Privacy Policy

DineOwn — Privacy Policy Effective Date: As displayed on the published policy page. Platform: https://dineown.com Legal Operator: [FULL REGISTERED LEGAL ENTITY NAME] Business Address: [COMPLETE BUSINESS ADDRESS] Privacy Contact: [PRIVACY EMAIL] 1. Introduction DineOwn respects privacy and is committed to handling personal information lawfully, transparently, securely, and responsibly. This Privacy Policy explains how personal information is collected, used, stored, disclosed, protected, and managed when individuals interact with DineOwn websites, restaurant management tools, ordering interfaces, business accounts, partner programs, and related Services. This Policy applies to restaurant owners, employees, affiliate partners, website visitors, customers placing orders through participating restaurants, and other individuals whose information DineOwn processes. This Policy must be read together with the Business Terms of Service, Cookie and Browser Storage Policy, and applicable Data Processing Terms. 2. The Parties Responsible for Information DineOwn is operated by [FULL REGISTERED LEGAL ENTITY NAME], located at [COMPLETE BUSINESS ADDRESS]. DineOwn generally determines the purposes and means of processing personal information required for its own account administration, service billing, customer support, security, platform management, and partner operations. Participating restaurants generally determine the purposes and means of processing information they collect from their food-order customers, employees, and marketing audiences. For restaurant-directed processing, DineOwn may act as a processor or service provider, subject to the restaurant's lawful instructions and the applicable Data Processing Terms. Applicable legal roles depend on the activity and governing law. Certain payment, identity, delivery, and communications providers may act as independent controllers or other regulated parties for their own functions. 3. Information We May Collect Depending on which Services are used, personal information may include: Business account information: names, business contact details, restaurant details, account identifiers, country, currency, subscription information, and authorized staff permissions. Identity and authentication information: login email addresses, authentication records, verified identity information where required, account activity, and security events. Restaurant customer information: customer name, contact information, selected menu items, order details, special instructions, order reference, delivery address, and fulfillment status. Location information: restaurant address, delivery location, map coordinates, and courier location information when supplied or made available through an enabled feature. Billing information: subscription status, billing address, payment-provider identifiers, transaction references, invoices, taxes, charge status, and financial reconciliation records. Affiliate information: partner contact information, referral codes, attributed conversions, commission eligibility, payout instructions, and required compliance records. Technical information: device type, browser, IP address where collected, timestamps, diagnostic information, session information, logs, and security signals. Communications: support requests, customer service messages, relevant notifications, and recorded communication preferences. User-submitted information: restaurant menus, photos, documents, branding, descriptions, and content provided through platform tools. DineOwn seeks to collect only information reasonably necessary for specified lawful purposes. 4. How Information Is Collected Information may be collected: - Directly from individuals through forms and account settings. - Through restaurant checkout and order-management processes. - From authorized employees and restaurant administrators. - Through Google or other enabled identity providers. - From payment, messaging, courier, or integration providers. - Through cookies, local storage, security logging, and permitted analytics. - From partner registration and referral attribution. - Through voluntarily submitted content, documents, or support requests. When information comes from a third party, DineOwn handles it according to its applicable legal role, contract, and lawful processing purpose. 5. Purposes of Processing DineOwn processes information as reasonably necessary to: 1. Create, authenticate, and administer accounts. 2. Deliver the contracted SaaS Services. 3. Support restaurant orders and fulfillment workflows. 4. Facilitate configured payment and delivery integrations. 5. Generate invoices, reconcile subscription charges, and maintain financial records. 6. Provide customer service and technical assistance. 7. Protect accounts, detect fraud, investigate misuse, and maintain operational security. 8. Operate permitted affiliate and referral programs. 9. Improve platform performance and diagnose defects. 10. Manage lawful customer notifications and marketing preferences. 11. Comply with legal, regulatory, accounting, and contractual requirements. Personal information will not be used for an unrelated incompatible purpose without an appropriate lawful basis or additional notice where required. 