communicate to us online. We cannot guarantee that such information will not be intercepted so you transmit such information at your own risk. Please contact our Privacy Officer using the details set out at section 17, if you become aware of, or suspect, any breach of security.
If we become aware of a data breach that is likely to result in serious harm (e.g. your Personal Information was shared with unauthorised persons) we will notify you as soon as is practicable and, if required, the local privacy commissioner about that actual or possible breach.
15. Access to personal information and correction
We aim to ensure that any Personal Information we obtain from you is accurate. You can request access to your Personal Information or advise us of any required correction, by forwarding a request to our Privacy Officer using the details set out at section 17
We will require you to verify your identity and to specify what Personal Information you require. We may charge a fee to cover the cost of verifying the application and locating, retrieving, reviewing and copying any material requested. If the Personal Information sought is extensive, we will advise the likely cost in advance and can help to refine your request if required.
Depending on your location, there are exceptions which may affect your right to access your Personal Information we hold, including the following:
access would pose a serious threat to the life or health of any individual;
access would have an unreasonable impact on the privacy of others;
a frivolous or vexatious request;
the information relates to a commercially sensitive decision-making process;
access would be unlawful or denying access is required or authorised by law;
access would prejudice enforcement activities relating to criminal activities and other breaches of law, public revenue, a security function, or negotiations with the individual; and/or
legal dispute resolution proceedings.
If we refuse to provide access or correction of your Personal Information, we will provide you with reasons for the refusal and mechanisms available if you wish to lodge a complaint.
16. Queries and complaints
If our privacy policy does not answer a question that you have about how we manage your Personal Information, please contact our Privacy Officer using the details set out at section 17
Although we are committed to always ensuring that there is strict adherence to the local privacy laws, in the event that you are dissatisfied in any way with the collection, use, storage and/or disclosure of your Personal Information or believe that there has been a breach, we invite you to contact us as soon as possible. We have appointed an internal Privacy Officer to whom your complaints or any queries may be directed to at the contact details set out in section 17.
We will provide a response within 30 days. We may also ask you to participate in a dispute resolution scheme (such as mediation) in order to resolve your complaint, where applicable.
If you are not satisfied with the manner in which we deal with your complaint in relation to one Our Brands, you may refer it to the local privacy commissioner in AU or NZ at:
• Australia:
https://www.oaic.gov.au/privacy/privacy-complaints
• New Zealand:
https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner
For any queries or complaints relating to matters in the EU and the UK, and relevant contact details, please see the “Special information for EU users” and “Special information for UK users” sections below.
17. Privacy officer contact details
Queries and/or complaints relating to matters in AU and NZ should be directed to the Privacy Officer at:
Email:
Boost Juice and Retail Zoo: privacy@boostjuicebars.com
Salsas: privacy@Salsas.com
Betty’s Burgers: contact@bettysburgers.com.au
Phone: (03) 9508 4400
Address: Retail Zoo Privacy Officer Level 8, M-City Office Building and Business District, 2107-2125 Dandenong Road, Clayton Victoria 3168
For any queries or complaints relating to matters in the EU and the UK, and relevant contact details, please see the “Special information for EU users” and “Special information for UK users” sections below.
18. Changes to this privacy policy
We may occasionally make changes to this privacy policy. We will post any changes to this privacy policy on our websites and mobile applications. When we make material changes to this privacy policy, we will provide you with notice pursuant to applicable local laws.
To the extent permitted under applicable law, by using our products and/or services after such notice, you consent to our updates to this privacy policy.
We encourage you to periodically review this privacy policy for the latest information on our privacy practices.
19. Specific provisions for Boost Juice users
19.1. Boost Juice related entities
In addition to the purposes set out in this privacy policy, we also share Personal Information with our Related Entities to help us conduct data processing on their behalf (e.g. Boost Juice in AU processes and stores Personal Information of EU and UK customers in AU on behalf of its master franchisee partner(s) in the EU and UK).
