Last Updated: 15/06/2026
Welcome to Zeloraa ("Zeloraa", "we", "our", or "us").
Zeloraa is a marketplace platform that helps customers discover, connect with, order from, and book services with independent food merchants, including home cooks, home bakers, private chefs, caterers, food trucks, meal preparation providers, specialty food creators, and other approved food businesses.
We are committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you access or use the Zeloraa website, mobile applications, services, and related features (collectively, the "Platform").
This Privacy Policy applies to:
This Privacy Policy does not apply to third-party websites, services, payment providers, or external platforms that may be linked through the Platform.
Account Information — When creating an account, we may collect: full name, email address, mobile number, password or authentication credentials, profile photo (optional).
Customer Information — Customers may provide: delivery or pickup information, location information, dietary preferences, allergy information, booking details, messages sent through the Platform, reviews and ratings.
Merchant Information — Merchants may provide: business name, trading name, legal name, business registration information, tax information, bank account information, food registration details, verification documents, government-issued identification, merchant profile content, menu information, product images, pricing information, service availability.
Communications — We may collect information when you contact support, submit enquiries, participate in surveys, report issues, or send messages through the Platform.
Device Information: Device type, operating system, browser type, device identifiers, app version.
Usage Information: Pages viewed, features used, search activity, merchant interactions, clickstream data, session information.
Log Information: IP address, access dates and times, error logs, security events.
Location Information: With permission, we may collect precise GPS location, approximate location, and location history associated with Platform usage. Location information helps provide local merchant discovery and location-based services.
Identity Verification Providers may provide: verification status, identity validation results, fraud screening results.
Payment Providers may provide: transaction status, payment confirmation, chargeback information, fraud indicators. Zeloraa does not store full payment card details.
Analytics Providers: We may receive aggregated usage and performance data from analytics providers.
We may use personal information to:
Certain merchant information may be publicly visible, including: business name, profile information, product information, menus, service descriptions, reviews, ratings, photos, service areas.
Merchants acknowledge that information submitted for public profiles may be displayed to Platform users.
We do not sell personal information. We may share information only where necessary.
Payments may be processed by third-party payment providers. Payment providers may collect and process payment information, billing information, and transaction details. Their privacy practices are governed by their own privacy policies.
Zeloraa does not store complete payment card information on its systems.
To maintain trust and safety, Zeloraa may require merchants to complete identity verification processes. Verification may involve collection of government-issued identification, business registration documents, food registration information, and bank verification information.
Verification information may be reviewed directly by Zeloraa and/or approved verification providers.
Users may submit reviews, ratings, photos, comments, and feedback. Content submitted to public areas of the Platform may become publicly visible. Users should avoid posting sensitive personal information within public content.
We may use cookies, pixels, local storage, and analytics technologies. These technologies help remember preferences, improve functionality, measure usage, and enhance security. Users may manage cookie settings through browser controls.
We retain information only for as long as necessary to provide services, meet legal obligations, resolve disputes, enforce agreements, and maintain security records. Retention periods may vary depending on the nature of the information and applicable legal requirements.
We implement reasonable technical, administrative, and organizational safeguards designed to protect information from unauthorized access, misuse, loss, disclosure, alteration, and destruction. While we strive to protect information, no system or transmission method can be guaranteed to be completely secure.
Information may be processed or stored in countries outside your country of residence. Where international transfers occur, Zeloraa will take reasonable steps to ensure information receives an appropriate level of protection.
The Platform is not intended for children under the age required by applicable law to independently use our services. We do not knowingly collect personal information from children without appropriate legal authorization.
Subject to applicable law, you may have the right to:
Requests may be subject to identity verification and applicable legal limitations.
We may send product updates, promotional offers, feature announcements, and merchant opportunities. Users may opt out of marketing communications at any time through available unsubscribe mechanisms. Service-related communications may still be sent where necessary.
Zeloraa may use automated and manual processes to detect fraudulent activity, prevent abuse, identify suspicious transactions, and protect users and merchants. Accounts may be reviewed, restricted, suspended, or investigated where necessary to maintain platform integrity.
The Platform may contain links to external websites or services. Zeloraa is not responsible for the privacy practices or content of third-party services. Users should review the privacy policies of those services independently.
We may update this Privacy Policy periodically. When significant changes are made, we may provide notice through website notifications, app notifications, or email communications. Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.
For privacy-related enquiries, requests, or concerns, please contact:
Zeloraa Privacy Team
Email: support@zeloraa.com
We will make reasonable efforts to respond to privacy enquiries in accordance with applicable laws.
Where applicable, Zeloraa handles personal information in accordance with the principles of the New Zealand Privacy Act 2020 and other relevant privacy and consumer protection laws. Nothing in this Privacy Policy limits any rights that individuals may have under applicable law.
