Otogo Privacy Policy
Effective date: 19 June 2026 | Last updated: 19 June 2026
Otogo Pty Ltd (ACN 134 725 214) ("Otogo", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and our direct marketing follows the Spam Act 2003 (Cth).
By using our website, ordering from our online store, or joining our loyalty programme, you agree to the handling of your personal information as described here. If you do not agree, please do not provide your information to us.
1. Who we are and how to contact us
- Entity: Otogo Pty Ltd, ACN 134 725 214
- Registered office: Ground Floor, 303 Pitt Street, Sydney NSW 2000, Australia
- Website: https://www.onigiri-to-go.com
- Privacy contact: yashio@onigiri-to-go.com
If you have a question, a request, or a complaint about your privacy, please email us at yashio@onigiri-to-go.com with "Privacy" in the subject line. How to make a complaint is set out in Section 11 below.
We may update this Policy from time to time (for example, when we add a new service or change a supplier). The current version, and its effective date, will always be available at onigiri-to-go.com/privacy. Where changes are significant, we will take reasonable steps to let you know.
2. What personal information we collect
"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Depending on how you interact with us, we may collect:
- Identity & contact details — your name, mobile/WhatsApp number, and email address.
- Loyalty programme data — your mobile/WhatsApp number, your digital stamp balance, and your visit history (such as the dates you collect stamps). Stamps are added by our staff at the counter when you make a purchase.
- Online store (EC) data — when you order from Otogo Studio (otogostudio.com), we collect your name, delivery address, contact details, and the items you ordered. Payment-adjacent information (such as a transaction reference and the last digits/expiry shown to us by the payment provider) is handled through our payment processor. We do not collect or store your full credit/debit card number — card payments are processed securely by our payment provider (see Section 6).
- Enquiry, booking & application data — if you contact us, book a call, or apply through one of our forms (for example our Founder Partner or careers enquiry forms via Tally, and call bookings via Calendly), we collect the information you choose to provide.
- Website & device data (collected automatically) — when you visit our website we automatically collect technical data such as your IP address, device and browser type, pages viewed, referring page, approximate location, and how you interact with the site, using cookies and similar technologies (see Section 5).
We generally do not seek to collect "sensitive information" (such as health, race, or religious information). Please do not send us sensitive information unless we specifically ask for it.
3. How we collect your information
We collect personal information in two ways:
(a) Directly from you — for example when you sign up to our loyalty programme in store via WhatsApp; place an order or create an account on our online store; complete an enquiry, application, or booking form; or email, message, or otherwise contact us.
(b) Automatically — through cookies, pixels, and analytics tools when you use our website (see Section 5).
Collection notice (APP 3 & APP 5): We collect personal information only when it is reasonably necessary for our functions and activities. Where it is reasonable and practicable, we collect it directly from you. If we collect your information from a third party (for example, an analytics or advertising platform), we take reasonable steps to ensure you are made aware of this Policy. If you do not provide the information we ask for, we may not be able to provide the service you have requested.
4. Why we collect and use your information
We use your personal information for the following primary purposes:
- to operate our loyalty programme — register you, record and display your stamp balance and visit history, and send you loyalty-related messages such as your stamp confirmation or balance;
- to fulfil your online store orders — process and deliver your order, handle returns or refunds, and contact you about your order;
- to respond to your enquiries, applications and bookings;
- to operate, secure, analyse and improve our website, products and services; and
- to comply with our legal obligations (such as tax and consumer law record-keeping).
Direct marketing is opt-in. We will only send you marketing messages (for example, promotions, new menu items, or events) if you have consented, and every marketing message includes an easy way to opt out. See Sections 9 and 5.
5. Cookies and tracking technologies
Our website uses cookies and similar technologies to make the site work, to understand how it is used, and to measure our marketing. The main tools we use are:
| Tool | Provider | What it does |
|---|---|---|
| Meta Pixel | Meta Platforms, Inc. | Measures the effectiveness of our advertising and helps us show relevant ads on Facebook/Instagram. |
| Microsoft Clarity | Microsoft Corporation | Shows us anonymised, aggregated insights about how visitors use our site (e.g. heatmaps). |
| Google Analytics 4 | Google LLC | Provides aggregated statistics about site traffic and usage. |
| Google Search Console | Google LLC | Helps us understand how our site performs in Google Search (aggregated). |
Your choices. You can control or disable cookies through your browser settings, and you can use the providers' own opt-out tools:
- Google Analytics opt-out: tools.google.com/dlpage/gaoptout
- Google ad settings: adssettings.google.com
- Meta ad preferences: facebook.com/adpreferences
- Microsoft privacy statement: privacy.microsoft.com
Disabling cookies may affect how parts of the website work.
