Brooklyn Donut & Coffee Co.
Privacy Policy — Last Updated: June 2026
This Privacy Policy outlines the practices of Brooklyn Donut & Coffee Co. and its related entities, along with each Brooklyn Donut & Coffee Co. franchisee (collectively referred to as “we”, “us”, “our”, or “Brooklyn Donut & Coffee Co.”) regarding the collection, use, and disclosure of information about you, including through our website at www.brooklyndonuts.com.au and our Co. Culture loyalty app. We adhere to and are bound by the Australian Privacy Principles (“APPs”) contained in the Privacy Act 1988 (Cth).
We recognise the importance of privacy and are committed to protecting and respecting your Personal Information.
This Privacy Policy does not apply to external companies, organisations, or websites linked to Brooklyn Donut & Coffee Co. We are not responsible for the privacy practices of third parties
Who This Policy Covers
This Privacy Policy addresses Personal Information collected and used by Brooklyn Donut & Coffee Co. in relation to:
- Franchisees or prospective franchisees
- Customers
- Suppliers or prospective suppliers
- Independent contractors or applicants for employment or independent contractor roles
- Employees
- Culture loyalty program members
What Is Personal Information?
“Personal Information” refers to information or an opinion about an identified individual, or an individual who is reasonably identifiable, regardless of the truth or form of that information or opinion.
When Do We Collect Your Personal Information?
We may collect and use your Personal Information when you:
- Provide information during competitions, promotions, quote requests, complaints, or other interactions
- Make enquiries or applications regarding franchisee, employment, independent contractor, or supplier roles
- Visit our website, make online enquiries, or subscribe to our mailing lists
- Register for or use the Co. Culture loyalty program or mobile app
- Place an order through our website or mobile app
- Engage with us on social media or any online activity related to our brand
What Personal Information Do We Collect?
The type of Personal Information we collect varies based on your interaction with us and may include:
- Name, address, telephone number, and email address
- Age, gender, birthday, and postcode
- Preferences, order details, and purchase history
- Customer service interactions and feedback
- Payment information (processed securely through third-party payment providers)
- Culture loyalty program activity, points balance, and reward history
- Device identifiers, app usage data, and location data (if enabled on your device)
From franchisees, we may require business details, financial information, and other business-related data. For employees, contractors, or job applicants, we may collect personal, financial, health, and employment-related information.
Via social media, additional data may be obtained including photos, videos, and other information, depending on your privacy settings on those platforms.
In some cases you may interact with us anonymously or using a pseudonym, but this may limit our ability to provide certain services.
How Do We Collect Your Personal Information?
We gather Personal Information through various means including:
- Direct interactions with you in store, online, or via phone
- Our website at www.brooklyndonuts.com.au
- The Co. Culture loyalty app
- Our franchisees
- Third-party platforms and social media sites
- Cookies and tracking technologies on our website (see Cookie Policy section below)
How Do We Use Your Personal Information?
We use your Personal Information for business operations and service provision, including:
- Delivering our products and services
- Operating and managing the Co. Culture loyalty program
- Quality assurance and product improvement
- Responding to enquiries and feedback
- Marketing and promotional activities (with your consent where required)
- Business performance monitoring and analytics
- Compliance with legal obligations
For franchisees, additional uses include credit checks, franchise agreement compliance, franchisee support, and compliance with franchising regulations.
We may disclose your Personal Information to related companies, third-party service providers, during business transactions, and as required by law.
Marketing Communications & Consent
Marketing Communications & Consent
We may send you marketing communications by email or SMS where you have given us your express consent to do so. Consent is obtained via:
- A tick box on the Co. Culture app registration form
- A sign-up form on our website at www.brooklyndonuts.com.au
Each channel (email and SMS) requires a separate, unticked opt-in checkbox. Consent to receive marketing is entirely voluntary and is not a condition of registering for the Co. Culture program or using our services.
You may withdraw your consent and unsubscribe from marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Replying STOP to any marketing SMS
- Contacting us directly at support@bdcc.com.au
We do not share your contact details with third parties for their own marketing purposes.
Cookie Policy
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and support marketing activities.
Types of cookies we use:
- Essential cookies — necessary for the website to function correctly
- Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics)
- Marketing cookies — used to deliver relevant advertising
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.
Disclosure via Social Media
Your engagement on our social media channels is subject to those platforms’ terms and conditions, including their privacy policies. We are not liable for any material shared by you on these platforms.
Cross-Border Disclosure
We may disclose Personal Information to recipients overseas, including cloud service providers and third-party platforms that may store or process data outside of Australia. We take reasonable steps to ensure overseas recipients handle your information in accordance with the Australian Privacy Principles.
Security
We take reasonable measures to secure your Personal Information against misuse, loss, unauthorised access, modification, or disclosure. Our Co. Culture app and website use industry-standard encryption for data transmission. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain your Personal Information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Loyalty program data is retained for as long as your account remains active. You may request deletion of your account and associated data at any time (subject to any legal obligations to retain certain records).
Your Rights — Access, Correction & Deletion
You have the right to:
- Request access to the Personal Information we hold about you
- Request correction of inaccurate or out-of-date information
- Request deletion of your Personal Information (subject to legal obligations)
- Withdraw consent to marketing communications at any time
To exercise any of these rights, please contact our Privacy Officer using the details below.
How to Unsubscribe
You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by contacting us directly. Please allow up to 5 business days for your request to take effect.
Changes to Our Privacy Policy
We may update this Privacy Policy periodically. The updated version will be published on our website with a revised “Last Updated” date. We encourage you to review this policy regularly.
Complaints
If you have a complaint about how we have handled your Personal Information, please contact our Privacy Officer in the first instance. We aim to resolve all complaints promptly and in compliance with the Privacy Act 1988 (Cth).
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Contact — Privacy Officer
Brooklyn Donut & Coffee Co.
📧 support@bdcc.com.au
📞 (07) 3153 1178
🌐 www.brooklyndonuts.com.au