Privacy Policy

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Personal Identification: Name, email address, phone number, physical address, date of birth
• Account Information: Username, password, purchase history, saved payment methods, delivery preferences
• Order Information: Food preferences, dietary requirements, allergen information, special instructions, favorite orders
• Payment Information: Credit/debit card details, billing address (securely encrypted and stored)
• Contact Communications: Messages sent through contact forms, customer service inquiries, reviews and feedback
• Marketing Preferences: Newsletter subscriptions, promotional email preferences, communication channel preferences
• Loyalty Program Data: Rewards points, redemption history, tier status, program participation details
• Reservation Information: Table booking details, party size, special occasion notes, accessibility requirements
• Catering Details: Event information, guest count, menu selections, delivery logistics, dietary restrictions

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, search queries, referral sources
• Cookie Data: Session identifiers, user preferences, shopping cart contents, authentication tokens
• Location Information: Approximate location derived from IP address, delivery address for orders
• Performance Data: Page load times, error logs, feature usage statistics

2.3 Information from Third Parties

We may receive information about you from various third-party sources:

• Social Media Platforms: If you connect your social media accounts, we may receive profile information
• Payment Processors: Transaction verification, fraud prevention data
• Delivery Partners: Order fulfillment status, delivery confirmation, customer ratings
• Marketing Partners: Campaign effectiveness data, audience insights (aggregated and anonymized)
• Public Sources: Publicly available information that helps us verify identity or prevent fraud

3.1 Service Provision

• Order Processing: Preparing, fulfilling, and delivering your food orders with accuracy
• Account Management: Creating and maintaining your customer account, authentication, and security
• Customer Support: Responding to inquiries, resolving issues, and providing assistance
• Quality Improvement: Analyzing feedback to enhance our menu, service quality, and customer experience
• Personalization: Customizing your experience based on preferences, order history, and dietary needs
• Loyalty Programs: Managing rewards, points, special offers, and member benefits

3.2 Communication

• Order Confirmations: Sending receipt confirmations, preparation updates, and delivery notifications
• Customer Support: Responding to your questions, concerns, and feedback
• Important Notices: Notifying you of policy changes, system updates, or service disruptions
• Marketing Communications: Sending promotional emails, special offers, and new menu announcements (with your explicit consent)

3.3 Marketing and Analytics

• Personalized Advertising: Creating targeted marketing campaigns based on your preferences and behavior
• Website Analytics: Understanding traffic patterns, popular menu items, and user engagement
• Campaign Measurement: Evaluating the effectiveness of our marketing initiatives
• Market Research: Developing new products and services based on customer insights

3.4 Legal Compliance and Security

• Legal Obligations: Complying with applicable laws, regulations, and legal processes
• Fraud Prevention: Detecting and preventing fraudulent transactions and activities
• Rights Protection: Protecting our rights, property, and safety, as well as those of our customers
• Dispute Resolution: Resolving conflicts, claims, or legal disputes

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure handling of credit card transactions and payment verification
• Delivery Partners: Fulfilling food delivery orders and providing real-time tracking
• Cloud Storage Providers: Secure data storage and backup services with enterprise-grade security
• Email Marketing Services: Managing newsletter campaigns and promotional communications
• Analytics Providers: Website performance analysis and user behavior insights
• Customer Support Tools: Managing customer inquiries and support ticket systems

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legitimate interests:

• Legal Process: Responding to court orders, subpoenas, or government investigations
• Regulatory Compliance: Meeting food safety, health department, and business licensing requirements
• Rights Protection: Defending our legal rights, property, or the safety of our employees and customers
• Emergency Situations: Addressing immediate threats to public safety or health

4.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets:

• Your information may be transferred to the new entity
• We will notify you before any transfer occurs
• The new owner must comply with this Privacy Policy
• You will have the right to opt-out if you disagree with the transfer

4.4 With Your Explicit Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in customer testimonials or case studies
• Sharing feedback with food suppliers for quality improvement
• Collaborating with nutritionists for dietary recommendation services

5.1 Technical Security Measures

• Encryption: All data transmission is protected using industry-standard SSL/TLS encryption
• Firewall Protection: Advanced firewall systems monitor and block unauthorized access attempts
• Access Controls: Strict access limitations ensuring only necessary personnel can access personal data
• 24/7 Monitoring: Continuous security monitoring and intrusion detection systems
• Data Backups: Regular, secure backups to prevent data loss and ensure business continuity
• Vulnerability Testing: Regular security assessments and penetration testing

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Comprehensive policies for personal data processing and storage
• Confidentiality Agreements: All employees and third parties sign strict confidentiality agreements
• Incident Response Plan: Established procedures for responding to security breaches or data incidents
• Security Audits: Regular internal and external security audits to identify and address vulnerabilities

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your information:

