amụma nzuzo

Emelitere ikpeazụ: March 16, 2026

1. Okwu mmalite

Foodfy ("Company", "anyị", "anyị", "anyị") agba mbọ n'ichekwa nzuzo na nchekwa nke ozi gbasara gị. Amụma nzuzo a na-akọwa otu anyị si anakọta, jiri, kpughee, chekwaa ma chekwaa data gị mgbe ị na-emekọrịta ihe n'elu ikpo okwu Foodfy, gụnyere webụsaịtị anyị na foodfy.ai, ngwa mkpanaka, API, bọọdụ ndị ahịa, ọrụ AI, netwọk nnyefe drone, yana ọrụ na njirimara niile metụtara ya (mkpokọta, "Platform").

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Foodfy na-arụ ọrụ gafee mba 250+. Iwu nchekwa data akọwapụtara maka gị nwere ike ịdị iche dabere na ọnọdụ gị. Ebe iwu obodo na-enye nchebe ka ukwuu karịa amụma nzuzo a, iwu obodo na-emeri. Akọwapụtara ihe mgbakwunye mpaghara na ngalaba 16.

2. Njikwa data

Foodfy bụ onye njikwa data na-ahụ maka nhazi data nkeonwe gị site na Platform, ọ gwụla ma ekwuputara ya. Maka Foodfy maka Ọrụ (Akaụntụ ụlọ ọrụ), ụlọ ọrụ na-edebanye aha na-arụ ọrụ dị ka onye na-ahụ maka data nke onye ọrụ, yana Foodfy na-arụ ọrụ dị ka onye nhazi data n'aha ha.

Maka ajụjụ nchedo data, ị nwere ike ịkpọtụrụ onye ọrụ nchekwa data anyị na:

3. Ozi Anyị na-anakọta

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 Ndị ọrụ niile

  • Ozi Akaụntụ: Aha zuru oke, adreesị ozi-e, akara ekwentị, ụbọchị ọmụmụ, foto profaịlụ, na paswọọdụ ezoro ezo.
  • Data nyocha: Asambodo nbanye, ihe nzuzo nyocha ihe abụọ na koodu mgbake, akara API, na ihe nchọpụta nnọkọ.
  • Ngwaọrụ na data teknụzụ: Ụdị ngwaọrụ, sistemụ arụmọrụ na ụdị, ụdị ihe nchọgharị na ụdị, mkpebi ihuenyo, ihe nchọpụta ngwaọrụ pụrụ iche, ozi netwọk mkpanaka, adreesị IP, na akara ngosi ngosi (ihe ngosi ngosi).
  • Usage Data: Pages visited, features used, search queries, click patterns, navigation paths, session duration, timestamps, referring URLs, and interaction events.
  • Data ebe: Odika ọnọdụ ewepụtara na adreesị IP. Site na nkwenye gị nke ọma, ọnọdụ GPS ziri ezi maka nnyefe, nchọpụta azụmahịa dị nso, yana atụmatụ dabere na ọnọdụ.
  • Data nzikọrịta ozi: Messages sent through the Platform, customer support interactions, feedback, and survey responses.

3.2 ndị ahịa

  • Order Data: Ihe enyere iwu, ịtụ akụkọ ihe mere eme, adreesị nnyefe (gụnyere aha ụlọ, okporo ámá, ụlọ, ala, koodu ntinye, na ntuziaka nnyefe), mmasị ịtụ, ihe oriri pụrụ iche chọrọ, na isi mmalite (web, ngwa, kiosk, QR, WhatsApp, atụmatụ nri).
  • Payment Data: Payment method type, billing address, transaction amounts, and transaction history. Full payment card numbers are processed by our PCI DSS-compliant payment processor (Stripe) and are never stored on Foodfy servers.
  • Akwụkwọ adreesị: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
  • Mmasị: Azụmahịa ọkacha mmasị, ihe echekwara, mmasị nri, asụsụ na ntọala ego.
  • Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Ndị mmekọ azụmahịa

