Young Foods Pty Ltd (ABN 43 695 554 799) ("Young Foods", "we", "us") makes frozen, ready-to-cook chicken for foodservice businesses in Australia. This policy explains what personal information we collect, why we collect it, who we share it with and how you can access or correct it.
We comply with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) when we handle personal information.
This policy applies to our website at youngfoods.com.au, our online ordering and customer portal, and the emails, forms and messages you send us. It does not cover other websites we link to (for example Instagram or Google Maps) — those have their own privacy policies.
Who we are and how to contact us
- Legal name: Young Foods Pty Ltd
- ABN: 43 695 554 799
- Address: U1, 526 Maroochydore Rd, Kunda Park QLD 4556, Australia
- Privacy enquiries: email hello@youngfoods.com.au or phone (07) 5239 0159
The information we collect
We only collect information we need to run our business with you. Most of our customers are businesses, so much of what we hold is business contact information about the people who work for them.
Wholesale customers
When you open an account, order, or use the customer portal, we collect:
- Business details: store or venue name, delivery address, and — if you apply for trade credit — the legal entity name, ABN and the credit amount you ask for.
- Contact details: the name, email address and phone number (mobile and/or landline) of your main contact and, if different, your accounts contact.
- Account preferences: your preferred language and how you want to pay (bank transfer before dispatch (COD), direct debit or a credit account).
- Orders and billing: the products and quantities you order, delivery details, optional purchase order numbers, invoices, payment status and our records of deliveries.
- Messages: the messages you send us through the customer portal, and requests to change your details.
- Sign-in records: when a sign-in link or SMS code is issued and used, and when it expires. We keep these records to protect your account.
We do not collect or store your card or bank account details on our systems. Card payments made through the payment link on a Xero invoice are processed by Stripe, and direct debit arrangements are handled by Pinch. Those details go directly to them.
Enquiries and sample requests
When you use our contact form, we collect your name, email address, company name (optional) and your message. When you request a sample, we collect your business or venue name, your name, email address, phone number and suburb (optional), the products you're interested in and any message you add.
Job applicants
When you apply for a job, we collect your name, email address, phone number, the suburb you live in, the kind of work you're looking for, your right to work in Australia, your earliest start date, what you tell us about yourself and your resume.
We use this information only for recruitment. We keep an application — including the copy of your application and resume that arrives in our email inbox — for up to 12 months and then delete it. You can ask us to delete your application sooner at any time.
Our employees
Information about people we employ, and the onboarding documents they complete, is handled under a separate notice given to them when they join. Employee records are generally exempt from the Privacy Act, but we still look after them carefully.
Suppliers and other business contacts
When you supply goods or services to us, we collect the business contact details and documents (such as invoices) that you send us.
Staff sign-in with Google
Our own team members can sign in to our internal system with their Google account. When they do, Google shares only their basic profile information — name, email address and profile picture — with us. We do not request access to their Gmail, Drive, contacts or any other Google data. We use this information only to identify the team member and give them access to our internal system. We do not use it for advertising, we do not sell it, and we do not share it with anyone except the service providers that run our system (listed below).
Emails you send us
Emails sent to our business addresses (for example hello@, order@, accounts@ and customer@youngfoods.com.au), and our replies, are copied into our customer records system so our team can see the full history of a conversation and follow up. This includes any attachments.
Information collected automatically
When you visit our website, our hosting provider automatically records technical information such as your IP address, browser type and the pages you request. This is used to deliver the website, keep it secure and fix problems.
We do not use analytics or advertising trackers, and we do not use tools that follow you across other websites. We only use the essential cookies described below (such as for signing in and remembering your language). If we ever introduce an analytics tool, we will update this policy first.
How we collect information
We collect personal information directly from you — through our website forms, the customer portal, email, phone and in person. Sometimes we collect it from someone else at your business (for example, the person who sets up your account may give us the details of your accounts contact). If we receive information we did not ask for and do not need, we will delete it where it is lawful and reasonable to do so.
You can contact us without giving your name for general questions, but we can't set up an account, deliver orders or consider a job application without the details listed above.
Why we use your information
We use personal information to:
- set up and manage your customer account and verify that sign-in requests are really from you;
- take, prepare, deliver and invoice your orders, and receive payment;
- answer your enquiries and arrange samples;
- send you service emails and SMS messages — for example sign-in links and codes, order confirmations, invoices and payment reminders;
- consider job applications;
- keep records required by law (for example tax and food safety records) and trace products if there is a food safety issue;
- protect our systems, our customers and our business against fraud and misuse; and
- improve our products and service.
We do not sell personal information, and we do not send marketing emails. The emails and SMS messages we send are about your account, orders, invoices and payments.