Zeloraa may use automated systems, machine learning technologies, artificial intelligence tools, and algorithmic processes to support certain Platform functions, including: merchant application review support, fraud detection and risk assessment, spam and abuse prevention, search and discovery rankings, personalised recommendations, content moderation assistance, platform security monitoring, and customer support assistance.
Where appropriate, Zeloraa may conduct additional manual reviews before making significant decisions affecting users or merchants. Users may contact Zeloraa if they believe an automated decision has been made in error.
Zeloraa takes information security seriously and maintains procedures designed to identify, investigate, contain, and respond to actual or suspected data breaches. If a security incident involving personal information occurs, Zeloraa may investigate, take immediate steps to contain the incident, assess potential risks to affected individuals, implement corrective measures, and notify affected individuals and relevant regulatory authorities where required by applicable law.
Notifications may be provided through email, mobile application notifications, website notices, or direct communications. Users are encouraged to maintain strong passwords and promptly report any suspected unauthorized access to their accounts.
Zeloraa may use cloud infrastructure, hosting providers, payment providers, analytics services, and other technology vendors that operate in multiple countries. As a result, personal information may be stored, processed, backed up, or accessed in jurisdictions including New Zealand, Australia, United States, Singapore, European Economic Area countries, and other locations where approved service providers operate.
Zeloraa takes reasonable steps to ensure that third-party service providers maintain appropriate privacy, confidentiality, and security safeguards. Cross-border transfers are conducted in accordance with applicable privacy laws and contractual obligations.
To maintain marketplace trust and safety, Zeloraa may require merchants to complete verification and onboarding processes before gaining access to certain Platform features.
Verification information may include:
Identity Information
Business Information
Financial Information
Verification information may be reviewed by Zeloraa personnel, identity verification providers, payment providers, and regulatory compliance partners. Verification records may be retained for compliance, fraud prevention, dispute resolution, legal obligations, and platform safety purposes. Submission of verification information does not guarantee merchant approval.
Zeloraa may use Stripe Connect and other approved payment service providers to facilitate payments, merchant onboarding, payouts, identity verification, fraud prevention, and related financial services. Through these services, information including name, email address, phone number, address, government identification, banking information, tax information, and transaction information may be collected and processed.
Payment providers may independently collect, process, store, and verify information in accordance with their own privacy policies and regulatory obligations. Zeloraa does not control how third-party payment providers process personal information once submitted directly to them. Users should review the privacy policies of relevant payment providers before using payment services.
The Platform may provide messaging, enquiry, booking, quote request, and communication features. Communications conducted through the Platform may be stored, logged, monitored, reviewed, and investigated for purposes including customer support, trust and safety investigations, fraud prevention, dispute resolution, platform security, and compliance monitoring.
Users should not share sensitive personal information through Platform messaging features unless reasonably necessary for the relevant transaction or service. Zeloraa reserves the right to review communications where required to investigate violations of Platform policies, applicable laws, or safety concerns.
Where a food safety concern, contamination allegation, allergen incident, illness report, regulatory complaint, or similar issue is reported, Zeloraa may collect, review, and process relevant information to investigate the matter, including customer and merchant information, order records, product details, communication records, supporting photographs, and medical or health-related information voluntarily provided.
Information may be shared with relevant merchants, regulatory authorities, public health agencies, legal advisors, insurance providers, and professional investigators only where reasonably necessary to investigate, respond to, or resolve the reported incident. Zeloraa may retain investigation records for longer periods where required for legal, regulatory, safety, or risk management purposes.
Zeloraa may disclose personal information where we reasonably believe disclosure is necessary to comply with applicable laws, court orders, lawful requests from government authorities, protect public safety, prevent fraud, investigate criminal activity, or protect the rights, safety, or property of Zeloraa, merchants, customers, or third parties.
Where legally permitted, Zeloraa may notify affected individuals before responding to certain requests. Nothing in this Privacy Policy limits Zeloraa's ability to cooperate with law enforcement agencies or regulatory authorities where legally required.
Users may request deletion of their accounts by contacting Zeloraa or using available Platform tools.
Following an approved deletion request, Zeloraa may:
Certain information may continue to be retained for legitimate purposes including:
Legal Compliance
Operational Purposes
Business Records
Typical retention periods may vary depending on information type and applicable legal requirements.
Even after account deletion, certain records may be retained for a reasonable period where necessary to comply with legal obligations, resolve disputes, protect users, or maintain Platform integrity.
Once retention obligations expire, information will be securely deleted, anonymized, or de-identified where reasonably practicable.
Users may contact Zeloraa regarding privacy concerns, data access requests, correction requests, account deletion requests, complaints about information handling practices, or questions regarding this Privacy Policy.
Privacy enquiries should be directed to: support@zeloraa.com
Zeloraa will make reasonable efforts to respond within applicable legal timeframes.