  • Ozi azụmahịa: Aha iwu azụmahịa, aha ahia, subdomain, ihe nchọpụta ụlọ ahịa ọha, ụdị azụmahịa (ụlọ nri, ụlọ nri, ụlọ ahịa ọgwụ, ifuru, mkpọsa, onye na-ebubata ngwaahịa, ika), adreesị anụ ahụ, akara ekwentị, email, na URL weebụsaịtị.
  • Data gbasara iwu na ego: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
  • Operational Data: Menu items, product catalog, pricing, inventory levels, operating hours, preparation times, delivery zones, and service configurations.
  • Data Mmekọrịta Ndị Ahịa: Profaịlụ CRM gụnyere usoro ndị ahịa ugboro ugboro, mkpokọta mmefu, RFM (Recency, Frequency, Monetary) akara, usoro ndụ ndụ, ọkwa iguzosi ike n'ihe, ọkwa nnabata ahịa, asụsụ masịrị, mkpado, na ndetu.
  • Data onye ọrụ: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
  • Third-Party Integrations: NJ Ebe Google, ọkwa Google, profaịlụ mgbasa ozi mmekọrịta (WhatsApp, Facebook), na data ejiri ọrụ agbakwunyere gbanwere (ngwanrọ akaụntụ, nyiwe nnyefe).
  • Data Franchise: Njikọ akara Franchise, koodu mpụta, nhazi ọtụtụ ebe, yana nyocha ọkwa ọkwa.

3.4 Ndị mmekọ nnyefe

  • Nnwale njirimara: Ihe njirimara gọọmentị nyere, akwụkwọ ikike ịnya ụgbọ ala, ndebanye aha ụgbọ ala, na akaebe nke mkpuchi.
  • Real-Time Location: Nhazi GPS emelitere n'oge nnyefe arụ ọrụ maka nsochi usoro, njikarịcha ụzọ na ebumnuche nchekwa.
  • Performance Data: Number of completed orders, rejected orders, delivery times, ratings received, and earnings history.
  • Data nnyefe drone: Maka ndị mmekọ nwere ike ịnyefe drone: ọkwa ikike drone, ụdị onye na-agba ọsọ, ọnụ ọgụgụ nnyefe, ọrụ DronePort, na ndekọ arụmọrụ drone.

3.5 Ndị mmekọ mpaghara

  • Ógbè ndị a na-achịkwa: Ọkwa ókèala ekenyere (mpaghara, obodo, steeti, Obodo, Mpaghara), ihe nchọpụta ókèala, na oke ala.
  • Usoro arụmọrụ: Ọnụ ahịa nbanye azụmahịa, ego enwetara, akara afọ ojuju ndị mmekọ, yana metrik uto ókèala.
  • Data ngwa: Territory applicant profile information submitted during the application and onboarding process.

3.6 Ndị ọrụ Akaụntụ ụlọọrụ (Foodfy maka ọrụ)

  • Organization Data: Aha iwu ụlọ ọrụ, ụdị ụlọ ọrụ iwu kwadoro, nọmba ikike ahia, nọmba ụtụ, adreesị edebanyere aha, ozi kọntaktị ịgba ụgwọ, na akara ngosi.
  • Data onye ọrụ: Aha onye ọrụ, email, ọrụ (onye nchịkwa / onye njikwa / onye ọrụ), ngalaba, ebe ọnụ ahịa, nọmba nrụtụ aka onye ọrụ, nguzozi obere akpa, akụkọ azụmahịa azụmahịa obere akpa, na ọkwa ọrụ.

3.7 Ndị na-etinye ego

  • Profaịlụ ndị ọchụnta ego: Ọkwa nzere, mmasị itinye ego, akwụkwọ nkwenye njirimara, na akụkọ nzikọrịta ozi.
  • Ọrụ itinye ego: Mmasị itinye ego, itinye aka na nkwekọrịta, ego ntinye ego na akwụkwọ ozi metụtara ya.

3.8 Ndị ọrụ NutriLife

NutriLife collects sensitive health and biometric data. See Section 9 for detailed information.

