Kaupapahere Tūmataiti

Whakahoutanga whakamutunga: March 16, 2026

1. Kupu Whakataki

Foodfy ("Kamupene", "tatou", "tatou", "tatou") e u ana ki te tiaki i te noho muna me te haumarutanga o o korero whaiaro. Ko tenei Kaupapahere Whaiaro e whakamarama ana me pehea e kohikohi ai, e whakamahi ana, e whakaatu ana, e penapena ana, e tiaki ana i o raraunga ina taunekeneke koe me te papaaa Foodfy, tae atu ki to maatau paetukutuku i foodfy.ai, tono pūkoro, API, papatohu kaihokohoko, ratonga AI, whatunga tuku drone, me nga ratonga me nga ahuatanga katoa e pa ana (tetahi, ko te "Platform").

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Ka mahi a Foodfy puta noa i te 250+ whenua. Ko nga ture tiaki raraunga motuhake e pa ana ki a koe ka rereke pea i runga i to waahi. Mena he nui ake te whakamarumaru o te ture a-rohe i tenei Kaupapahere Whaiaro, ka mana te ture a-rohe. Ko nga whakaritenga aa-rohe taapiri kei te Tekiona 16.

2. Kaiwhakahaere Raraunga

Ko Foodfy te kaiwhakahaere raraunga te kawenga mo o raraunga whaiaro i tukatukahia ma te Raarangi, mena kaore i kiia. Mo Foodfy for Work (Corporate Accounts), ko te whakahaere whakauru hei kaiwhakahaere raraunga mo nga raraunga whaiaro o nga kaimahi, a ko Foodfy te mahi hei tukatuka raraunga mo ratou.

Mo nga patai whakamarumaru raraunga, ka taea e koe te whakapā atu ki to matou Apiha Tiaki Raraunga i:

3. Nga korero ka kohia e matou

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 Kaiwhakamahi Katoa

  • Mōhiohio Pūkete: Te ingoa katoa, te wahitau imeera, te nama waea, te ra whanau, te whakaahua whakaahua me te kupuhipa kua whakamunatia.
  • Raraunga Motuhēhēnga: Nga tohu whakaurunga, nga mea ngaro whakamotuhēhēnga-rua me nga waehere whakaora, nga tohu API, me nga tohu waahi.
  • Pūrere me te Raraunga Hangarau: Te momo taputapu, te punaha whakahaere me te putanga, te momo tirotiro me te putanga, te taumira mata, nga tohu taputapu ahurei, nga korero whatunga waea, te IP IP, me nga tohu whakamohiotanga pana (Tokens Expo).
  • Usage Data: Nga wharangi i torohia, nga ahuatanga i whakamahia, nga uiui rapu, nga tauira paato, nga huarahi whakatere, te roanga o te waahi, nga tohu wa, nga URL korero, me nga huihuinga taunekeneke.
  • Raraunga Tauwāhi: Tauwāhi tata i ahu mai i te wāhitau IP. Na to whakaae tino, te waahi GPS tika mo te tuku, te kitenga pakihi tata, me nga ahuatanga-a-tauwāhi.
  • Raraunga Whakawhitiwhiti: Ko nga karere i tukuna ma te Paerewa, nga taunekeneke tautoko a nga kaihoko, nga urupare, me nga whakautu rangahau.

3.2 Kaihoko

  • Raraunga Raraunga: Ko nga taonga kua ota, ota hitori, wahitau tuku (tae atu ki te ingoa whare, te tiriti, te whare noho, te papa, te waehere urunga, me nga tohutohu tuku), nga manakohanga ota, nga whakaritenga kai motuhake, me te puna tono (paetukutuku, taupānga, kiosk, QR, WhatsApp, mahere kai).
  • Raraunga Utu: Payment method type, billing address, transaction amounts, and transaction history. Full payment card numbers are processed by our PCI DSS-compliant payment processor (Stripe) and are never stored on Foodfy servers.
  • Puka Wāhitau: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
  • Manakohanga: Nga pakihi tino pai, nga taonga kua tiakina, nga manakohanga kai, te reo me nga tautuhinga moni.
  • Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Hoa Pakihi

