top of page

Monta Foods Privacy Policy

​

1. About this Privacy Policy

Monta Group Holdings Pty Ltd (ABN 74 696 262 361) operates the Monta Foods and Bun Plus brands (“Monta Foods”, “Bun Plus”, “we”, “us” or “our”).

​

We are committed to protecting personal information and handling it openly and responsibly. This Privacy Policy explains how we collect, hold, use and disclose personal information, including information collected through:

​

  • our websites and online services;

  • product enquiries, orders and customer support;

  • promotions, offers and receipt-validation campaigns;

  • our social-media pages;

  • dealings with customers, retailers, distributors, suppliers and other business partners; and

  • the Bun Plus $10 Digital Reward Offer administered using Easypromos.​

 

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. We also seek to follow these principles as a matter of good privacy practice.

​

This Privacy Policy should be read together with any privacy collection notice presented when personal information is collected.

​

2. What is personal information?

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

​

Depending on how a person interacts with us, we may collect:

​

Identity and contact information

  • name;

  • email address;

  • telephone number;

  • postal or delivery address;

  • date of birth or confirmation that a person meets an applicable age requirement; and

  • account or customer identifiers.

 

Transaction and product information

  • products purchased or requested;

  • order, invoice, delivery and transaction information;

  • retailer and purchase-location information;

  • customer-service history;

  • refund, return and complaint information; and

  • payment confirmation or payment tokens processed by an authorised payment provider.

 

We do not intend to store complete payment-card details unless this is reasonably necessary and handled through an appropriately secured payment process.

 

Promotion and reward information

When a person participates in a promotion, we may collect:

​

  • name and email address;

  • age and Australian residency confirmation;

  • uploaded receipts or other proof of purchase;

  • retailer, product, purchase date, transaction and receipt information;

  • claim submission time and claim reference number;

  • IP address, device, browser and technical information;

  • duplicate-claim, fraud-prevention and verification indicators;

  • claim status, review notes and correspondence; and

  • information required to deliver a digital reward.

 

Participants should redact complete payment-card numbers, loyalty-account numbers and unrelated personal information from receipts before upload, provided the retailer, participating product, purchase date and transaction details remain readable.

 

Website and technical information

We may collect:

​

  • IP address;

  • browser and device type;

  • operating system;

  • pages visited;

  • referring website;

  • dates and times of access;

  • cookie and analytics identifiers; and

  • information about how our websites and online services are used.

 

Business and supplier information

We may collect the name, position, organisation, professional contact details and correspondence of individuals who deal with us in a business capacity.

 

Recruitment information

If a person applies to work with us, we may collect information contained in their application, résumé, references and employment-related correspondence.

 

Sensitive information

We do not generally require sensitive information. If sensitive information is reasonably necessary, we will collect it only with consent or where otherwise permitted by law.

​

Participants should not upload health information, identity documents or other sensitive information unless we specifically request it and explain why it is required.

​

3. How we collect personal information

We usually collect personal information directly from the individual, including when they:

​

  • visit or use our websites;

  • contact us by email, telephone, online form or social media;

  • purchase, enquire about or review a product;

  • create an account or subscribe to communications;

  • enter a promotion or submit a reward claim;

  • upload a receipt or other verification material;

  • respond to a survey;

  • make a complaint; or

  • deal with us as a supplier, retailer, distributor or business partner.

 

We may also collect personal information from:

​

  • retailers and distributors where reasonably necessary to verify a transaction or resolve an enquiry;

  • promotion, receipt-validation and reward providers;

  • payment, delivery and customer-service providers;

  • analytics, security and fraud-prevention services;

  • publicly available sources;

  • social-media platforms, where permitted by the individual’s settings and the platform’s rules; and

  • another person authorised to act for the individual.

​

We do not purchase mailing lists or other bulk contact lists from third parties.

 

If someone provides us with another person’s personal information, they must have authority to do so and should make that person aware of this Privacy Policy.

 

Anonymity and pseudonyms

Wherever it is lawful and practicable, a person may deal with us anonymously or by using a pseudonym — for example, when making a general enquiry or raising a concern about our products or services.

​

In many cases, however, we will need to know a person’s identity to assist them properly — for example, to process an order, verify a promotion claim, confirm an applicable age requirement, or respond to a request. Where this is the case, we will let the person know.

 

4. Why we collect and use personal information

We may collect, hold, use and disclose personal information to:

​

  • provide, distribute and support our products and services;

  • process orders, deliveries, payments, refunds and enquiries;

  • administer customer and business relationships;

  • conduct promotions, offers and reward campaigns;

  • confirm eligibility and validate proof of purchase;

  • detect duplicate, altered, fraudulent or otherwise invalid claims;

  • communicate claim outcomes and deliver rewards;

  • respond to complaints, disputes and privacy requests;

  • improve our products, websites, promotions and customer experience;

  • report de-identified, aggregate information about our websites and promotions to our related brands and advertisers;

  • maintain the safety, integrity and security of our systems;

  • obtain professional, legal, insurance and accounting advice;

  • comply with legal, regulatory, audit and record-keeping requirements;

  • establish, exercise or defend legal claims; and

  • send marketing communications where we have appropriate consent or are otherwise permitted by law.