Cookies and similar technologies
We use a small number of cookies and browser storage items that our website needs to work:
| Name | What it does | How long it lasts |
|---|---|---|
yf_session |
Keeps a customer signed in to ordering and the customer portal | 12 hours, or 30 days if you choose "remember this device" |
sb-…-auth-token |
Keeps a Young Foods team member signed in to our internal system | Until they sign out or the session expires |
yf_staff_locale |
Remembers the language a team member chose for our internal system | Until cleared |
yf_new_starter_return |
Returns a new team member to their onboarding page after Google sign-in | 15 minutes |
yf_font_scale (browser storage) |
Remembers the text size you chose | Until you clear it |
| Order and message drafts (browser storage) | Keeps an unfinished order or message on your device so it isn't lost if the page reloads | Until the order or message is sent, or you clear it |
These are all strictly necessary or preference items. You can block or delete cookies in your browser settings, but sign-in and ordering will not work without the session cookie.
Who we share information with
We share personal information only as needed to run our business, with:
- service providers that host and operate our systems (listed below), who may only use it to provide their service to us;
- our accountants, auditors and professional advisers, when they need it to do their work for us;
- delivery and logistics partners, who receive what they need to deliver your order (the delivery name, address and contact details); and
- government bodies and regulators, when the law requires it (for example food safety authorities in a product recall, or the Australian Taxation Office).
Service providers we use
| Provider | What they do for us | Where information may be stored or processed |
|---|---|---|
| Supabase | Database and back-end services — our main record system | Australia (Sydney region) |
| Vercel | Website hosting | Australia (Sydney region) for our application; its worldwide content delivery network may process requests outside Australia |
| Google (Workspace) | Business email, and Google sign-in for our team | Outside Australia, including the United States |
| Google (Places) | Suggests addresses as you type your delivery address | Outside Australia, including the United States |
| Xero | Accounting, invoicing and payment records | Outside Australia, including the United States |
| Stripe | Card payments made through the payment link on a Xero invoice | Outside Australia, including the United States |
| Pinch | Direct debit payments | Please see Pinch's privacy policy |
| Resend | Sends our service emails (sign-in links, order confirmations) | Outside Australia, including the United States |
| Postmark | Receives copies of emails sent to our business addresses, and sends some of our replies | Outside Australia, including the United States |
| ClickSend | Sends SMS sign-in codes (an Australian company) | Australia, and possibly other countries |
| Slack | Internal notifications to our team about new orders, enquiries and applications | Outside Australia, including the United States |
When we start using a new service that handles personal information — including any AI service — we will update this policy first.
Overseas disclosure
We do not keep our records on our own servers — we use the online services listed above. Our main database (Supabase) and our website application (Vercel) run in their Sydney, Australia regions. Other providers may store or process personal information outside Australia, for example in the United States and other countries where they or their sub-processors operate. Before we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the Australian Privacy Principles — for example by choosing established providers that are bound by contractual privacy and security terms.
How long we keep information
We keep personal information only for as long as we need it for the purposes in this policy, and for any longer period the law requires.
- Customer, order and invoice records: for as long as you are a customer, and afterwards for the period Australian law requires — tax and accounting records are usually kept for 5 to 7 years, and food safety records for as long as food safety law requires.
- Enquiries, sample requests and emails: for as long as we need them to deal with your request and run our business with you.
- Job applications: up to 12 months (see above).
- Sign-in links and codes: they expire within a short time and can be used only once.
When we no longer need information, we securely delete it or de-identify it.
How we protect information
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure. These include:
- storing our records with established hosting providers that encrypt data in transit;
- limiting access so each team member can see only what their role needs, and requiring each of them to sign in;
- keeping more sensitive information (such as resumes and credit details) in a separately restricted part of our database; and
- keeping a log of important actions, such as sign-ins and who opened a job applicant's resume.
No system is completely secure. If a data breach is likely to cause serious harm, we will notify the people affected and, where required, the Office of the Australian Information Commissioner (OAIC).
Accessing and correcting your information
You can ask us for access to the personal information we hold about you, or ask us to correct it. Customers can see and request changes to their business and contact details in the customer portal.
To make a request, email hello@youngfoods.com.au or call (07) 5239 0159. We may need to confirm your identity first. We will respond within 30 days. We do not charge for making a request or for correcting information. If we refuse a request, we will tell you why in writing and how to complain.
Making a complaint
If you have a concern about how we have handled your personal information, please email us at hello@youngfoods.com.au or call (07) 5239 0159 with the details. We aim to reply within 7 days and to resolve your complaint within 30 days. Complex matters can take longer — if yours does, we will keep you updated on our progress.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
Changes to this policy
We may update this policy from time to time, for example when we start using a new service. The latest version will always be on this page, with the date it was last updated at the top. If a change significantly affects how we use information you have already given us, we will let you know.