  • Nga korero pakihi: Te ingoa ture pakihi, te ingoa hokohoko, te roheroto, te tohu tohu toa a te iwi, te momo pakihi (whare kai, hokohoko, rongoa, puawai, hokohoko, kaiwhakarato, waitohu), wahitau tinana, tau waea, imeera, me te URL paetukutuku.
  • Raraunga Ture me te Putea: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
  • Raraunga Mahi: Ko nga taonga tahua, te raarangi hua, te utu, nga taumata rarangi, nga haora whakahaere, nga wa whakarite, nga rohe tuku, me nga whirihoranga ratonga.
  • Raraunga Whanaungatanga Kiritaki: Ko nga korero a CRM tae atu ki te auau ota a nga kaihoko, nga whakapaunga katoa, nga kaute RFM (Recency, Frequency, Monetary), te wahanga o te oranga, te taumata pono, te mana hokohoko, te reo pai, nga tohu, me nga tuhipoka.
  • Raraunga Kaimahi: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
  • Third-Party Integrations: Google Place ID, Google whakatauranga, pūkete pāpāho pāpori (WhatsApp, Facebook), me nga raraunga whakawhiti me nga ratonga whakauru (rorohiko kaute, papaa tuku).
  • Raraunga Franchise: Te hononga waitohu franchise, waehere putanga, whirihoranga maha-tauwāhi, me te tātari taumata waitohu.

3.4 Hoa Tukunga

  • Manatokonga Tuakiri: Ko te tohu a te kawanatanga, te raihana taraiwa, te rehita waka, me te tohu o te inihua.
  • Real-Time Location: Ko nga taunga GPS kua whakahoutia i te wa e tukuna ana mo te ota, te arotau huarahi, me nga kaupapa haumaru.
  • Performance Data: Te maha o nga ota kua oti, nga ota i paopaohia, nga wa tuku, nga reiti i whakawhiwhia, me te hitori o nga moni whiwhi.
  • Raraunga Tukunga Drone: Mo nga hoa tuku haruru: te mana kaha o te haruru, te momo kaikawe, nga tatauranga tuku, te mahi a DronePort, me nga raarangi mahi haruru.

3.5 Nga hoa o te rohe

  • Nga rohe whakahaere: Kua whakaritea te taumata rohe (Rohe, Whenua, State, Taone, Rohe), tohu rohe, me te whānuitanga matawhenua.
  • Inenga Mahinga: Ko nga reeti whakaurunga pakihi, nga hua kua puta, nga tohu pai o nga hoa, me nga inenga tipu o te rohe.
  • Raraunga Tono: Territory applicant profile information submitted during the application and onboarding process.

3.6 Kaiwhakamahi Pūkete Rangatōpū (Foodfy for Work)

  • Raraunga Whakahaere: Te ingoa ture a te kamupene, te momo hinonga ture, te nama raihana hokohoko, te nama taake, te wahitau kua rehitatia, nga korero whakapiri nama, me te waitohu.
  • Raraunga Kaimahi: Ingoa kaimahi, īmēra, tūranga (kaiwhakahaere/kaiwhakahaere/kaimahi), tari, pokapū utu, tau tohutoro kaimahi, toenga putea, hitori hokohoko putea, me te mana mahi.

3.7 Kaipupuri

  • Kōtaha Kaipupuri: Te mana whakamana, nga manakohanga haumi, nga tuhinga manatoko tuakiri, me te hitori korero.
  • Mahi Whakangao: Nga paanga haumi, te urunga mahi, nga moni haumi, me nga reta e pa ana.

3.8 Kaiwhakamahi NutriLife

Ka kohia e NutriLife nga raraunga hauora tairongo me te raraunga koiora. Tirohia te Wāhanga 9 mo nga korero taipitopito.

