The Rusty Bucket Cafe

Privacy Policy

M & H J Webb Pty Ltd T/A The Rusty Bucket Coffee Company (ABN 56001662040)

This Privacy Policy applies to all products, services and websites owned by us. We are extremely concerned to protect your privacy and confidentiality. If you have any questions regarding this Privacy Policy then please contact us.

Where the business named above publishes its own privacy policy, that policy applies to your dealings with that business and prevails over this page to the extent of any inconsistency.

Information we collect

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy. Information that we may collect include the following:

If you do not want us to collect, store or use your information, then you should not use our products and services.

The app uses third party services that may also collect information: Google Play Services, Amazon Web Services, Meta, PayPal, Apple, Google Analytics, Firebase / Google Cloud, Net Payments, Pin Payments, Fat Zebra, Branch.io, One Signal, Sinch MessageMedia, Glitchtip.

How we use your information

Information provided by you may be used:

  • To personalise your experience when using our products, services and websites
  • To maintain our accounts
  • To provide you with the services which you request including processing orders and payments
  • To answer your enquiries
  • To verify your identity for security purposes
  • To contact you regarding your order, news and promotions on offer
  • By merchants that you have ordered services from to contact you regarding your order, news and promotions on offer
  • To improve our products, services and websites

Your information will never be shared with third parties, except in situations where a third parties services are employed by us in operating and conducting business, and under the condition that they too treat the information confidentially. Access to data is restricted to our employees and contractors on a need-to-know basis. We do not sell your data.

Marketing communications

A Store you have ordered from may send you offers and other marketing messages by email, SMS or push notification. The Store is the sender of those messages and decides who receives them and what they say. Each Store decides separately, so opting out of one Store’s offers does not affect another’s.

You can stop receiving offers at any time: use the unsubscribe link in any offer email, reply STOP to any offer SMS, or change your “Offers and news” preferences in your account settings, where you can turn off email, SMS and push notifications separately or mute an individual Store. Your request will be actioned within five working days, and usually much sooner. Stopping offers does not stop messages about your Orders, such as confirmations and notifications that an Order is ready.

A record is kept of the marketing consents and opt-out choices held for you, of the marketing messages sent to you, and of any opt-out reported by a messaging provider. These records are kept because the Spam Act 2003 (Cth) and the Unsolicited Electronic Messages Act 2007 (New Zealand) require the sender of a commercial electronic message to be able to demonstrate consent and to honour an opt-out. An opt-out you make continues to apply if a Store later changes messaging provider.

How we protect your information

  • We use Strong SSL Encryption to transmit sensitive data.
  • We use a PCI Compliant Payment Gateway to process credit/debit card details and payments. Credit/Debit Card data is encrypted and stored in the Payment Gateway providers data vault, is only accessible by authorised personnel, and is never stored on our servers.
  • Your account is password protected by a password of your choosing. It is your responsibility to use a unique, strong password and to keep this password confidential.
  • Security of any data transmitted through the Internet can never be 100% guaranteed, therefore you use our products, services, and website entirely at your own risk.

How to review, change or remove your data

You may sign in to your account at any time to review and update your data. To close your account and remove your data contact us from the email address that is registered to your account. Verified requests will be responded to within 30 days. Inactive accounts may be automatically disabled or erased according to law. For any other queries please contact us.

Compulsory disclosure

Like any business, we will be obliged to divulge your personal information if requested by a government agency with the proper authorisation, such as a court order.

Third party Websites

We are not responsible or liable for the content or activities of any third party Websites that we may link to or consume data from. If you have any questions in this regard, or believe that a Website that we are linked to is not within the context of the products and services we offer, then please contact us.

Changes to this Privacy Policy

This Privacy Policy may be altered from time to time and the changes will be published on this page. It is recommended that you check this page periodically for any changes.

Last updated: 15th June 2026