Our Boost Juice has master franchisees who are owned by independent business owners. As a result, each Boost Juice master franchisee are responsible for their own data protection compliance.
If you live in the EU or the UK and interact with Boost Juice, please review our “Special information for EU users” and “Special information for UK users” below, or visit your country’s Boost Juice website.
19.2 Special information for EU users
The European Union General Data Protection Regulation (“GDPR”) contains data protection requirements that apply from 25 May 2018.
The following section sets out Boost Juice’s policies for processing Personal Information (referred to as “personal data” in the GDPR) of customers in the EU as a data processor.
If you are a resident of the EU and use any Boost Juice services in the EU, then in addition to this privacy policy, the following applies to you.
Data controller
The data controller for the EU Personal Information you provide or that is collected by Boost Juice or its Related Entities, is the Boost Juice entity in the jurisdiction where your Personal Information is collected, namely:
Estonia:
Data controller: Indrek Sei
Privacy officer: Megamahlad Holding OÜ
Email: indrek.sei@boostjuicebars.ee
Address: Külma 19 Tallinn 10618 Estonia
Questions, comments and complaints about Boost Juice’s data practices with Personal Information can be submitted to Boost Juice’s data controller at the details set out above.
What EU Boost Juice personal information is collected?
The kinds of Personal Information the Boost Juice EU master franchisee(s) may collect from EU customers/users will depend on what type of interaction they have with Boost Juice in the EU, but this may include (among other things):
name;
email address;
gender;
date of birth;
loyalty program member number;
registration date;
last update;
verification date;
issuing store ID;
card type;
mobile number;
physical address; and/or
favourite item.
How personal information is collected
Personal Information in the EU is collected by Boost Juice master franchisee(s) and their associates in accordance with their own privacy policies located at:
Estonia:
https://www.boostjuicebars.ee
Boost Juice master franchisees may engage third party contractors to perform services for them and us which involves handling Personal Information, in which case we take reasonable steps to prevent the contractor from using the Personal Information except for the purpose for which it was supplied.
Why is the personal information collected and how do we use it?
Boost Juice collects Personal Information as a processor on behalf of its EU master franchisee(s). Boost Juice uses the data to run reports solely for the purpose of providing these reports to its master franchisee(s). These reports profile customers (amongst other things) in terms of sales data, registrations, redemptions, engagements/loyalty, age and gender. Boost Juice does not use the reports or Personal Information for any purpose independent of providing the reports to its master franchisee(s).
EU Boost Juice customer rights
If you are a Boost Juice VIBE user or customer in the EU, you have additional rights with respect to Boost Juice’s handling of your Personal Information which are set out below. Please contact us if you would like to exercise any of these rights or other rights available to you under the GDPR. Users outside the EU may also request explanation, correction, deletion or copies of their Personal Information.
In order to comply with the request, we may ask you to verify your identity.
We will fulfil the request by sending your copy electronically, unless the request specified a different method.
Explanation and copies of your personal information
You have the right to:
request an explanation of the data that Boost Juice has about you and how Boost Juice uses that data;
receive a copy of the Personal Information that Boost Juice collects about you; and/or
have the data we hold about you transferred to another organisation.
Correction of your personal information
If Boost Juice has Personal Information about you that you believe is inaccurate, you are welcome to contact us so we can update it and keep your Personal Information accurate.
Deletion of your personal information
Any Personal Information that is no longer needed for the purposes specified, will be deleted and/or deidentified.
Users may request deletion of their Boost VIBE accounts and other Personal Information at any time. Users may request deletion via email or over the phone.
Objections and complaints
Users in the EU have the right to object to Boost Juice’s processing of Personal Information, including for marketing purposes based on profiling and/or automated decision making.
You have the right to lodge a complaint with the Information Commissioner’s Office in the EU. Further information, including contact details, is available at
https://www.edps.europa.eu/data-protection/our-role-supervisor/complaints_en.
You may also submit questions, comments or complaints to Boost Juice’s data controller at the details set out above.