3.9 Ozi sitere na ndị ọzọ

  • Social media platforms when you sign in using social login (Google, Facebook, Apple).
  • Payment processors and financial institutions for transaction verification and fraud prevention.
  • Public business directories and government registries for business verification and directory building.
  • Open Food Facts and other nutritional databases for product nutritional data.
  • Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
  • Google Maps na Ebe API maka ọnọdụ, eserese eserese, na data adreesị.
  • Nchịkọta na ndị mmekọ mgbasa ozi maka nyocha okporo ụzọ weebụsaịtị na nha mkpọsa.

4. Ndabere nke iwu maka nhazi

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

  • Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
  • Nkwenye: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
  • Mmasị ziri ezi: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
  • Ọrụ Iwu: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
  • Vital Interest: N'ọnọdụ pụrụ iche, nhazi dị mkpa iji kpuchido ọdịmma mmadụ dị mkpa, dị ka ọnọdụ mberede metụtara allergies nri, ihe nchekwa, ma ọ bụ ihe mberede ahụike ọha.

5. Otu anyị si eji ozi gị

We use the personal data we collect for the following purposes:

5.1 Ọrụ Platform Core

  • Provide, maintain, operate, and improve the Platform and all its features and services.
  • Process and fulfill orders, payments, refunds, and deliveries.
  • Mepụta, gosi na jikwaa akaụntụ onye ọrụ n'ofe ụdị onye ọrụ niile.
  • Kwado usoro nleba anya ozugbo, nhazi nnyefe, yana izipu ọkwọ ụgbọ ala/drone.
  • Process Business Partner payouts and financial reconciliation.
  • Jikwaa ndenye aha Foodfy Gold, uru na ịgba ụgwọ.
  • Operate Foodfy for Work corporate wallets, allocations, and expense tracking.

5.2 Nkwukọrịta

  • Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
  • Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
  • With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Nhazi onwe ya na AI

  • Personalize your experience through AI-powered search results, business recommendations, and product suggestions.
  • Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
  • Power NutriLife features including AI meal photo analysis, nutritional calculation, and personalized dietary guidance.
  • Kwado AI chatbots na nkwado ndị ahịa na-akpaghị aka.

5.4 Nchekwa, nchekwa na nnabata

  • Chọpụta, nyochaa, ma gbochie wayo, mmetọ, ịnweta ikike na-akwadoghị, yana ihe omume iwu akwadoghị ma ọ bụ nke na-emerụ ahụ.
  • Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
  • Soro iwu dị mkpa, ụtụ isi chọrọ, yana iwu usoro iwu.
  • Tinyegharịa usoro ọrụ anyị na nkwekọrịta ndị ọzọ.

5.5 Nchịkọta na Mmelite

  • Mepụta nchịkọta ekpokọtara na enweghị aha iji ghọta usoro ojiji wee kwalite atụmatụ Platform.
  • Perform A/B testing and user experience research.
  • Train and improve AI and machine learning models using anonymized and aggregated data.
  • Mepụta akụkọ ọgụgụ isi azụmaahịa yana nghọta ahịa.

6. Otu anyị si ekekọrịta ozi gị

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Ya na ndị ọrụ Platform ndị ọzọ

  • Ndị mmekọ azụmahịa: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
  • Ndị mmekọ nnyefe: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
  • Ndị ahịa: A na-egosipụta ozi onye mmekọ azụmahịa (aha, adreesị, ọkwa, menu, oge ọrụ) n'ihu ọha na Platform iji mee ka nchọpụta na ịtụ.

