Privacy Policy
Effective 8 June 2026 · Last updated 8 June 2026
This policy explains how Mirchi — a home-kitchen food venture operated by South Sip Limited in Auckland, Aotearoa New Zealand — collects, uses, stores and protects your personal information when you place an order or contact us. We handle your information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).
In short: we only ask for what we need to cook and confirm your order, we keep it in a small number of trusted services, we never sell it, and you can ask to see or delete it at any time.
What we collect
We only collect information you give us when you place an order:
| Name | So we know whose order it is and how to greet you. |
|---|---|
| Phone number | To confirm your order and reach you about pickup. |
| Email (optional) | To send your written order confirmation. |
| Order details | The dishes you choose, pickup date and time, and any notes (e.g. spice level, allergies). |
| Marketing choice | Whether you opted in to occasional updates about specials and new dishes. |
We do not run advertising trackers or third-party analytics, and we do not collect payment-card details on this website — payment is arranged directly with you after we confirm your order.
Why we collect it
- To prepare, confirm and complete your food order.
- To contact you about your order and send our bank details for payment.
- To send a written order confirmation, where you provide an email.
- Only if you opt in: to send occasional messages about specials and new dishes. You can opt out any time.
How it's stored and who can see it
Your order is stored in a private Google Sheet that only the owner of Mirchi can access. Confirmation emails are sent through Brevo (our email provider), and a copy of each order is emailed to the owner. The website and its order service run on Cloudflare.
These providers process your information on our behalf, under their own security and privacy terms. We do not sell, rent or trade your personal information, and we do not share it with anyone else except where the law requires.
How long we keep it
We keep order records only as long as we reasonably need them — for fulfilling your order, answering follow-up questions, and basic business records. We aim to delete order details that are no longer needed within 12 months, unless a longer period is required by law (for example, tax records). If you ask us to delete your information sooner, we will, unless we're legally required to keep it.
Your rights
Under the Privacy Act 2020 you can:
- Access the personal information we hold about you (IPP 6).
- Ask us to correct anything that's wrong (IPP 7).
- Unsubscribe from marketing messages at any time — reply to any message or email us.
- Ask us to delete your information when we no longer need it.
To make any of these requests, email mirchi@southsip.com. We'll respond as soon as we can, and within the timeframes the Privacy Act requires.
Cookies & your device
We don't use advertising or tracking cookies. Your shopping cart is stored temporarily in your browser's session storage on your own device so your order survives while you browse — it clears when you close the tab and is never sent anywhere until you submit your order.
Security
We protect your information with encrypted connections (HTTPS), access controls, and secret keys that guard the order store. No method of storage or transmission is ever 100% secure, but we take reasonable steps to keep your information safe and to limit who can see it.
Children
Mirchi is intended for adults placing food orders. We don't knowingly collect information from children. If you believe a child has given us their information, please contact us and we'll remove it.
Changes to this policy
We may update this policy from time to time. When we do, we'll change the "Last updated" date above. Significant changes will be noted on this page.
Contact & complaints
Questions, requests, or concerns? Email mirchi@southsip.com or message us on WhatsApp at +64 021 048 4586.
If you're not happy with how we've handled your information, you can contact the Office of the Privacy Commissioner (privacy.org.nz).