6. Who we share your information with
We do not sell your personal information. We share personal information only where necessary to run our business, and only with parties who are required to protect it: service providers and technology platforms that operate our systems (listed below); professional advisers (such as lawyers and accountants) and government or regulatory bodies where the law requires or permits; and a purchaser or successor of our business, subject to appropriate confidentiality protections.
Overseas disclosure (APP 8)
Some of our service providers store or process personal information outside Australia. Before disclosing your information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs.
| Provider | Role | Location |
|---|---|---|
| Supabase | Database / loyalty data storage | Japan |
| Meta Platforms / WhatsApp | WhatsApp loyalty messaging; advertising pixel | United States |
| Twilio | WhatsApp/SMS message delivery | United States |
| Shopify | Online store platform & order processing | Canada / United States |
| Stripe (via Shopify Payments) | Payment processing | United States |
| Google (GA4, Search Console, Ads) | Website analytics & advertising | United States |
| Vercel / Netlify | Website & landing-page hosting | United States |
By providing your information to us, you acknowledge that it may be disclosed to these overseas recipients, whose handling of your information is also subject to the laws of the countries in which they operate.
7. Data security and retention
Security (APP 11). We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure — including access controls, encryption in transit, restricting access to staff who need it, and using reputable service providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Retention. We keep your personal information only for as long as we need it for the purposes described in this Policy, or for as long as the law requires. As a guide:
- Loyalty data — kept while you are an active member; we will delete or de-identify it on request, or after around 24 months of inactivity.
- Online store / order records — kept as needed to support the order and to meet financial record-keeping laws (generally about 5 years for tax records).
- Enquiry / application data — kept only as long as needed (generally about 12 months), unless you ask us to keep it longer or we are required to.
- Marketing consent records — kept while you are subscribed and for a reasonable period afterwards to evidence your consent and opt-out.
When we no longer need your personal information, we will take reasonable steps to destroy or de-identify it. You can ask us to delete your information at any time (see Section 8).
8. Access to and correction of your information (APP 12 & 13)
You have the right to access the personal information we hold about you, and to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. To make a request, email yashio@onigiri-to-go.com with "Privacy — Access/Correction" in the subject line. We may need to verify your identity first. We will respond within a reasonable time (we aim for within 30 days). Access is usually free; if a request involves significant work we may charge a reasonable cost-based fee and will tell you in advance. If we refuse access or correction, we will explain why in writing and tell you how to complain.
9. Direct marketing and how to opt out
We will only send you marketing messages with your consent (for example, when you opt in during loyalty sign-up). You can opt out at any time — it's free and easy:
- On WhatsApp: reply STOP to any of our messages; or
- By email: email yashio@onigiri-to-go.com with "Unsubscribe" in the subject line; or
- use the unsubscribe link in any marketing email.
Once you opt out, we will stop sending you marketing messages (we may still send you non-marketing service messages, such as an order or loyalty confirmation, where you are still using that service). We do not use or disclose your information for the direct marketing of other organisations without your consent.
10. Children
Our products, website, and loyalty programme are not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.
11. Complaints
If you think we have breached the Australian Privacy Principles or mishandled your personal information, please tell us first so we can try to put it right:
- Email us at yashio@onigiri-to-go.com with "Privacy Complaint" in the subject line, describing your concern.
- We will acknowledge your complaint and aim to respond within 30 days. We may ask for more information to investigate.
If you are not satisfied with our response, you can escalate your complaint to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au · Phone 1300 363 992.
12. Contact us
Otogo Pty Ltd (ACN 134 725 214)
Ground Floor, 303 Pitt Street, Sydney NSW 2000, Australia
Email: yashio@onigiri-to-go.com
Website: https://www.onigiri-to-go.com
Last updated: 19 June 2026.