6.2 Na ndị na-enye ọrụ

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

  • Stripe: Payment processing, subscription billing, and fraud detection.
  • Cloudflare: Nnyefe ọdịnaya, nchekwa DDoS, yana ngwa weebụ firewall.
  • Anthropic na OpenAI: Ntụle AI na mmụta igwe maka atụmatụ Platform AI. A na-ahazi data ezigara ndị na-eweta AI n'okpuru usoro nhazi data ụlọ ọrụ ha ma ejighị ya zụọ ụdị n'ozuzu ha.
  • Deepgram: Speech-to-text processing for voice-enabled features.
  • Twilio: SMS delivery and voice communication services.
  • Google: Maapụ, Ebe API, nyocha na ọrụ mgbasa ozi.
  • Meta: Njikwa mgbasa ozi mgbasa ozi na nsochi ntụgharị.
  • Ndị na-eweta akụrụngwa igwe ojii: Server hosting, data storage, and computing services.

6.3 Site na nyiwe nnyefe nke ndị ọzọ

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 na ntinye aka ndekọ ego

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Maka ebumnuche iwu na usoro iwu

  • When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
  • To enforce our Terms of Service and other agreements.
  • To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
  • To detect, prevent, or address fraud, security, or technical issues.

6.6 Nyefe azụmahịa

N'ihe metụtara njikọta, nnweta, nhazigharị, enweghị ego, ire akụ ma ọ bụ azụmahịa ụlọ ọrụ yiri ya, enwere ike ibufe data nkeonwe gị na ụlọ ọrụ na-enweta ya. Anyị ga-enye ọkwa tupu data nkeonwe gị abanye n'okpuru iwu nzuzo dị iche.

6.7 Site na nkwenye gị

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Njide data

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

  • Data Akaụntụ nọ n'ọrụ: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
  • Order and Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
  • Payment Records: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
  • Data Onye Mmekọ Azụmahịa: Retained for the duration of the business relationship plus the legally required retention period for business records.
  • NutriLife Health Data: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
  • Data ndenye aha Foodfy Gold: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
  • Data onye ọrụ akaụntụ: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
  • Ndekọ nkwukọrịta: Edobere mmekọrịta nkwado ndị ahịa ruo afọ 3 maka mmesi obi ike na mkpebi esemokwu.
  • Data nchịkọta akụkọ: Enwere ike idowe data nchịkọta achịkọtara na enweghị aha ruo mgbe ebighị ebi n'ihi na ọ naghị akọwapụta ndị mmadụ n'otu n'otu.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI na Mkpebi akpaghị aka

Foodfy na-eji ọgụgụ isi arụ ọrụ yana nhazi akpaaka gafee ọtụtụ atụmatụ Platform. Anyị kpebisiri ike na nghọta gbasara otu teknụzụ ndị a si ahazi data gị.

8.1 Otu AI si ahazi data gị

  • Personalized Recommendations: Ụdị AI na-enyocha akụkọ ihe mere eme gị, omume nchọgharị gị, ọnọdụ, na mmasị gị iji kwado azụmahịa, ngwaahịa na onyinye. Nhazi a dabere na mmasị ziri ezi.
  • Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
  • Ịma amụma: Maka ndị mmekọ azụmahịa, AI na-enyocha data usoro akụkọ ihe mere eme, usoro oge, ihe omume mpaghara, na data ihu igwe iji buru amụma ihe achọrọ. Nke a na-eji data azụmaahịa agbakọtara.
  • Menu Optimization: AI na-atụ aro mgbanwe ọnụahịa na mgbanwe menu dabere na data ahịa, nyocha ndị asọmpi, na mmasị ndị ahịa. A na-eme mkpebi ikpeazụ site na Onye Mmekọ Azụmahịa mgbe niile.
  • Nchọpụta aghụghọ: Sistemu akpaghị aka na-enyocha usoro azụmahịa, ozi ngwaọrụ, na akara omume iji chọpụta ọrụ aghụghọ nwere ike ịdị. Ndị nyocha mmadụ nwere ike nyochaa azụmahịa ndị nwere ọkọlọtọ.
  • NutriLife AI: AI na-enyocha foto nri iji tụọ ọdịnaya nri ma na-ewepụta ndụmọdụ nri ahaziri iche dabere na profaịlụ ahụike gị. Lee Nkebi 9 maka nkọwapụta.
  • Ahịa akpaaka: AI na-ewepụta ọdịnaya ahịa, mgbasa ozi email, na onyinye nkwado maka ndị mmekọ azụmahịa dabere na nkewa ndị ahịa na data omume.

