Trust
Customer data and privacy
May 3, 2026What to consider before collecting names, phone numbers, addresses, birthdays, or delivery notes.
Collect only what you need. A cake order may need a phone number and delivery address; it probably does not need a customer's date of birth or employer.
Tell customers why you need the information and where it goes. If you use forms, spreadsheets, booking tools, or social media messages, make sure access is limited to people who need it.
Delete old data that no longer has a business purpose. If a customer asks what you hold, be ready to answer clearly.
Key facts
- The Privacy Commissioner explains that agencies need to tell people when collecting personal information and how it will be used.
- Customer details such as names, phone numbers, addresses, and order notes are personal information when they identify a person.