6. Legal Basis for Processing The lawful basis for processing depends on the information, purpose, individual, and applicable jurisdiction. Where the UK GDPR, EU GDPR, or equivalent requirements apply, processing may rely on contractual necessity, compliance with legal obligations, legitimate interests subject to the required balancing assessment, or valid consent where applicable. Where Indian digital personal data protection requirements apply, processing will be conducted under applicable consent or other legally permitted grounds, taking account of the relevant provisions as they enter into force. Where Australian, US state, or other applicable privacy laws impose additional requirements, DineOwn will apply the legally required notices, rights, and safeguards. Consent to business terms does not automatically constitute consent to optional marketing or unrelated data uses. 7. Restaurant Orders and Customer Data Restaurants are responsible for the lawful collection and use of customer information necessary to provide food-order services. DineOwn processes the information required to create orders, display order status, manage fulfillment, facilitate communications, and enable authorized restaurant operations. Customer order data is made available only to the participating restaurant, appropriately authorized personnel, and relevant providers where necessary for the requested service. A participating restaurant must provide any legally required customer-facing privacy notices and obtain appropriate marketing permissions. DineOwn does not grant restaurants authority to access customer records belonging to unrelated restaurant businesses. 8. Payment Information Subscription payments and permitted restaurant payments may be processed using Razorpay or other supported payment providers. Card or payment credentials submitted through provider-hosted interfaces are handled by the applicable provider under its security and privacy obligations. DineOwn may retain necessary payment references, status information, billing records, and transaction metadata. DineOwn does not require customers to provide full payment-card details to its ordinary restaurant dashboard. Independent payment processors may process information under their own legal obligations and published privacy notices. 9. Delivery and Location Tracking Delivery features may require address information, mapped locations, calculated distances, rider contact information, or location updates. Where location permission is requested, individuals may choose whether to authorize the relevant device or browser access, subject to the requirements of the requested delivery functionality. Delivery location information is used for order fulfillment, routing, delivery fee calculation, estimated arrival information, customer support, and related security purposes. Where live rider tracking is supported, location visibility should be limited to authorized parties and to the period reasonably necessary for fulfillment or legitimate operational records. DineOwn does not authorize the use of customer or rider location information for unrelated surveillance. Location estimates and automated address lookups may be inaccurate and should be confirmed where appropriate. 10. AI-Assisted Processing DineOwn may provide AI-assisted menu recognition, document processing, text generation, business reporting, or related automation. Information submitted to an enabled AI feature may be transmitted to an approved AI service provider for processing. Restaurant administrators are responsible for submitting only material they are authorized to use. AI-generated outputs may be inaccurate and require review before operational use. AI features are intended to support business workflows and are not designed to make legally or similarly significant decisions about individuals without appropriate human involvement and legally required safeguards. Provider-specific data handling, retention, processing locations, and training terms must be assessed before enabling an AI integration. 11. Sharing of Information Personal information may be disclosed, only as necessary and lawful, to: - Authorized restaurant businesses and their staff. - Hosting, application infrastructure, and database providers. - Authentication and account-security providers. - Payment processors and financial-service providers. - Messaging and email delivery providers. - Courier, routing, and mapping providers. - Approved AI service providers when an AI feature is used. - Professional advisers, auditors, and service contractors under appropriate obligations. - Regulatory, legal, or law-enforcement authorities where disclosure is lawfully required. Depending on the enabled DineOwn configuration, providers may include Supabase, Vercel, Razorpay, Google, Resend, Meta/WhatsApp, and OpenAI or approved alternatives. The actual active provider list, data-processing purposes, locations, and contractual arrangements must be maintained in DineOwn's internal supplier records. DineOwn does not authorize third parties to use restaurant customer contact lists for their unrelated marketing purposes. DineOwn will not treat permission to send transactional messages as permission to sell or share SMS or WhatsApp marketing opt-in information for unrelated third-party advertising. 12. Affiliate and Referral Information DineOwn may process referral identifiers, attribution records, partner identities, approved commission information, and necessary payout details. Referral tracking must comply with applicable consent, transparency, and electronic communications requirements. Affiliate partners receive access to their own authorized program information, not the private order records of unrelated restaurants. Required verification and accounting records may be retained as permitted or required by law. 13. Cookies and Browser Storage DineOwn may use cookies, session technologies, local browser storage, and comparable tools to support authentication, preferences, security, and permitted analytics. Essential technologies may be required for core functionality. Where optional analytics or marketing technologies require consent, they must not be activated before obtaining the necessary consent. Additional information appears in the Cookie and Browser Storage Policy. 