8.2 Ikike gị gbasara mkpebi akpaaka

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

  • You have the right to obtain human intervention and review of the decision.
  • You have the right to express your point of view and contest the decision.
  • You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 Nchekwa data AI

  • A na-ahazi data ezigara ndị na-eweta AI ndị ọzọ (Anthropic, OpenAI) n'okpuru nkwekọrịta nhazi data ụlọ ọrụ. Ejighị data gị zụọ ụdị ebumnuche AI ​​ha niile.
  • Ọzụzụ ụdị AI sitere n'aka Foodfy na-eji data amaghị aha yana chịkọtara nke na-akọwapụtaghị ndị ọrụ n'otu n'otu.
  • Mwepụta AI bụ ihe nwere ike ime ma gosipụta ya dị ka aro ma ọ bụ atụmatụ, ọ bụghị mkpebi siri ike.

9. Health na Biometric Data (NutriLife)

NutriLife processes sensitive health-related and biometric data that requires special protection under applicable privacy laws. This section provides detailed information about how we handle this data.

9.1 Otu nke data ahụike anakọtara

With your explicit consent, NutriLife may collect and process the following categories of health data:

  • Physical Measurements: Ibu ahụ, ịdị elu, pasent abụba anụ ahụ, okirikiri úkwù, okirikiri úkwù, na nrịbama ahụ (BMI).
  • Vital Signs: Ọkwa glucose ọbara, ọgụgụ ọbara mgbali, na ọnụọgụ obi.
  • Ihe ngosi ụdị ndụ: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
  • Ozi nri: Ntinye akwụkwọ nri, foto nri, kalori na nri macronutrient (protein, carbohydrates, abụba, fiber, sugar, sodium), oriri micronutrient (vitamin A ruo B12, calcium, iron, potassium, na ndị ọzọ), ụdị nri, na ihe nfụkasị nri.
  • Profaịlụ ahụike: Ụbọchị ọmụmụ, okike, ọkwa ọrụ, ebumnobi ahụike (mbelata ibu, uru, mmezi), ibu ebumnuche, ọnọdụ ahụike, mgbakwunye ojiji, afọ ime ma ọ bụ ọkwa inye ara.
  • Data Analysis AI: Foto nri nke AI nyochara, akara ntụkwasị obi, yana atụmatụ nri sitere na AI.

9.2 Ndabere iwu na nkwenye

A na-ekewa data ahụike na biometric dị ka data ụdị pụrụ iche n'okpuru GDPR (Nkeji edemede 9) yana iwu dakọtara n'ụwa niile. Anyị na-ahazi data a naanị na ndabere nke nkwenye gị nke ọma, nke ị nyere n'oge NutriLife n'ụgbọ mmiri. Ị nwere ike iwepụ nkwenye gị n'oge ọ bụla site n'ịkwụsị NutriLife na ntọala akaụntụ gị, nke ga-eme ka ihichapụ data ahụike gị n'ime ụbọchị 30.

9.3 Mmachi ebumnuche

Your NutriLife health data is used strictly for the following purposes:

  • Ịgbakọ ọnụego metabolic basal gị (BMR), mkpokọta ume ike kwa ụbọchị (TDEE), yana ebumnuche kalori na nnukwu ihe oriri.
  • Tracking your food diary entries and nutritional intake over time.
  • Providing AI-powered dietary suggestions and meal plan recommendations.
  • Na-egosipụta usoro ahụike yana ọganihu na ebumnuche gị kwuru.

9.4 Nchekwa data siri ike

  • NutriLife health data is encrypted at rest and in transit using AES-256 and TLS 1.3 encryption.
  • A na-echekwa data ahụike iche na data Platform izugbe yana njikwa ohere ndị ọzọ.
  • NutriLife health data is NEVER shared with insurance companies, employers, advertisers, or any third party for purposes unrelated to providing the NutriLife service.
  • A naghị eji data ahụike maka ebumnuche mgbasa ozi ma ọ bụ ree ya ndị ọzọ.
  • Ịnweta data ahụike n'ime Foodfy bụ naanị ndị ọrụ na sistemu dị mkpa na ntọala siri ike ịmara.

