Privacy

Privacy Policy

How we collect, use, store, and protect your personal information, in compliance with the Australian Privacy Act 1988, the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

Last updated: 3 July 2026

1. Who We Are

Elios Table Pty Ltd ("we," "us," "our") operates the Elios Table platform (the "Platform"), an AI-powered gluten-free restaurant discovery service. This Privacy Policy explains how we handle your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as applicable international privacy laws including the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and the EU General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, password (encrypted) when you register
  • Search queries: cuisine preferences, gluten-free requirements, and location searches
  • User-generated content: reviews, ratings, dining journal entries, fryer check reports, venue suggestions, venue protocol submissions, and collection data
  • Partner enquiries: business name, contact name, email, phone, website, and message when you contact us about partnerships or venue claims
  • Newsletter subscriptions: email address only

2.2 Information Collected Automatically

  • Usage data: pages visited, time spent, referring URLs, browser type, device information
  • Analytics data: aggregate and anonymised usage statistics to improve the Platform
  • Cookies and similar technologies: to maintain sessions, remember preferences, and track analytics
  • Camera access: when you use the Menu Scanner or Package Scanner tools, the app accesses your device camera to photograph a menu or product packaging. The captured image is processed by our AI providers (e.g., Google Gemini) to analyse it for gluten-free safety. Images are used only for the immediate analysis and are not stored on your device or our servers unless you choose to save them.

3. How We Use Your Information

We collect and use your personal information for the following primary purposes (in accordance with APP 6):

  • To provide and operate the Platform, including processing searches and displaying results
  • To create and manage your user account
  • To display your community reviews and user-generated content
  • To send newsletter and marketing communications (only with your consent, in compliance with the Spam Act 2003 and the CAN-SPAM Act)
  • To respond to partner enquiries, venue claims, and correction requests
  • To improve our Platform, including training and improving our AI models and search algorithms
  • To comply with legal obligations and protect our legal rights

4. Disclosure of Information

We do not sell your personal information. We may disclose your information to:

  • Service providers: third-party hosting, analytics, email, and payment processing providers (e.g., Stripe for featured venue payments) who are bound by confidentiality obligations
  • AI providers: your search queries and menu scans may be processed by third-party AI providers (e.g., Google Gemini) to generate search results and menu analyses
  • Legal authorities: if required by law, court order, or to protect our legal rights
  • Venues: if you submit a venue protocol or claim, your submission details may be shared with the relevant venue for verification

5. Data Security

In accordance with APP 11, we take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. We use encryption, access controls, and secure hosting infrastructure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

6.1 Australian Users (Privacy Act 1988 / APPs)

  • APP 1: Access this Privacy Policy at any time
  • APP 12: Request access to the personal information we hold about you
  • APP 13: Request correction of inaccurate personal information
  • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act

6.2 California Residents (CCPA/CPRA)

  • Right to know: what personal information we collect, use, disclose, and sell (we do not sell personal information)
  • Right to delete: request deletion of your personal information
  • Right to correct: request correction of inaccurate personal information
  • Right to opt-out: of the "sale" or "sharing" of personal information (not applicable as we do not sell data)
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

6.3 Other US State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with applicable privacy laws have similar rights to access, correct, delete, and opt-out of certain data processing. Please contact us to exercise these rights.

6.4 EU/UK Residents (GDPR/UK GDPR)

If you are in the EU or UK, you have rights including access, rectification, erasure, restriction, portability, and objection. Our lawful basis for processing is legitimate interests (providing and improving the Platform) and consent (for marketing communications).

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Search results and session data are cached temporarily in your browser's sessionStorage and are not retained on our servers.

8. Children's Privacy

The Platform is not directed to children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Cookies

We use essential cookies to maintain your session and remember preferences, and analytics cookies to understand usage patterns. You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside Australia, including the United States (where our AI and hosting providers operate). We take reasonable steps to ensure that overseas recipients handle your information in accordance with the Privacy Act's Australian Privacy Principles (APP 8) and applicable international privacy laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes will be communicated to registered users via email.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us. Australian users may also lodge a complaint with the Office of the Australian Information Commissioner.

We use essential cookies to keep you logged in and remember your preferences, plus analytics cookies to improve the platform. See our Privacy Policy for details.