Privacy

Information collected

You can browse public information without an account. Only approved, published real brewery profiles appear in customer search. We do not sell alcohol, take payments, make bookings or arrange deliveries.

• Accounts: email address, chosen account type and sign-in details from email/password or Google. What Google shares depends on its authorisation process.
• Favourites: breweries you save.
• Brewery claims: business role, contact email, phone, website and ownership evidence, plus the listing requested and its review outcome.
• Brewery drafts: brewery name and address, contact name, confirmed account email, optional verification contact and review outcome. You can edit only your own pending draft; existing records still need approved membership.
• Brewery logos: uploaded through the dashboard, stored privately and shown only once the listing is approved and published.
• Reviews & ratings: star rating and review text, one per brewery per account, plus any official reply you post as an approved member.
• Community contributions: public nickname, beer or keg details, questions and replies, plus account links and posting dates used to manage them.
• Corrections & moderation: suggestions, reports, reasons, notes and review/audit records. Optional account-deletion feedback is covered below.
• Contact enquiries: category, reply email, optional name, message and submission date. Form enquiries are saved in a restricted admin inbox with new/read/closed status; an email alert is attempted to the business mailbox after saving; delivery is not guaranteed. Direct emails are handled through the business mailbox and its email provider. Submission limits use short-lived hashed email counters and a global counter. The form stores no raw IP addresses, and hashing is not a guarantee of anonymity.

Information comes from forms you complete, sign-in providers, public brewery research and your use of the service. Please leave out identity documents, payment details, sensitive personal information or someone else’s private details unless genuinely needed and a secure channel has been agreed.

Location and technical information: search text is processed to find a suburb or postcode. Device location is used only when you tap “Use my location” and allow browser permission, and those coordinates are not saved to your account. Geocoding and map providers receive the requests their services need. Sessions are kept in browser storage. Hosting and diagnostics may process IP addresses, device and browser details, page requests and errors. Our providers may keep standard technical logs for security and operation.

Public & private information

• Public: published brewery details and logos; reviews, ratings and nicknames; questions and official brewery or moderator replies. Anyone can read them without signing in, and others may copy or index them.
• Not shown publicly: account email and authentication identifiers, saved favourites, claim evidence, moderation reports and contact enquiries. Only authorised administrators see contact submissions. A business email or phone entered as a public listing contact can appear on that listing.
• Linked internally: contributions and claims are tied to an account for ownership checks, editing, deletion and moderation, even though the public interface never shows the account identifier.

Use a nickname if you prefer — your post text is still public, so leave out contact details. Public research is identified separately from brewery-supplied information, and an owner-managed label is not a guarantee of current stock.

How information is used & shared

• Run sign-in, favourites, location searches and the directory.
• Review ownership by hand, let applicants edit only their own pending drafts, and give existing-listing access only to approved members. Publication is approved separately, and the directory must be open before a listing goes public.
• Display contributions, investigate reports, correct listings, and protect accounts and the service from misuse.
• Support administration and troubleshooting, and meet applicable legal obligations.

Public information is shared with visitors. Administrators can review claims, reports and relevant account information. Approved breweries manage their own listing and reply to public contributions — they cannot access anyone’s private accounts. Service providers handle authentication, storage, hosting, maps and diagnostics. Disclosure may also be needed to comply with law or handle a security incident, subject to legal requirements.

No alcohol payment information is collected. There is no marketing list or preference control today; any future marketing would need consent, sender identification and unsubscribe options.

Providers & overseas data

The site uses Lovable for development, hosting and connected authentication, database and logo storage services, plus Google sign-in, Google Maps and OpenStreetMap’s Nominatim geocoding. Those providers’ own terms and privacy notices also apply to information they collect directly.

Service providers and overseas processing: we use trusted providers for hosting, authentication, database storage, email delivery, maps (Google Maps) and location search (OpenStreetMap). Some of these providers may store or process information outside Australia, including in the United States. We share only what each service needs to work.

Retention & account deletion

• Deleting your account is immediate self-service. From Your account, tick the confirmation box and choose “Delete my account”. Customers and brewery users both do this and are signed out straight away.
  • Removed with the account: favourites, claims, membership, reviews, questions, official replies and reports.
  • Admin accounts cannot self-delete here, so site administration is not locked out.
• Brewery records are retained. Deletion removes your editing access and linked draft application, not the separate business record or its information and logo.
  • That record is not necessarily public — publication still depends on approval and launch settings.
  • Use the correction process to flag details that should change.
• Deletion feedback is optional. A reason and short free-text note are saved to the administrative audit log with no account identifier, email or name attached. Don’t put personal details in the note — free text could still identify you.
• Some limited data may be kept for security and legal reasons — this is not a promise to erase every historical trace immediately.
  • Audit records, provider logs, backups and copies others made of public content may remain; their retention and removal arrangements are unconfirmed.
  • We keep information only as long as needed to run the service, resolve disputes and meet legal obligations.
• Contact enquiries are not linked to an account and are not removed when you delete it.
  • Ask through Contact us about access, correction or deletion of an enquiry.
  • Expired spam-control counters are cleared during later contact intake; provider logs and backups may differ.

Access, correction & choices

• Manage favourites and delete your account from Your account.
• Edit or delete your own refill review, and delete your own questions.
• Approved brewery members can update their own listing.
• Decline device-location permission and search manually instead.

For inaccurate brewery details, suggest a correction (sign-in required) or use Contact us without an account. Signed-in users can report community posts using the report controls. For personal-information access, correction or a privacy complaint, the Contact page works without sign-in; final operator details and the complaints process are still outstanding, listed below.

Security & young people

We use authenticated accounts, database access restrictions, approved brewery membership and restricted administrative actions. These are precautions, not a guarantee against every incident. Protect your password and don’t share account access.

The directory covers alcohol-related services and is intended for adults. Buying alcohol requires you to be at least 18, and the brewery handles its own age checks. There is no age-verification gate on the site. Do not submit children’s personal information.

Changes to this policy

The date above shows when this policy was last updated. We will update it when the service or our information practices change, and make material changes clear on the website.

Contact us

For privacy requests, complaints or disputes, email hello@fillmykeg.com.au or use Contact us without signing in.

Operator: Fill My Keg · ABN: 19712469673.

Website: https://fillmykeg.com.au.

Send enough information to identify the issue, but avoid unnecessary sensitive information. We may need to confirm your identity before releasing account information. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

See our Privacy Policy and Terms of use.