10. Foodfy Gold ndenye aha data

When you subscribe to Foodfy Gold, we process additional data related to your membership:

  • Subscription Data: Plan type, subscription status (active, trial, paused, cancelled, expired), start and end dates, trial period dates, and renewal dates.
  • Payment Data: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
  • Ojiji Uru: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Akaụntụ ụlọ ọrụ na data ndị ọrụ

Maka Foodfy maka Ọrụ (Akaụntụ ụlọ ọrụ), a na-ekekọrịta ọrụ nhazi data:

11.1 Mmekọrịta data njikwa

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Anakọtara data

  • Aha onye ọrụ, adreesị ozi-e, na ọrụ n'ime Akaụntụ Ụlọọrụ (onye nchịkwa, onye njikwa, onye ọrụ).
  • Ngalaba, ebe ọnụahịa, na nọmba ntụaka ndị ọrụ dị ka onye were ya n'ọrụ nyere.
  • Wallet balance, credit history, spending history, and refund records.
  • Order history made using the corporate wallet, including items ordered and amounts.

11.3 Ọrụ Ndị were n'ọrụ

Ndị were n'ọrụ na-ahụ maka: (a) inwe usoro iwu kwadoro iji kesaa data ndị ọrụ na Foodfy; (b) ịgwa ndị ọrụ gbasara nhazi data site na Platform; (c) ịzaghachi arịrịọ ikike data ndị ọrụ metụtara data na-achịkwa onye ọrụ; na (d) hụ na nrube isi n'iwu ọrụ na nchekwa data dị.

12. Data nnyefe nke drone

When drone delivery services are used, the following additional data is processed:

  • Route and GPS Data: Ụzọ ụgbọ elu Drone, ebe mgbagharị site na ebe DronePort, nhazi GPS nnyefe, yana oge mbata echere.
  • Data onye mmekọ nnyefe: Maka ndị mmekọ nnyefe nwere ike drone: ọnọdụ dị adị n'oge nnyefe na-arụ ọrụ, ọnụ ọgụgụ nnyefe, na ndekọ ọrụ.
  • DronePort data: Metiris ojiji DronePort, nhazi oge na ọkwa ọrụ.
  • Data nnyefe ndị ahịa: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

A na-ahazi data nnyefe drone site na usoro iwu kwadoro nke ịrụ ọrụ nkwekọrịta yana, ebe ọdabara, mmasị ziri ezi n'ịkwado ọrụ nnyefe dị mma na nke ọma. A na-ahazi data ọnọdụ ezigbo oge nke Ndị Mmekọ Nnyefe naanị n'oge nnyefe nọ n'ọrụ.

13. Nchekwa data

Foodfy na-emejuputa usoro teknụzụ na nhazi zuru oke, nke na-eduzi ụlọ ọrụ iji kpuchido data nkeonwe gị:

13.1 Nchekwa nka nka

  • Izo ya ezo nke data niile na-ebugharị site na iji TLS 1.2+ (HTTPS na-amanye n'ofe ngwụcha ngwụcha Platform niile).
  • Izo ya ezo data nwere mmetụta na izu ike site na iji nzuzo AES-256.
  • Web application firewall (WAF) and DDoS protection powered by Cloudflare.
  • Netwọk nnyefe ọdịnaya (CDN) nwere caching ihu maka arụmọrụ yana nchekwa.
  • PCI DSS-compliant payment processing through Stripe, with no storage of full card numbers on Foodfy servers.
  • Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
  • Nyocha API site na iji token echedoro nwere mmachi ọnụego yana nchọpụta mmetọ.
  • Regular automated vulnerability scanning and penetration testing.