3.9 Nga korero mai i nga Tuatoru

  • Social media platforms when you sign in using social login (Google, Facebook, Apple).
  • Payment processors and financial institutions for transaction verification and fraud prevention.
  • Public business directories and government registries for business verification and directory building.
  • Whakatuwherahia nga Meka Kai me etahi atu paataka kai mo nga raraunga kai kai.
  • Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
  • Google Maps and Places API mo te tauwāhi, te mapi, me te raraunga wāhitau.
  • Nga tātaritanga me nga hoa panui mo te tātari hokohoko paetukutuku me te ine kaupapa.

4. Tikanga Ture mo te Tukatuka

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

  • Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
  • Whakaaetanga: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
  • Tikanga Tika: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
  • Whakaaetanga Ture: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
  • Vital Interest: I roto i nga ahuatanga rereke, me mahi te tukatuka hei whakamarumaru i nga mea tino nui o te tangata, penei i nga ahuatanga ohorere e pa ana ki nga mate mate kai, nga maiki haumaru, me nga ohorere hauora tūmatanui.

5. Me pehea matou e whakamahi ai i o korero

We use the personal data we collect for the following purposes:

5.1 Nga Mahi Papaa Matua

  • Provide, maintain, operate, and improve the Platform and all its features and services.
  • Process and fulfill orders, payments, refunds, and deliveries.
  • Waihanga, whakamotuhēhē, whakahaere i ngā pūkete kaiwhakamahi puta noa i ngā momo kaiwhakamahi katoa.
  • Whakahohehia te aroturuki ota-a-waa, te ruruku tuku, me te tuku taraiwa/tere.
  • Process Business Partner payouts and financial reconciliation.
  • Whakahaerehia nga ohaurunga Foodfy Gold, nga painga, me te nama.
  • Whakahaerehia nga putea umanga a Foodfy for Work, nga tohatoha, me te aroturuki utu.

5.2 Whakawhitiwhiti

  • Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
  • Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
  • With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Whakawhaiaro me AI

  • Personalize your experience through AI-powered search results, business recommendations, and product suggestions.
  • Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
  • Power NutriLife features including AI meal photo analysis, nutritional calculation, and personalized dietary guidance.
  • Whakahohehia nga chatbots AI me te tautoko kiritaki aunoa.

5.4 Haumarutanga, Haumarutanga me te Whakaaetanga

  • Kimihia, tirotirohia, ka aukati i te tinihanga, te tukino, te urunga kore mana, me etahi atu mahi kore ture, mahi kino ranei.
  • Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
  • Te whai i nga herenga ture e tika ana, nga whakaritenga taake, me nga mana whakahaere.
  • Whakamana i a maatau Ture Ratonga me etahi atu whakaaetanga.

5.5 Te tātari me te whakapai ake

  • Whakahaerehia nga tātaritanga whakahiato me te ingoamuna kia mohio ai ki nga tauira whakamahi me te whakapai ake i nga ahuatanga o te Paerewa.
  • Perform A/B testing and user experience research.
  • Train and improve AI and machine learning models using anonymized and aggregated data.
  • Hangaia nga purongo mohio pakihi me nga tirohanga maakete.

6. Me pehea matou e tohatoha ai i o korero

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Me etahi atu Kaiwhakamahi Paerewa

  • Hoa Pakihi: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
  • Nga Hoa Tukunga: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
  • Kaihoko: Ko nga korero a te Hoa Pakihi (ingoa, wahi noho, whakatauranga, tahua, haora mahi) ka whakaatuhia ki runga i te Paerewa kia taea ai te rapu me te ota.

6.2 Me nga Kaituku Ratonga

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

  • Stripe: Payment processing, subscription billing, and fraud detection.
  • Kapuapua: Te tuku ihirangi, te whakamarumaru DDoS, me te papangaahi tono paetukutuku.
  • Anthropic me OpenAI: AI me te tauira ako miihini te whakatauira mo nga ahuatanga AI Platform. Ko nga raraunga ka tukuna ki nga kaiwhakarato AI ka tukatukahia i raro i o raatau tikanga tukatuka raraunga hinonga, kaore e whakamahia ki te whakangungu i o raatau tauira whanui.
  • Deepgram: Speech-to-text processing for voice-enabled features.
  • Twilio: SMS delivery and voice communication services.
  • Google: Mahere, Places API, tātaritanga, me nga ratonga panui.
  • Meta: Te whakahaere kaupapa whakatairanga me te aroturuki i te huringa.
  • Nga Kaituku Hanganga Kapua: Server hosting, data storage, and computing services.