• Strong Passwords: Use complex, unique passwords for your account
• Account Protection: Never share your login credentials with others
• Public Computers: Always log out when using shared or public devices
• Suspicious Activity: Be cautious of phishing emails or suspicious links
• Immediate Reporting: Contact us immediately if you suspect unauthorized access to your account

5.4 Security Breach Notification

In the unlikely event of a security breach that affects your personal data, we commit to:

• Promptly investigate and contain the breach
• Notify affected customers within 72 hours of discovery
• Inform relevant supervisory authorities as required by law
• Provide clear information about what data was involved and steps being taken
• Offer guidance on protective measures you can take

6.1 Tracking Technologies Used

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising campaign effectiveness and audience targeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Storing user preferences and shopping cart data
• Session Storage: Temporary data storage during your visit

6.2 Cookie Management

You have control over cookie settings:

• Browser Settings: Configure your browser to accept, reject, or delete cookies
• Cookie Preferences: Use our cookie consent tool to customize your preferences
• Opt-Out Options: Disable specific tracking technologies through industry opt-out tools

Important Note: Disabling certain cookies may affect website functionality, including the ability to place orders or access your account.

7.1 Right of Access

You have the right to request access to the personal data we hold about you, including:

• What personal data we collect and process
• Why we collect and use your data
• Who we share your data with
• How long we retain your information
• A copy of your personal data in a commonly used format

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data, including:

• Updating contact information
• Correcting order history or preferences
• Modifying dietary requirements or allergen information
• Updating payment or delivery information

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis
• You object to processing and there are no overriding legitimate grounds
• Your data has been unlawfully processed

7.4 Right to Restrict Processing

You can request limitation of data processing when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification of legitimate grounds

7.5 Right to Data Portability

You can request your personal data in a machine-readable format to:

• Transfer your data to another service provider
• Keep a personal copy of your information
• Use your data with compatible services

7.6 Right to Object

You can object to processing of your personal data, particularly for:

• Direct marketing communications
• Profiling for marketing purposes
• Processing based on legitimate interests
• Scientific or historical research (with exceptions)

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or significantly affects you.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided in Section 13. We will:

• Respond to your request within 30 days
• Verify your identity before processing requests
• Provide clear information about actions taken
• Not charge fees for reasonable requests

9.1 Protection Measures

When we transfer your personal data internationally, we ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with EU Commission adequacy decisions
• Standard Contractual Clauses (SCC): Legally binding data protection obligations
• Data Processing Agreements: Comprehensive agreements with all international service providers
• Security Measures: Technical and organizational measures equivalent to EU standards
• Regular Audits: Ongoing compliance monitoring and verification

9.2 Transfer Destinations

Your data may be transferred to and processed in:

• United States: Cloud storage services and data analytics (with appropriate safeguards)
• European Union: Customer support and marketing services
• Other Countries: As necessary for service provision, always with adequate protection measures

10.1 Safe Data Disposal

When retention periods expire, we ensure secure data disposal through:

• Electronic Deletion: Complete and unrecoverable deletion of digital records
• Physical Destruction: Secure shredding of physical documents
• Backup Removal: Elimination from all backup systems and archives
• Disposal Documentation: Maintaining records of data disposal activities
• Third-Party Confirmation: Ensuring service providers also delete retained data

12.1 Change Notification Process

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will:

• Website Notice: Post a prominent notice on our website homepage
• Email Notification: Send notification emails to registered users for significant changes
• Account Dashboard: Display notifications in your account dashboard upon login
• Consent Request: Request explicit consent for material changes that expand data use
• Advance Notice: Provide at least 30 days notice before significant changes take effect

12.2 Staying Informed

To stay updated on policy changes:

• Check Regularly: The latest version is always available on our website
• Review Date: Check the "Last Updated" date at the top of this policy
• Continued Use: Continued use of our services after changes indicates acceptance
• Discontinue Use: You may stop using our services if you disagree with changes

13.1 Filing Complaints

If you have concerns about our privacy practices:

• Contact Us First: We encourage you to contact us directly for prompt resolution
• Supervisory Authority: You may also file complaints with relevant privacy regulators
• Data Protection Authority: Contact your local data protection authority if you believe we've violated privacy laws

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time:

• Unsubscribe Links: Click unsubscribe in any marketing email
• Account Settings: Update preferences in your customer account
• Customer Support: Contact our support team for assistance
• Phone Request: Call us during business hours
• Written Request: Send a written withdrawal request

14.2 Account Deletion Process

To completely remove your account and associated data:

• Account Dashboard: Use the account deletion option in your settings
• Customer Support: Contact support for assisted account deletion
• Identity Verification: We may require identity confirmation for security
• Data Retention: Some data may be retained for legal compliance as outlined in Section 10
• Confirmation: You'll receive confirmation once deletion is complete