14. Information Security DineOwn aims to maintain technical and organizational safeguards appropriate to the nature of the information and the risks involved. Safeguards may include access restrictions, authentication controls, secure communications, audit records, monitoring, vulnerability management, and appropriate safeguards for service-provider access. No internet-based system can be guaranteed completely secure. Users and restaurants must also protect their own login credentials, devices, permissions, and authorized integrations. Security incidents will be investigated and notified to relevant parties or authorities where required by applicable law. 15. Data Retention Personal information is retained only for as long as reasonably necessary for the relevant purpose or a valid legal obligation. Retention criteria may include: - The duration of an active business relationship. - Order fulfillment and customer support needs. - Applicable tax, accounting, and payment record obligations. - Security, fraud-prevention, and legitimate dispute needs. - Contractual obligations and legal preservation requirements. - Required backup and recovery processes. Retention periods differ by data category and jurisdiction. DineOwn must maintain a documented, operationally supported retention schedule specifying applicable periods or objective deletion criteria. When information is no longer needed and no legal basis requires preservation, it will be deleted, anonymized, or otherwise securely handled as applicable. Account closure does not necessarily require immediate erasure of records that must lawfully be retained. 16. International Data Transfers DineOwn may use infrastructure and service providers that process information in more than one country. Where applicable privacy law restricts international transfers, DineOwn will implement legally required safeguards, contractual arrangements, notices, or assessments before making the relevant transfer. Actual hosting and processing locations are [CONFIRMED HOSTING AND PROCESSING COUNTRIES]. Where UK, European, Australian, or other cross-border transfer requirements apply, additional approved terms or transfer mechanisms may be necessary. 17. Individual Privacy Rights Depending on applicable law, individuals may have rights to: - Request access to personal information. - Request correction of inaccurate information. - Request deletion where legally available. - Withdraw consent where processing relies on consent. - Object to or restrict certain processing. - Request portability where applicable. - Opt out of specified marketing or data uses. - Raise concerns with a relevant regulator or authority. Individuals can submit requests to [PRIVACY EMAIL]. DineOwn may need to verify identity and determine whether it or the participating restaurant is responsible for the relevant processing. Requests involving restaurant-controlled order data may be referred to the relevant restaurant, with appropriate assistance. Requests will be handled within applicable statutory timeframes. 18. Children and Minors DineOwn business accounts are intended for adults authorized to represent legitimate businesses. The Services are not designed to knowingly collect children's personal information for independent profiling or targeted advertising. Restaurants must comply with applicable rules concerning orders placed by minors and any information relating to children. Where applicable law requires parental consent, special safeguards, or restrictions on children's information, those requirements must be satisfied before the relevant processing occurs. 19. Marketing and Communications Transactional communications may include login confirmations, order updates, subscription notices, support responses, and security alerts. Promotional communications are subject to applicable consent, opt-out, and communications rules. Restaurants are responsible for their own lawful marketing decisions and required permissions. Unsubscribing from marketing does not necessarily prevent service-related communications required to operate an account or fulfill an order. SMS and WhatsApp opt-in, opt-out, message templates, and delivery must comply with applicable provider policies and local law. 20. Public Restaurant Listings Where enabled, a restaurant may choose to publish its approved business profile or appear in a restaurant directory. Public information may include the restaurant's trading name, business description, city, selected address, food categories, images, and business contact information. Private order records, customer payment information, internal analytics, and staff credentials are not intended to be public listing content. Restaurants must ensure they have rights to any publicly published materials. 21. Business Changes and Acquisitions If DineOwn undergoes a lawful reorganization, investment transaction, merger, acquisition, or business transfer, relevant information may be transferred subject to applicable law and appropriate safeguards. Such a transfer does not remove existing legal obligations relating to personal information. Where required, affected individuals will receive appropriate notice. 22. Complaints and Regulatory Rights Privacy concerns should be directed to [PRIVACY EMAIL]. Where legally required, DineOwn will identify the appropriate privacy or grievance contact and provide the applicable complaint-handling mechanism. Individuals may also contact an appropriate data protection authority or regulator where they possess that right. Any required local representative or data protection contact will be identified through an applicable regional notice. 23. Changes to This Policy This Policy may be updated to reflect changes in technology, legal obligations, business operations, or data processing. Material changes will be communicated where legally required, and fresh consent or other lawful authorization will be sought where necessary. The current version and effective date are displayed on the published policy page. 24. Contact Information DineOwn Legal Entity: [FULL REGISTERED LEGAL ENTITY NAME] Registered Address: [COMPLETE BUSINESS ADDRESS] Privacy Email: [PRIVACY EMAIL] Grievance Contact: [NAME AND CONTACT DETAILS WHERE APPLICABLE] Website: https://dineown.com Where a request concerns a specific restaurant food order, the individual should also contact the restaurant responsible for that transaction.