6.3 Me nga Paerewa Tukunga Tuatoru

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 Me te Whakauru Kaute

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Mo nga Kaupapa Ture me te Ture

  • When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
  • To enforce our Terms of Service and other agreements.
  • To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
  • To detect, prevent, or address fraud, security, or technical issues.

6.6 Whakawhiti Pakihi

I runga i te hononga ki te whakakotahitanga, te hoko, te whakatikatika, te kaihau, te hoko rawa, me te tauwhitinga rangatōpū rite ranei, ka tukuna pea o raraunga whaiaro ki te hinonga whiwhi. Ka tukuna e matou he panui i mua i te urunga o to raraunga whaiaro ki tetahi kaupapa here tūmataiti rereke.

6.7 Me To Whakaae

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Pupuri Raraunga

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

  • Raraunga Pūkete Hohe: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
  • Te Ota me nga Rekoata Whakawhitiwhiti: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
  • Payment Records: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
  • Raraunga Hoa Pakihi: Retained for the duration of the business relationship plus the legally required retention period for business records.
  • Raraunga Hauora NutriLife: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
  • Raraunga Ohaurunga Foodfy Gold: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
  • Raraunga Kaimahi Pūkete Rangatōpū: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
  • Rangitaki Whakawhitiwhiti: Ko nga taunekeneke tautoko a nga kaihoko i pupuri mo te 3 tau mo te whakapumautanga o te kounga me te whakatau tautohetohe.
  • Raraunga tātaritanga: Ko nga raraunga wetewete whakahiato me te ingoamuna ka mau tonu mo ake tonu atu na te mea kaore i te tautuhi takitahi.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI me te Whakatau Whakatau Aunoa

Ka whakamahi a Foodfy i te mohiotanga horihori me te tukatuka aunoa puta noa i nga waahanga maha. E pono ana matou ki te maarama mo te pehea o enei hangarau ki te tukatuka i o raraunga.

8.1 Me pehea te Tukatuka AI i To Raraunga

  • Personalized Recommendations: Ka tātarihia e nga tauira AI to hitori ota, te whanonga tirotiro, te waahi, me nga manakohanga ki te taunaki pakihi, hua, me nga tuku. Ko tenei tukatuka i runga i nga paanga tika.
  • Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
  • Te Matapae Tono: Mo nga Hoa Pakihi, ka tātarihia e AI nga raraunga ota o mua, nga tauira kaupeka, nga huihuinga o te rohe, me nga raraunga huarere hei matapae i te hiahia. Ka whakamahi tenei i nga raraunga pakihi whakahiato.
  • Tahua Arotautanga: E kii ana a AI ki nga whakarereketanga utu me nga whakarereketanga tahua i runga i nga raraunga hoko, tātari whakataetae, me nga hiahia a nga kaihoko. Ko nga whakataunga whakamutunga ka mahia e te Hoa Pakihi.
  • Te kimi tinihanga: Ka tātarihia e nga punaha aunoa nga tauira tauwhitinga, nga korero taputapu, me nga tohu whanonga hei tohu i nga mahi tinihanga. Ka arotakehia pea nga tauwhitinga kua tohua e nga kaitirotiro tangata.
  • NutriLife AI: Ka tātarihia e AI nga whakaahua kai hei whakatau tata i nga ihirangi kai me te whakaputa i nga taunakitanga kai e pa ana ki to korero hauora. Tirohia te Wahanga 9 mo nga taipitopito.
  • Hokohoko Aunoa: Ka hangaia e AI nga ihirangi hokohoko, nga kaupapa imeera, me nga tuku whakatairanga mo nga Hoa Pakihi i runga i te waahanga o nga kaihoko me nga raraunga whanonga.

