Privacy Policy

Last updated: 08/07/2026

Sana Mediterranean (“Sana”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website, sign up for our newsletter, use our loyalty program, order through our stores, or otherwise interact with us.

This policy is intended to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What Personal Information We Collect

We may collect the following types of personal information:

Contact details — name, email address, phone number, postal address
Account/loyalty details — order history, loyalty points, preferences, and rewards activity (via Square)
Marketing preferences — newsletter subscription status and engagement (via Mailchimp)
Transaction information — purchase details, payment confirmation (we do not store full card numbers; payments are processed securely by our payment providers, e.g. Square)
Technical information — IP address, browser type, device information, and website usage data (e.g. via cookies or analytics tools)
Communications — any information you provide when contacting us, entering a promotion, or providing feedback

2. How We Collect Personal Information

We collect personal information directly from you when you:

Sign up to our email newsletter
Join our loyalty program or make a purchase in-store or online
Enter a competition, giveaway, or promotion
Contact us via email, social media, or our website
Browse our website (via cookies and similar technologies)

We do not knowingly collect personal information from children without parental consent.

3. How We Use Your Personal Information

We use your personal information to:

Process orders and manage your loyalty account
Send you marketing communications, offers, and updates (where you have opted in)
Respond to enquiries, feedback, or complaints
Administer competitions and promotions
Improve our website, products, and services
Comply with legal and regulatory obligations

4. Marketing Communications

If you subscribe to our newsletter or provide your email address, we may send you marketing communications via Mailchimp. You can opt out or unsubscribe at any time by clicking the “unsubscribe” link in any email, or by contacting us directly (see Section 9).

5. Disclosure of Personal Information

We may disclose your personal information to:

Service providers who help us operate our business, such as Square (payments/loyalty) and Mailchimp (email marketing)
Our staff, on a need-to-know basis, to deliver our services
Government or regulatory authorities where required by law
A third party in connection with a business sale, merger, or restructure

We do not sell your personal information to third parties.

Some of our service providers (e.g. Square, Mailchimp) may store or process data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled in accordance with the Australian Privacy Principles.

6. Cookies and Website Analytics

Our website may use cookies and similar tracking technologies to improve your browsing experience, understand website traffic, and tailor content. You can adjust your browser settings to refuse cookies, though this may affect site functionality.

7. Data Security

We take reasonable steps to protect the personal information we hold from misuse, loss, unauthorised access, modification, or disclosure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Access and Correction

You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond to your request within a reasonable timeframe.

9. Complaints

If you have a concern about how we’ve handled your personal information, please contact us first at the details below. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us via Instagram.

Sana Mediterranean

Address: Tenancy 8/1 Locomotive St Sydney

ABN: 74 678 800 818