13.2 Nchekwa nhazi

  • Role-based access controls ensuring employees can only access data necessary for their function.
  • Multi-tenant data architecture with country-specific database sharding, ensuring data from different jurisdictions is logically separated.
  • Nkwekọrịta nhazi data na ndị na-eweta ọrụ ndị ọzọ.
  • Regular security awareness training for all personnel with access to personal data.
  • Usoro nzaghachi mberede yana otu nchekwa raara onwe ya nye.
  • Omume mbelata data: anyị na-anakọta naanị data dị mkpa maka ebumnuche akọwapụtara.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Nyefe data mba ụwa

Foodfy na-arụ ọrụ n'ofe mba 250+ site na akụrụngwa zuru ụwa ọnụ yana netwọk Onye Mmekọ Territory. Enwere ike ibufe ma hazie data nkeonwe gị na mba ndị ọzọ na-abụghị obodo obibi gị. Mgbe anyị na-ebufe data nkeonwe na mba ofesi, anyị na-emejuputa nchekwa kwesịrị ekwesị iji hụ na echekwara data gị:

  • Standard Contractual Clauses (SCCs): Maka mbufe site na EEA/UK gaa na mba na-enweghị mkpebi zuru oke, anyị na-eji Usoro nkwekọrịta ọkọlọtọ European Commission kwadoro.
  • Nkwekọrịta nhazi data: Ndị na-enye ọrụ ndị ọzọ na-ahazi data nkeonwe n'aha anyị bụ ndị ejiri nkwekọrịta nhazi data zuru oke nke gụnyere ọrụ nchekwa data, ihe nchekwa chọrọ, na nchebe mbufe oke.
  • Ịkekọrịta data nke obodo-kpọmkwem: Our multi-tenant architecture uses country-specific database shards, which means operational data is stored and processed within or near the geographic region of the relevant Territory, minimizing cross-border transfers for day-to-day operations.
  • Mkpebi zuru oke: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
  • Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. Ikike nzuzo gị

Dabere na ọnọdụ gị, ị nwere ikike dị iche iche gbasara data nkeonwe gị. Foodfy agba mbọ ịsọpụrụ ikike ndị a maka ndị ọrụ niile n'ụwa niile:

15.1 Ikike zuru ụwa ọnụ

Regardless of your location, all Foodfy users may:

  • Nweta: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
  • Ndozi: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
  • ihichapụ: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
  • Restriction: Request that we restrict the processing of your personal data in certain circumstances.
  • Objection: Object to the processing of your personal data for direct marketing purposes. We will comply with all opt-out requests promptly.
  • Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Nhichapụ akaụntụ: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 Otu esi egosipụta ikike gị

You may exercise your rights by:

  • Ịnweta ntọala akaụntụ gị maka njikwa data ọrụ onwe, mgbanwe mmasị na ihichapụ akaụntụ.
  • Iji arịrịọ gị ziga onye ọrụ nchekwa data anyị na [email protected].
  • Izi ozi [email protected] maka ajụjụ nzuzo izugbe.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Ikike nzuzo nke mpaghara

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Mpaghara akụ na ụba Europe na United Kingdom (GDPR / UK GDPR)

Ọ bụrụ na ịnọ na EEA ma ọ bụ UK, ị nwere ikike agbakwunyere ndị a n'okpuru Iwu Nchedo Data General:

  • Nbugharị data: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
  • Mkpebi akpaghị aka: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
  • Onye ọrụ nchekwa data: Our DPO can be reached at [email protected] for any GDPR-related inquiries.

16.2 California, United States (CCPA/CPRA)

Ọ bụrụ na ị bụ onye bi na California, ị nwere ikike ndị a n'okpuru Iwu Nzuzo Ndị Ahịa California (dịka iwu ikike ikike nzuzo nke California meziri):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: Foodfy anaghị ere ozi nkeonwe gị. Anyị anaghị ekekọrịta ozi nkeonwe maka mgbasa ozi omume gafere na-enweghị nkwenye gị.
  • Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
  • Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

N'ime ọnwa 12 gara aga, anyị ereghị ozi nkeonwe dịka CCPA/CPRA siri kọwaa.

