In order to receive information about your Personal Data, the purposes and the parties the Data is shared with, contact the Owner.
Res Butler Pty Ltd
Owner contact email: mail@WizButler.com
We collect the following kinds of personal information: your name; contact details (email address and phone numbers); postal or recipient address; booking and order details, including your spend and visitation history; tokenised payment method details; your IP address; and device, usage and cookie data collected automatically when you use this Application.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection. Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.
The owner may collect, hold, use, and disclose Personal Information for the following purposes:
The owner may use Personal Information for our internal operations, including:
The owner may, along with our service providers and third-party advertising partners, may use your Personal Information for marketing and advertising purposes, including:
The owner may use your Personal Information to:
The owner may analyse your usage of our website and services to improve and develop our offerings, understand user activity, and enhance site navigation.
In specific cases, the owner may ask for your consent to collect, use, or share your Personal Information, as required by law.
The owner may create anonymous, aggregated, or de-identified data from your Personal Information to analyse usage patterns and enhance our services.
When you make a reservation using our services, your Personal Information (e.g., name, email address, phone number) is shared with the applicable venue to facilitate your booking. Each venue will handle your data in accordance with its own privacy policies. Complaints or inquiries regarding the use of your information by a venue should be addressed directly to that venue.
The Owner may collect and use limited payment information, including tokenised payment method details, for the purposes of processing bookings, online orders, and transactions through the WizButler system.
All payments are processed through PCI-compliant third-party payment providers. We do not store full card numbers or CVV data ourselves. Instead, we use tokenisation methods to securely reference your payment method, and your Payment Information is stored only on secure servers operated by those payment providers.
We store your tokenised payment method to a verified identifier, such as your phone number—strictly for convenience, to enable quicker transactions on your next order or visit. You may request the removal of your stored card details at any time by contacting us, and we will action your request promptly.
This section applies to restaurants and other business customers who choose to connect their Google Business Profile to the WizButler Reputation module. It explains what information WizButler receives from Google, how we use and protect it, how long we keep it, and how you can disconnect your venue at any time. Connecting is optional; WizButler only accesses your Google Business Profile after an authorised person at your business signs in with Google and grants permission.
When you connect, WizButler requests the Google permission to manage your Business Profile (the business.manage scope) and uses it to access:
We do not access your Google email, contacts, calendar, files or any Google data unrelated to your connected Business Profile locations.
We use information received from Google only to provide and improve the Reputation features you have chosen to use, namely to:
To provide the analysis and draft-reply features, review content is processed by our service providers, including our cloud hosting provider and our AI provider, solely on our behalf and under contracts that prohibit them from using it for any other purpose, including training their own models.
WizButler’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Restaurants and other business customers may also connect their Facebook Page to the WizButler Reputation module. WizButler only accesses a Page after an authorised person at your business signs in with Facebook, chooses the Page(s) to connect and grants permission.
We do not access your personal Facebook profile, friends, messages, posts unrelated to reviews, or any Page you have not chosen to connect.
The same way as Google reviews (see “How we use this information” above): to show your Facebook reviews alongside your other feedback, analyse them, alert the staff you nominate, help your staff write replies (a person always reviews and sends every reply — WizButler never posts automatically), post the replies your staff send to your Page, and show statistics for your own business. The restrictions in “What we do not do” and the protections in “How we store and protect it” above apply to Facebook data in the same way.
To have WizButler delete the information it received from Facebook (or Google) for your business, disconnect the platform as described above, or email us at support@resbutler.com [CONFIRM: support address] with your business name and the Page or Business Profile concerned. We confirm deletion within one month, as described in “How to exercise these rights”.
WizButler’s use of information received from Meta complies with the Meta Platform Terms and Developer Policies.
We value your privacy and do not sell your personal information. We share your personal information only as described in this policy — for example, with the venue you book, our service providers and payment processors, and where required or authorised by law. Any sharing of your information for advertising purposes is based on your consent, and you can opt out at any time.
WizButler’s Reputation features use artificial intelligence to help restaurants understand and respond to guest feedback. This section explains what is processed, by whom and where.
The AI processing is performed by Anthropic, PBC, acting as our service provider. The information is processed in the United States [CONFIRM: processing location per the Anthropic DPA]. Under our agreement with Anthropic:
We take reasonable steps, including these contractual protections, to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles, and we remain accountable for that information. For guests in the United Kingdom or European Union, transfers are covered by the safeguards in Anthropic’s Data Processing Addendum.
The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. If a data breach occurs that is likely to result in serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
The Owner may process Personal Data relating to Users if one of the following applies:
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located.
Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data. We may disclose your personal information to recipients located overseas, including in the United States and the European Union, where some of our service providers and payment processors operate. Before disclosing your personal information overseas, we take reasonable steps to ensure the overseas recipient handles it consistently with the Australian Privacy Principles.
Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.
If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.
We keep personal data only for as long as we need it for the purpose for which it was collected, and then delete or de-identify it. Specific periods apply:
Transaction records, including the fee charged, the rate applied, the channel and the payment method, are retained for seven years, because they are company financial records under section 286 of the Corporations Act 2001 (Cth).
Booking and order history is retained for seven years for the same reason.
Marketing preferences are retained until you withdraw your consent, and a suppression record is retained after that so we do not contact you again.
Website, device and system log data is retained for 24 months.
After six years, being the general limitation period for consumer claims, we remove or pseudonymise direct identifiers from transaction records where we no longer need them.
Therefore:
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following:
Lodge a complaint. You may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the European Economic Area or the United Kingdom, you may also complain to your local supervisory authority or to the UK Information Commissioner’s Office.
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month. If you wish to make a privacy complaint, please contact the Owner using the details in this document. We will investigate and respond to your complaint. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.
In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) use other Personal Data (such as the IP Address) for this purpose.
More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.
This Application does not currently respond to “Do Not Track” browser signals. Where required by applicable law we honour Global Privacy Control signals. To determine whether the third-party services we use honour either signal, please read their privacy policies.
We may change this privacy policy. We will post the updated policy on this page and, where a change is material, take reasonable steps to notify you a reasonable time before it takes effect. Where a change affects processing carried out on the basis of your consent, we will obtain fresh consent where the law requires it.
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.
Latest update: July 01, 2026