 

If required personal information is not provided, we may be unable to process an order, answer an enquiry, verify a promotion claim or provide a reward.

​

5. Bun Plus promotions and receipt validation

For promotions such as the Bun Plus $10 Digital Reward Offer, Monta Foods is responsible for deciding why and how participant information is used.

 

Easypromos provides the online promotion and receipt-validation platform and processes participant information on our behalf.

 

We use promotion information only for purposes reasonably connected with:

​

  • registering participants;

  • verifying eligibility;

  • validating receipts and qualifying purchases;

  • preventing duplicate or fraudulent claims;

  • allocating limited rewards in accordance with the applicable terms;

  • contacting participants about their claims;

  • delivering approved rewards;

  • resolving disputes; and

  • meeting legal and audit requirements.

 

Participation in a promotion does not automatically give us permission to send marketing communications. Any marketing consent will be requested separately and will not be a condition of receiving a reward unless clearly stated and legally permitted.

 

Following a Bun Plus or Monta Foods social-media account is not required unless the applicable promotion terms expressly and lawfully state otherwise. For the Bun Plus $10 Digital Reward Offer, social-media following is optional.

​

6. Automated and AI-assisted processing

We may use automated or AI-assisted tools to support the administration of promotions and protect against invalid or fraudulent activity.

 

For example, receipt-validation technology may analyse:

​

  • retailer and product information;

  • purchase date;

  • receipt or transaction number;

  • image readability;

  • possible duplication;

  • apparent alteration or manipulation; and

  • whether submitted information appears consistent with promotion requirements.

 

Automated tools may recommend that a claim pass to the next stage, be referred for further review or require additional information. An automated result does not by itself guarantee approval or receipt of a reward.

 

Where a decision could materially affect a person’s eligibility for a reward or another significant interest, we aim to provide appropriate human oversight. A person may request a review by contacting us and providing their claim reference number.

 

We will describe any automated decision-making arrangements in greater detail where required by applicable privacy law.

​

7. Direct marketing

We may send news, product information, offers or other marketing communications where:

​

  • the recipient has provided express consent; or

  • the communication is otherwise permitted by law.

 

Marketing consent is separate from consent required to process an order, enquiry or promotion claim.

 

Marketing messages will identify the sender and provide a clear and functional unsubscribe method. Unsubscribe requests will be actioned within the period required by law.

 

A person may withdraw marketing consent at any time by:

  • using the unsubscribe link in an email;

  • following the opt-out instructions in a message; or

  • contacting enquiry@montafoods.com.

 

Withdrawal from marketing does not prevent us from sending necessary non-marketing communications, such as order confirmations, claim-verification requests, promotion outcomes, reward-delivery messages or important service notices.

​

8. Cookies and analytics

Our websites may use cookies and similar technologies to:

​

  • operate website functions;

  • remember preferences;

  • understand website traffic and performance;

  • detect security incidents;

  • measure campaign effectiveness; and

  • improve website content and user experience.

 

Some cookies are necessary for a website or promotion page to function. Other analytics or advertising cookies should be used subject to applicable consent requirements.

 

A person can manage cookies through their browser settings. Blocking certain cookies may affect website functionality.

​

Where a third-party analytics or advertising provider receives personal information, its own privacy policy may also apply.

​

9. Who we disclose personal information to

We may disclose personal information, where reasonably necessary, to:

​

  • our employees and authorised representatives;

  • related entities and brands;

  • retailers, distributors and logistics providers;

  • payment processors;

  • promotion and receipt-validation providers;

  • digital reward providers;

  • email, hosting, cloud, analytics, IT and cybersecurity providers;

  • customer-support and communication providers;

  • accountants, auditors, insurers, lawyers and other professional advisers;

  • law-enforcement agencies, courts, regulators and government authorities where required or permitted by law;

  • a purchaser or adviser in connection with a proposed or completed sale, merger or restructure of our business; and

  • another party authorised by the individual.

 

Service providers are only given information reasonably required to perform the relevant service.

 

We do not sell or rent personal information to third parties for monetary payment.

​

10. Overseas disclosure and processing

Some service providers may process or store personal information outside Australia.

 

For promotions administered using Easypromos:

​

  • Easypromos, S.L. is located in Spain;

  • promotion participant information is hosted on Google Cloud infrastructure in Saint-Ghislain, Belgium; and

  • Easypromos engages ACK STORM, S.L. in Spain to maintain and monitor its infrastructure.

 

Other technology, email, analytics, payment, logistics or reward providers may process information in additional countries. Where practicable, relevant countries will be disclosed in the collection notice presented when the information is collected.