16.3 Brazil (LGPD)

Ọ bụrụ na ịnọ na Brazil, ị nwere ikike n'okpuru Lei Geral de Protecao de Dados (LGPD), gụnyere ikike: nkwenye nhazi, ịnweta, mgbazi, enweghị aha, mbugharị, ihichapụ data ejiri nkwenye, ozi gbasara ịkekọrịta, na ikike ịrịọ Autoridade Nacional de Protecao de Dados (ANPD).

16.4 Asia-Pacific (PDPA na iwu dakọtara)

Ọ bụrụ na ịnọ n'ikike nwere Ọrụ Nchekwa data nkeonwe ma ọ bụ iwu dakọtara (gụnyere Singapore, Thailand, na mba Eshia-Pacific ndị ọzọ), ị nwere ikike ịnweta, mezie, ihichapụ, mmachi na mbugharị data nkeonwe gị dịka iwu obodo nyere. Anyị na-ahazi data gị na nrube isi n'iwu PDPA dị, gụnyere ịnweta nkwenye ebe achọrọ yana ịnye ọkwa doro anya nke mmemme nhazi data.

16.5 Middle East na North Africa

Maka ndị ọrụ nọ na UAE, Saudi Arabia, na ikike MENA ndị ọzọ, anyị na-agbaso ụkpụrụ nchekwa data metụtara gụnyere Iwu UAE Federal Degree on Personal Data Protection, Saudi Arabia Personal Data Protection Law, na mpaghara mpaghara kwekọrọ. Nke a gụnyere chọrọ nhazi data ebe ọ dị.

16.6 Ikike ndị ọzọ

Foodfy gbara mbọ irube isi n'iwu nchekwa data na mpaghara niile anyị na-arụ ọrụ. Ọ bụrụ na ikike gị nwere ihe achọrọ nchekwa data akọwapụtara n'elu, biko kpọtụrụ [email protected] maka ozi gbasara otu anyị si echekwa ikike gị n'okpuru iwu mpaghara gị.

17. Ịma Ọkwa Mmebi Data

N'ihe gbasara mmebi data nkeonwe nke na-etinye ihe egwu na ikike na nnwere onwe gị, Foodfy ga-:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and equivalent provisions in other jurisdictions.
  • Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34 and equivalent provisions.
  • Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
  • Detuo mmebi data nkeonwe niile, gụnyere eziokwu, mmetụta, yana ihe ndozi emere, dị ka akwụkwọ ndekọ mmebi nke ime anyị siri dị.

Ọ bụrụ na ị kwenyere na emebiela data gị, biko kpọtụrụ [email protected] ozugbo.

18. Ụmụaka na ndị na-eto eto

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

Ọ bụrụ na anyị amata na anyị anakọtara data nkeonwe n'amaghị ama site n'aka nwatakịrị nọ n'okpuru oke afọ na-enweghị nkwenye nne na nna ma ọ bụ onye nlekọta, anyị ga-eme ihe ozugbo ihichapụ ozi ahụ na sistemụ anyị. Ọ bụrụ na ị kwenyere na anyị anakọtara ozi n'aka nwatakịrị, biko kpọtụrụ anyị ozugbo na [email protected].

19. Njikọ na Ọrụ Ndị Ọzọ

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. Mgbanwe na amụma nzuzo a

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

  • We will update the "Last updated" date at the top of this page.
  • We will provide prominent notice on the Platform.
  • Maka mgbanwe ihe onwunwe na-emetụta nke ukwuu ka anyị si hazie data gị, anyị ga-agwa gị site na email opekata mpe ụbọchị 30 tupu mgbanwe ahụ amalite.
  • Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Kpọtụrụ anyị

Ọ bụrụ na ị nwere ajụjụ ọ bụla, nchegbu, ma ọ bụ arịrịọ gbasara amụma nzuzo a, data nkeonwe gị, ma ọ bụ omume nchedo data anyị, biko kpọtụrụ anyị site na ọwa ndị a:

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.