Boost Juice will make every effort to provide these right but there may be circumstances where these rights may be limited (e.g. fulfilling your request would reveal personal data about another person, present a security risk or where the information contains legal privilege).
Grounds for processing
When EU customers register and use the Boost Juice VIBE platform (and other associated Boost Juice platforms), customers provide information detailed above which in turn, is provided to Boost Juice in AU.
The GDPR requires whenever we or our master franchisee(s) process your Personal Information we have to have something called a “legal basis” for what we do.
The different grounds Boost Juice relies on for processing Personal Information are (amongst other things):
Consent: You have told us you are happy for us to process your Personal Information for a specific purpose. Where processing your Personal Information is based on your consent, you may withdraw this consent at any time (the withdrawal of the consent will not affect the lawfulness of processing based on consent before its withdrawal).
Legitimate interests: The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights. Boost Juice must collect, process and use certain Personal Information in order to provide its services to its master franchisees. This includes: º to provide the services to its master franchisees; º for research and analytical purposes (e.g. analysing usage trends to improve user experience); and/or º for direct marketing purposes (e.g. analysing data to identify trends and tailor marketing messages to user needs.
Performance of a contract: We must process your Personal Information in order to be able to provide you with one of our products and/or services.
Children’s privacy notice
Our policy is not to collect Personal Information from any person under 13-years-old unless collection is for a specific activity and that person’s parent or guardian has provided us with written consent to collect their Personal Information for that specific activity.
Whilst some of our Boost Juice products (e.g. smoothies) are targeted towards children, we do not intend for our online services to be used by anyone under the age of 13. If you are a child under the age of 13, PLEASE DO NOT provide any Personal Information to us. If you are a parent or guardian and believe we may have collected Personal Information about your child, please contact us.
Data protection officer
Boost Juice has appointed a Data Protection Officer to ensure we protect the Personal Information of our customers (and others) and comply with data protection legislation.
If you have any questions about how Boost Juice uses your Personal Information that are not answered here, or if you want to exercise your rights regarding your Personal Information, please contact our Data Protection Officer at:
E-mail: privacy@boostjuicebars.com
Phone: (03) 9508 4400
Address: Retail Zoo Legal Department Level 8, M-City Office Building and Business District, 2107-2125 Dandenong Road, Clayton Victoria 3168
International transfers of personal information
EU customers data (including Personal Information) will transfer between AU and the EU. Please refer to your countries specific privacy policy for further details about other international data transfers.
How long will we keep EU personal information for?
We will keep your Personal Information for the purposes set out in this privacy policy, and in accordance with the law and relevant regulations. We will only retain your Personal Information for as long as we need it for our legitimate interest in accordance with applicable laws. After such time, we will either delete or de-identify your Personal Information. We will delete or de-identify your Personal Information upon request.
19.3 Special information for UK users
The United Kingdom General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”) set out requirements for how organisations collect, use and protect personal data of individuals located in the UK.
The following section sets out Boost Juice’s policies for processing personal data of customers in the UK as a data processor.
If you are a resident of the UK and use any Boost Juice services in the UK, then in addition to this privacy policy, the following applies to you.
Data controller
The data controller for the UK personal data you provide or that is collected by Boost Juice or its Related Entities, is as follows:
Data controller: TD4 LTD Company Registration 05761251
Privacy officer: Boost Juice Bars (UK) Ltd
Email: boost@boostjuicebars.co.uk
Address: Abbots Moss Hall, The Pavilion, Oakmere, CW8 2ES, UK
Questions, comments and complaints about Boost Juice’s data practices with Personal data can be submitted to Boost Juice’s data controller at the details set out above.
What UK Boost Juice personal data is collected?
The kinds of personal data the Boost Juice UK master franchisee(s) may collect from UK customers/users will depend on what type of interaction they have with Boost Juice in the UK, but this may include, among other things:
name;
email address;
gender;
date of birth;
loyalty program member number;
registration date;
last update;
verification date;
issuing store ID;
card type;
mobile number;
physical address; and/or
favourite item.