8.2 Ō Motika mo nga Whakatau Aunoa

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

  • You have the right to obtain human intervention and review of the decision.
  • You have the right to express your point of view and contest the decision.
  • You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 Nga Tiaki Raraunga AI

  • Ko nga raraunga ka tukuna ki nga kaiwhakarato AI tuatoru (Anthropic, OpenAI) ka tukatukahia i raro i nga kirimana tukatuka raraunga hinonga. Ko o raraunga kaore e whakamahia ki te whakangungu i o raatau tauira AI.
  • Ko te whakangungu tauira AI na Foodfy e whakamahi ana i nga raraunga ingoamuna me te whakahiato kaore i te tautuhi i nga kaiwhakamahi takitahi.
  • Ko nga putanga AI he tupono noa, ka whakaatuhia hei whakaaro, hei whakatau tata ranei, ehara i te whakatau tuturu.

9. Te Hauora me te Raraunga Biometric (NutriLife)

Ka tukatukahia e NutriLife nga raraunga e pa ana ki te hauora me te koiora me te tiaki motuhake i raro i nga ture tūmataiti e tika ana. Ko tenei waahanga e whakarato ana i nga korero mo te whakahaere i enei raraunga.

9.1 Nga waahanga o nga Raraunga Hauora i Kohia

With your explicit consent, NutriLife may collect and process the following categories of health data:

  • Physical Measurements: Te taumaha o te tinana, te teitei, te paheketanga o te ngako tinana, te porowhita o te hope, te porowhita o te hope, me te taupū papatipu tinana (BMI).
  • Vital Signs: Ko nga taumata huka toto, te panui toto toto, me te tere o te ngakau.
  • Tohu Tauoranga: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
  • Nga korero mo te kai: Ko nga tuhinga raarangi kai, ko nga whakaahua kai, ko te kai kaarai me te tonotono (te pūmua, te warowaihā, te ngako, te muka, te huka, te konutai), te kai moroiti (huaora A ki te B12, te konupūmā, te rino, te pāhare pāporo, me etahi atu), te momo kai, me te mate pāwera kai.
  • Kōtaha Hauora: Te ra whanau, te ira tangata, te taumata mahi, nga whainga hauora (te whakaheke taumaha, te whiwhi, te tiaki), te taumaha kua whakaritea, nga tikanga hauora, te whakamahi taapiri, te wa e hapu ana, te u ranei.
  • Raraunga Whakamaramatanga AI: Ko nga whakaahua kai i wetewetehia e AI, nga tatauranga maia, me nga whakatau tata kai a AI.

9.2 Kaupapa Ture me te Whakaaetanga

Ko nga raraunga hauora me te koiora kua whakarōpūhia hei raraunga waahanga motuhake i raro i te GDPR (Tuhinga 9) me nga ture rite ki te ao. Ka tukatukahia e matou enei raraunga i runga i to whakaaetanga marama, ka tukuna e koe i te wa e eke ana a NutriLife. Ka taea e koe te tango i to whakaaetanga i nga wa katoa ma te whakakore i te NutriLife i roto i to tautuhinga kaute, ka mutu ka whakakorehia o raraunga hauora i roto i nga ra 30.

9.3 Te Whainga Whainga

Your NutriLife health data is used strictly for the following purposes:

  • Te tātai i to reiti metabolic (BMR), te tapeke whakapaunga hiko o ia ra (TDEE), me nga whainga kaarai me te macronutrient.
  • Tracking your food diary entries and nutritional intake over time.
  • Providing AI-powered dietary suggestions and meal plan recommendations.
  • Te whakaatu i nga ahuatanga hauora me te ahunga whakamua ki o whaainga kua kiia.

