Privacy Policy
Hey Houdini Enterprise Pty Ltd · ABN 14 702 748 123 · Last updated 7 November 2026
Hey Houdini ("we", "us") is a hospitality platform operated by Hey Houdini Enterprise Pty Ltd (ABN 14 702 748 123), Australia. It powers restaurant point-of-sale, kitchen and kiosk devices, online-ordering storefronts, back-office administration, and integrations with connected services such as payment providers and food-delivery marketplaces. This policy explains what personal information we handle across those surfaces, why, and the choices you have. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where they apply, overseas privacy laws such as the GDPR.
What we collect
- Business & account information — business names, store addresses, staff names and sign-in details, and contact details supplied when a business signs up or staff accounts are created.
- Order information — items ordered, prices, order notes, and, for delivery and pickup orders, the customer name, phone number and delivery details needed to prepare and hand over the order.
- Payment information — payments are processed by dedicated payment providers (for example Stripe). We receive confirmation and settlement records; full card numbers are never stored on our platform.
- Connected marketplace data — when a business connects a marketplace such as Uber Eats, we receive that marketplace's order data (items, customer first name, contact and delivery details) solely to inject the order into the store's kitchen and report its status back. We use it only to fulfil the order, and handle it under the marketplace's data terms in addition to this policy.
- Device & usage information — technical telemetry from store devices and our websites (device identifiers, logs, error reports) used to keep the platform reliable and secure. Our websites use essential cookies, such as sign-in and preview-access cookies; heyhoudini.com also measures visits with cookies of its own, as set out under When you visit heyhoudini.com.
How we use it
To operate the platform: taking and preparing orders, routing them to kitchens and couriers, settling payments, syncing menus to connected marketplaces, providing receipts, supporting businesses, securing the service, and meeting legal obligations. We do not sell personal information, and we do not use customer order data for advertising.
How we protect it
The platform is hosted on Microsoft Azure in Australia. Personal fields are encrypted at rest, masked in day-to-day operational views, and restricted by role-based access controls; access between services is authenticated and isolated per business by design. We notify affected parties and counterparties of any notifiable data breach in line with our legal and contractual obligations, including the timeframes agreed with connected marketplaces.
Who we share it with
- Service providers that host and support the platform (Microsoft Azure) and process payments on our behalf.
- Connected services a business chooses — for example, publishing a store's menu to Uber Eats or reporting an order's status back to the marketplace it came from.
- Authorities where the law requires it.
Every service provider that processes customer data on our behalf, what it does and where, is listed on our service providers page.
Retention & your rights
We keep personal information only as long as needed for the purposes above and for record-keeping required by law, then delete or de-identify it. You may request access to, correction of, or deletion of your personal information, and complain about our handling of it; store customers can also raise requests through that business. We respond to verified requests within a reasonable time.
When you visit heyhoudini.com
We measure how our website is used so we can make it better. We do this ourselves: we don't use Google Analytics, advertising tags or any other company's tracking, and what we measure stays in Hey Houdini's own platform.
What we record. The pages you read, the buttons you press (for example "Book a demo"), how your visit began — the name of the search engine that sent you (never what you searched for), the campaign tags in a link you followed, the web address of the site that linked to us (never the page), or a partner's referral link — the kind of device you used (phone, tablet or computer) and the country your visit came from.
What we never record. Your IP address, your name or email address (unless you send us an enquiry — see below), your precise location, your browser's details, or anything you type.
Cookies. We set these cookies ourselves; none is shared with another company:
| Cookie | What it holds | How long |
|---|---|---|
hh_vid | A random code that tells one visit from another on our sites. It isn't made from anything about you. Readable only by our servers. | 13 months from your first visit (a later visit doesn't extend it) |
hh_visit | How your current visit began (for example "search"). No identifier. Readable only by our servers. | 30 minutes after your last page |
hh_consent | Your answer to our question — "yes" or "no" — so we don't ask again. Nothing else. Our pages read it to know whether to ask. | 6 months; a "no" given outside the countries where we ask first: 13 months |
When we don't measure. We don't measure visits from browsers that send the Global Privacy Control signal, from automated tools and search crawlers, or from our own team. If you visit from the European Economic Area, the United Kingdom, Switzerland or another country whose law asks for consent first, we ask before we measure anything, and we measure your visit only if you choose Accept. If you choose Decline, or don't answer, we don't measure it and set no measurement cookie.
A record of your answer. When you choose Accept, we record that you agreed, when, and to which version of the question — against your visitor code and nothing else. A "no" isn't recorded on our servers: your browser remembers it so we don't ask again.
How long we keep it. Visit records, and the record of your answer, are deleted after 90 days. Figures we keep longer, such as how many people visited in a month, are totals that don't identify anyone.
Your choices. Choose "Privacy choices" at the foot of any page to change your answer at any time, wherever you are. If you change to Decline, we stop measuring and forget the visits we've recorded under your visitor code. Turning on Global Privacy Control in your browser does the same. You can also clear your cookies at any time.
To clear our cookies, use your browser's settings for cookies and site data. To send Global Privacy Control, turn it on in your browser's privacy settings, or add an extension that sends it.
When you send us an enquiry
When you ask for a demo or ask about becoming a partner, we collect what you put in the form: your name, your work email address, your business's name and website, how many stores you have, the products you're interested in, what you're looking for, and your message. We use it only to reply to you, arrange a demo or talk about a partnership. When you request early access, we collect your work email address and, if you tell us, whether you're a business, a partner or an investor. We use it only to contact you about our private preview.
Linking your enquiry to your visit. If our website was measuring your visit when you sent the form,
we link your enquiry to it — so our team can see which pages you read and how you found us, and talk about what
interests you. That link comes from the hh_vid cookie on your browser; we don't link visits from any
other device or browser. If you're in a country where we ask first, we link them only if you chose Accept.
Who sees it. Our team, in Hey Houdini's own platform. We email the enquiry to our team's inbox through our email provider, and our internal tools may help draft a reply that a person reads and sends. We don't sell it or share it with advertisers.
How long we keep it. If you don't become a customer, we delete your name, work email address, website and message, any notes our team made about it, and the link to your visits, 12 months after you sent the enquiry. We keep your business's name, how many stores it has and the products you asked about, for our counts. The link to your visits expires sooner, with the visit records, after 90 days.
Your rights. Ask us at privacy@heyhoudini.com to see, correct or delete what we hold about you. When we delete an enquiry we also forget the visits linked to it.
Where it’s kept. In Hey Houdini’s platform, hosted in Microsoft Azure’s Australia East region. Our service providers page names each provider that processes data for us, and where, as far as we have confirmed it.
Changes & contact
We may update this policy as the platform evolves; the current version always lives at this address with its date above. Questions and requests: privacy@heyhoudini.com.