How that personal data is collected
Personal data in the UK is collected by Boost Juice master franchisee(s) and their associates in accordance with their own privacy policies located at:
https://www.boostjuicebars.co.uk/privacy-policy
Boost Juice master franchisees may engage third party contractors to perform services for them and us, which involves handling personal data, in which case Boost Juice and its franchisees will ensure such third parties are bound by written agreements that meet UK GDPR standards, including appropriate data protection and confidentiality obligations.
Why is the personal data collected and how do we use it?
Boost Juice collects personal data as a processor on behalf of its UK master franchisee(s). Boost Juice uses the data to run reports solely for the purpose of providing these reports to its master franchisee(s). These reports profile customers (amongst other things) in terms of sales data, registrations, redemptions, engagements/loyalty, age and gender. Boost Juice does not use the reports or personal data for any purpose independent of providing the reports to its master franchisee(s).
UK Boost Juice customer rights
If you are a Boost Juice VIBE user or customer in the UK, you have additional rights under the UK GDPR which are set out below. Please contact us if you would like to exercise any of these rights or other rights available to you under the UK GDPR. Users outside the UK may also request explanation, correction, deletion or copies of their personal data.
In order to comply with the request, we may ask you to verify your identity.
We will fulfil the request by sending your copy electronically, unless the request specifies a different method.
Access and Portability
You have the right to:
request an explanation of the personal data that Boost Juice has about you and how it uses that data;
receive a copy of the personal data that Boost Juice collects about you; and/or
have the data we hold about you transferred to another organisation.
Correction of your personal data
If Boost Juice has personal data about you that you believe is inaccurate, you are welcome to contact us so we can update it and keep your information accurate.:
Deletion of your personal data
Any personal data that is no longer needed for the purposes specified, will be deleted and/or deidentified in accordance with UK GDPR Article 17.
Users may request deletion of their Boost VIBE accounts and other personal data at any time by contacting us via email or phone.
Objections and complaints
Users in the UK have the right to object to Boost Juice’s processing of personal data, including for marketing purposes based on profiling and/or automated decision making.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. Further information, including contact details, is available at
https://ico.org.uk/make-a-complaint
Boost Juice will make every effort to facilitate these rights, but there may be circumstances where rights are limited (e.g. fulfilling your request would reveal personal data about another person, present a security risk or involve information subject to legal privilege).
Legal grounds for processing
When UK customers register and use the Boost Juice VIBE platform (and other associated Boost Juice platforms), customers provide information detailed above which in turn, is provided to Boost Juice in AU.
The UK GDPR requires whenever we or our master franchisee(s) process your Personal data that we have lawful basis.
The different grounds Boost Juice relies on for processing personal data are (amongst other things):
Consent: You have provided consent for us to process your personal data for a specific purpose. You may withdraw consent at any time (the withdrawal of the consent will not affect processing lawfully carried out before withdrawal).
Legitimate interests: The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights.
Boost Juice must collect, process and use certain personal data in order to provide its services to its master franchisees. This includes: º to provide customer support; º for research and analytical purposes (e.g. analysing usage trends to improve user experience); and/or º for direct marketing purposes (e.g. analysing data to identify trends and tailor marketing messages to user needs.)
Performance of a contract: We must process your personal data to provide you with one of our products and/or services.
Children’s privacy notice
Whilst some Boost Juice products (e.g. smoothies) are marketed towards children, we do not intend for our online services to be used by anyone under the age of 13. If you are under the age of 13, PLEASE DO NOT provide any personal data. If you are a parent or guardian and believe we may have collected such data about your child, please contact us.
Data protection officer
Boost Juice has appointed a Data Protection Officer to ensure compliance with the UK GDPR.
If you have questions about how Boost Juice uses your personal data or you wish to exercise your rights, please contact our Data Protection Officer at:
E-mail: privacy@boostjuicebars.com
Phone: (03) 9508 4400
Address: Retail Zoo Legal Department Level 8, M-City Office Building and Business District, 2107-2125 Dandenong Road, Clayton Victoria 3168, Australia.
