Privacy & your information
Last updated 2 October 2026
Who looks after your information
Muskan. For privacy questions, access or corrections, contact usamayousuf99@gmail.com. Our kitchen is in Roxburgh Park, Victoria.
What an order shares
An online request sends your name, phone, chosen dishes, quantities, fulfilment date, payment choice and any notes to our private kitchen inbox. Delivery also needs an address. We use this to assess, confirm, prepare and fulfil your request, reconcile payment and resolve problems. We do not collect bank login or card details. Your bank or PayID transfer is separate from this website.
Allergies and dietary notes
Notes are optional. Please share only what the kitchen needs to assess or prepare this order, and only share another person’s health information with their permission. When you add notes we ask for your agreement to use them for this purpose. Authorised kitchen staff can read them. They are not used in analytics or advertising. If you prefer, contact us first rather than entering details online. Tell us if a saved note needs correcting; do not rely on an old order to communicate a new allergy.
Storage and service providers
The website uses Vercel hosting and Supabase database services when connected for live ordering. Authorised kitchen access is protected; orders are not publicly listed. Providers can process technical and security information, including IP addresses, to operate the service. Processing and support may occur outside Australia. Contact us if you need further information about the current storage arrangements. We do not sell your personal information or use advertising pixels or session replay.
Messages and videos are your choice
WhatsApp, SMS and email open with a prepared message; you choose whether to send it. If sent, the message and your notes are handled by that provider as well as the kitchen, under its privacy practices. Copying a message stays on your clipboard until you use it. YouTube links open only when selected; no YouTube player is loaded automatically.
Anonymous usage counts
If enabled, we count menu views, dish views, additions to an order, checkout openings, message-app openings, copied messages and saved orders. These counters do not contain customer details, notes, order numbers, full page URLs, device IDs or tracking cookies. Counts are retained for up to 90 days. Browser Do Not Track and Global Privacy Control are respected for browser events. You can opt out below. Operational counts of saved orders still come from the kitchen records.
Kitchen order summaries
We use saved order records to summarise popular dishes, order sizes, chosen meal days, delivery versus pickup, cancellations and order values. These summaries do not display names, phone numbers, exact addresses, order references or allergy notes. Delivery areas are grouped by postcode and shown only when a group has at least five accepted orders in the selected period. They count orders, not unique people; we do not collect or infer demographic profiles. The summaries are calculated from kitchen records rather than a separate customer-tracking database. Removed location information is excluded. Private order reports and CSV exports remain accessible only through the kitchen sign-in and contain the operational details still held for each order.
Optional menu suggestions and referral answers
You can suggest a dish for a future menu and optionally tell us how you heard about Muskan at checkout. We use these responses to plan menus and understand where enquiries come from. Responses are counted separately from order records by day, dish name or referral source and retained for up to 90 days. We do not attach your name, contact details or order number to these counts. Please enter dish names only, without personal details or allergy information. Repeated responses may count again; these totals are submissions, not unique people or confirmed orders. Referral answers are sent when you place an online request or prepare a message request. Security services may process technical information to prevent abuse.
Your device
The cart, dismissed welcome guide and optional saved contact details use your browser’s local storage. Contact details are remembered only when you choose that checkbox. Clear site data in your browser to remove them; avoid remembering details on shared devices. The app caches basic assets for faster loading, but ordering needs an internet connection.
Retention and requests
We review completed and cancelled orders after 90 days and remove contact, address and allergy notes when no longer needed for fulfilment, complaints or legal obligations. Minimal transaction records may remain for accounting or legal requirements. Messages in WhatsApp, SMS or email must be reviewed separately; removing a kitchen record does not remove those copies or provider backups immediately. You can request access, correction or removal by contacting us. We may need to verify that the request concerns your information.
Concerns or complaints
Contact usamayousuf99@gmail.com with your concern. We aim to acknowledge it within 7 days and respond within 30 days. If unresolved, you can contact the Victorian Health Complaints Commissioner about health-information handling, or the Office of the Australian Information Commissioner where its jurisdiction applies. Nothing here limits applicable privacy rights.