 

Before disclosing personal information overseas, we will take reasonable steps required by applicable law. This may include reviewing provider terms, security measures, processing arrangements and contractual protections.

​

11. How we protect personal information

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

​

Measures may include:

​

  • access controls and authentication;

  • role-based access restrictions;

  • encryption in transit and, where available, at rest;

  • secure cloud and hosting providers;

  • staff confidentiality requirements;

  • system monitoring and audit records;

  • security updates and backups;

  • service-provider assessments;

  • incident-response procedures; and

  • secure destruction or de-identification.

​

If we issue a password, or a person sets one, to access an account, order history or other parts of our websites or services, that person is responsible for keeping it confidential and should not share it with anyone. If a password is or may have been compromised, the person should contact us promptly.

 

No electronic transmission or storage system can be guaranteed to be completely secure. If a person becomes aware of a suspected privacy or security issue involving Monta Foods, they should contact us promptly.

​

12. Data breaches

We maintain procedures for responding to suspected data breaches.

 

Where a breach is likely to result in serious harm and the Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

 

We may also notify individuals where doing so is appropriate to help them protect themselves, even if formal notification is not legally required.

​

13. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required for legal, accounting, audit, dispute-resolution or regulatory purposes.

 

Retention periods depend on the type of information and may include:

​

  • promotion receipt images: generally up to 12 months after the promotion closes, unless required for an active review, dispute, audit or legal obligation;

  • promotion claim and reward-allocation records: for a period reasonably necessary to demonstrate correct administration and meet accounting or legal requirements;

  • order, payment and business records: for applicable statutory record-keeping periods;

  • enquiry and complaint records: for as long as reasonably necessary to resolve and document the matter;

  • marketing information: until consent is withdrawn or the information is no longer required; and

  • unsuccessful recruitment information: for a limited period unless the applicant agrees to longer retention.

 

We will take reasonable steps to delete or de-identify information when it is no longer required.

 

Where information is held by a service provider, deletion from backups or restricted systems may occur according to that provider’s secure deletion schedule. We will use available administrative controls to request deletion when the information is no longer required.

​

14. Accessing personal information

A person may request access to personal information we hold about them by contacting our Privacy Officer.

 

We may ask for information reasonably necessary to verify identity before providing access.

 

We will respond within a reasonable period. We will not charge for making an access request, although in limited circumstances we may charge a reasonable cost for providing access where permitted by law and disclosed in advance.

 

If we refuse access, we will provide written reasons and explain available complaint options, unless prohibited by law.

​

15. Correcting personal information

A person may ask us to correct personal information they believe is inaccurate, out of date, incomplete, irrelevant or misleading.

 

We will take reasonable steps to assess and, where appropriate, correct the information.

 

We will not charge for a correction request. If we refuse to make a requested correction, we will explain the reason and available complaint options, unless prohibited by law.

​

16. Privacy complaints

Privacy questions, access or correction requests, and complaints may be directed to:

 

Privacy Officer
Monta Foods
5/65 Barry Street
Bayswater VIC 3153
Australia

 

Email: enquiry@montafoods.com
Telephone: +61 (0)3 9761 1616

 

Please include sufficient information for us to understand and investigate the matter, but do not send complete payment-card details or unnecessary identity documents.

 

We aim to acknowledge a privacy complaint within seven business days and provide a substantive response within 30 calendar days where reasonably practicable.

 

If a person is not satisfied with our response, they may contact the Office of the Australian Information Commissioner:

 

Website: https://www.oaic.gov.au
Telephone: 1300 363 992

​

17. Children

Our general websites and promotions are not intended to collect personal information from children unless specifically stated and supported by appropriate safeguards.

 

The Bun Plus $10 Digital Reward Offer is restricted to individuals aged 18 years or over.

 

If we become aware that we have unintentionally collected personal information from a child without appropriate authority, we will take reasonable steps to delete or de-identify it.

​

18. Third-party websites and social media

Our websites and promotional materials may contain links to third-party websites or social-media services.

 

Those third parties are responsible for their own privacy practices. We encourage individuals to review the privacy policy of a third party before providing personal information through its service.

 

Coles, TikTok, Instagram, Facebook, Meta and other social-media platforms do not receive responsibility for Monta Foods’ handling of promotion participant information merely because a product is sold or a promotion is advertised through those channels.

​

19. Changes to this Privacy Policy

We may update this Privacy Policy when our business practices, service providers or legal obligations change.

​

The current version will be published at:

​

https://www.montafoods.com/privacy-policy

​

Material changes will be identified by updating the effective date. Where appropriate, we may provide additional notice of a material change.

​

20. Contact us

Questions about this Privacy Policy or our handling of personal information may be directed to:

​

Privacy Officer
Email: enquiry@montafoods.com
Telephone: +61 (0)3 9761 1616
Address: 5/65 Barry Street, Bayswater VIC 3153, Australia

bottom of page