Privacy Policy

NextGen Pay (“we”, “us”) provides QR ordering and kitchen display software for restaurants in New Zealand and Australia. NextGen Pay is a trading name of NextGen Testers Limited. This policy explains how we handle personal information in line with the NZ Privacy Act 2020 and, where applicable, the Australian Privacy Principles.

What we collect

Restaurant managers and staff: account email, name, venue details, and authentication data needed to run the service. Staff PINs are stored as hashes, not plain text.

Prospective customers: when you use the contact form — name, email, phone (optional), venue details you choose to share, and your message.

Diners (guests): guests use the software without creating an account. For QR and menu orders we process order content (items, quantities, table, notes) for the venue. We do not require email or phone for those orders. After a prepaid payment they can type an email if they want a receipt. We do not keep a guest account. For Take bookings we collect first name, last name, and email so we can email the booking codes and so the venue can check guests in and export a guest list.

Technical data: server logs with request identifiers, and optional analytics (Google Analytics 4) when configured — used to operate and improve the service. When enabled, analytics may run on the marketing site, guest order / pay / booking pages, and the restaurant manager workspace. We send page paths and product events (for example checkout started, paid, or failed) with venue slug and payment rail. Successful payment events may include the amount in NZD. We do not send guest names, emails, booking codes, charge ids, or staff PINs to analytics. IP addresses are anonymised where the tool supports it. Some events are sent from our servers to Google so we can count payments that finish after the guest leaves our pages (for example bank or card checkout).

Why we use it

To provide the software, respond to enquiries, secure accounts, prevent abuse, and improve reliability. We do not sell personal information.

Payments

Guest Pay by Bank is processed by our open-banking partner (BlinkPay). Guest Pay by Card is processed by Stripe on the venue’s account. We do not store full card numbers on our servers. Software subscription billing (when live) will use Stripe Billing.

Sharing

We use processors such as hosting (Vercel), database (Supabase), email (Resend), analytics (Google Analytics, when configured), and payment partners as needed to run the product. They process data on our instructions.

Retention & security

We keep information as long as needed for the service, legal obligations, and dispute resolution. We use access controls, encrypted transport, and least-privilege service credentials.

Your rights

You may request access or correction of personal information we hold about you. Contact contact@nextgenpay.co.nz. You may also complain to the NZ Office of the Privacy Commissioner or the OAIC in Australia.

Contact

Questions: Contact form or contact@nextgenpay.co.nz.