International transfers of personal data
UK customer data (including personal data) may be transferred between AU and the UK. Such transfers will be made in compliance with Chapter V of the UK GDPR, using UK International Data Transfer Addendum or ICO- approved standard contractual clauses to ensure adequate protection.
Data retention
We will keep your personal data for the purposes set out in this policy and in accordance with applicable law and regulations. We will only retain your personal data for as long as necessary for our legitimate business interests and legal obligations. After such time, we will delete or de-identify your data.
19.4 Cookies and other technologies policy for the UK and EU
We use cookies to make our website function properly, to understand how you as interact with our website, and to improve your browsing experience. Some cookies are strictly necessary and do not require your consent. Others are optional, and we will ask for your consent before placing them on your device.
There are two types of cookies:
First-party cookies – set by us.
Third-party cookies – set by others (e.g. Google Analytics).
You can find details of all the cookies we use below.
Strictly Necessary Cookies
These cookies are essential for the website to function and cannot be switched off in our systems. They are usually set in response to actions made by you which amount to a request for services, such as logging in, setting your privacy preferences, or completing forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.
These cookies do not store any personally identifiable information.
Cookies used:
OptanonConsent – remembers your cookie consent preferences. (Duration: 1 year)
OptanonAlertBoxClosed – remembers when you’ve closed the cookie banner. (Duration: 1 year)
PHPSESSID – keeps your session active while you browse the site. (Session only)
Performance and Analytics Cookies
These cookies help us understand how visitors use our site so we can measure and improve performance of our site. They help us know which pages are the most and least popular or how long you stay on them. We use Google Analytics to collect this data and the information collected is aggregated and anonymous.
Google may process information in accordance with its own privacy policy which can be accessed here:
https://policies.google.com/privacy?hl=en-US
We will only set these cookies if you have given your permission.
Cookies used:
_ga – used to distinguish users (retention: 2 years).
_gid – used to distinguish users (retention: 24 hours).
_gat – helps to control how often requests are sent (retention: 1 minute).
Managing your preferences
When you first visit our site, you’ll see a cookie banner where you will have the option to:
accept all cookies;
reject non-essential cookies; or
customise your preferences.
If you clear your cookies or use a different device or browser, you will need to reselect your preferences.
Legal basis
For strictly necessary cookies, our lawful basis is legitimate interests (to ensure the proper functioning of our website).
For all other cookies, our lawful basis is consent under:
the UK GDPR and Privacy and Electronic Communications Regulations for UK users; and
the EU GDPR and ePrivacy Directive for users in the European Economic Area (EEA).
Third-party cookies
Some cookies are set by third parties, like social media or analytics partners. These third parties may collect and use your data according to their own privacy and cookie policies. We encourage you to review those policies for more information about how they use your data.
Your rights
Depending on your location, you have rights under data protection laws, including:
changing or withdrawing your consent at any time;
accessing, correcting or deleting your personal data; and
lodging a complaint with your local data protection authority.
For UK users: you can contact the Information Commissioner’s Office (ICO) at
www.ico.org.uk.
For EU users: you can contact your national data protection authority, a list of which can be found here:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
19.5 Boost Juice Overseas
If you interact with Boost Juice outside of AU, NZ, the EU and the UK, and would like to contact us or for further information, please do so via the below contact details:
Brunei: at http://www.boostjuicebars.com.my
Chile: at https://www.boostjuice.cl
Malaysia: at http://www.boostjuicebars.com.my
Singapore: at http://boostjuicebars.com.sg or on barry@boostjuicebars.com.sg
UAE: at https://www.boostjuice.ae/en
Indonesia: at https://www.boostjuicebars.co.id
Thailand: at https://www.boostjuicebars.in.th
Cambodia: at https://www.facebook.com/Boostjuicekhcambodia
Vietnam: at https://boostjuice.vn/en