9.4 Tiaki Raraunga Tino

  • Ko nga raraunga hauora NutriLife kua whakamunatia i te wa okioki me te whakawhiti ma te whakamahi i te whakamunatanga AES-256 me TLS 1.3.
  • Ko nga raraunga hauora kei te rongoa motuhake mai i nga raraunga Paerewa whanui me etahi atu mana uru.
  • Kare rawa e tiritirihia nga raraunga hauora NutriLife ki nga kamupene inihua, ki nga kaituku mahi, ki nga kaiwhakatairanga korero, ki tetahi atu tuatoru ranei mo nga kaupapa kore e hono ki te whakarato ratonga NutriLife.
  • Ko nga raraunga hauora KAORE e whakamahia mo te whakatairanga whakatairanga, te hoko ranei ki nga roopu tuatoru.
  • Ko te uru ki nga raraunga hauora i roto i a Foodfy ka herea ki nga kaimahi me nga punaha i runga i te tikanga tino mohio.

10. Raraunga Ohaurunga Foodfy Gold

When you subscribe to Foodfy Gold, we process additional data related to your membership:

  • Subscription Data: Plan type, subscription status (active, trial, paused, cancelled, expired), start and end dates, trial period dates, and renewal dates.
  • Raraunga Utu: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
  • Whakamahinga Painga: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Kaute Rangatōpū me nga Raraunga Kaimahi

Mo Foodfy mo te Mahi (Kaute Kaute), ka tohatohahia nga kawenga tukatuka raraunga:

11.1 Whanaungatanga Kaiwhakahaere Raraunga

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Raraunga i Kohia

  • Ingoa o te kaimahi, te wahitau imeera, me te mahi i roto i te Kaute Kaute (kaiwhakahaere, kaiwhakahaere, kaimahi).
  • Tari, pokapū utu, me te nama tohutoro kaimahi e whakaratohia ana e te kaituku mahi.
  • Wallet balance, credit history, spending history, and refund records.
  • Ko nga hitori ota i mahia ma te whakamahi i te putea umanga, tae atu ki nga mea kua ota me nga moni.

11.3 Nga kawenga a te Kaimahi

Ko te kawenga a nga kaituku mahi: (a) te whai turanga tika ki te tiri i nga raraunga kaimahi ki a Foodfy; (b) whakamohio ki nga kaimahi mo te tukatuka raraunga ma te Paerewa; (c) te whakautu ki nga tono motika raraunga kaimahi e pa ana ki nga raraunga e whakahaerehia ana e te kaituku mahi; me (d) te whakarite kia u ki nga ture mahi me nga ture tiaki raraunga e tika ana.

12. Raraunga Whakahaere Tukunga Drone

When drone delivery services are used, the following additional data is processed:

  • Route and GPS Data: Ko nga huarahi rererangi a Drone, nga tohu whakawhiti ma nga waahi o DronePort, nga taunga GPS tuku, me nga wa kua tae mai.
  • Raraunga Hoa Tukunga: Mo nga hoa tuku drone: te waahi tuuturu i nga wa e tuku kaha ana, nga tatauranga tuku, me nga raarangi whakahaere.
  • Raraunga DronePort: Nga inenga whakamahi a DronePort, nga raarangi tiaki, me te mana whakahaere.
  • Raraunga Tukunga Kaihoko: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

Ko nga raraunga tuku haruru ka tukatukahia i runga i te ture o te mahi kirimana, me te mea e tika ana, he hiahia tika ki te pupuri i nga mahi tuku haumaru me te pai. Ka tukatukahia nga raraunga waahi tuuturu o nga Hoa Tukunga i nga wa tukunga kaha anake.

13. Haumarutanga Raraunga

Ka whakatinanahia e Foodfy nga tikanga hangarau me nga whakaritenga whakahaere matawhānui, arataki-ahumahi hei tiaki i o raraunga whaiaro:

13.1 Nga Tiaki Hangarau

  • Whakamunatanga o nga raraunga katoa i roto i te whakawhiti ma te whakamahi i te TLS 1.2+ (HTTPS kua whakamanahia puta noa i nga waahi mutunga o te Paerewa).
  • Whakamunatanga o nga raraunga tairongo i te okiokinga ma te whakamahi i te whakamunatanga AES-256.
  • Web application firewall (WAF) and DDoS protection powered by Cloudflare.
  • Whatunga tuku ihirangi (CDN) me te keteroki taha mo te mahi me te haumaru.
  • PCI DSS-compliant payment processing through Stripe, with no storage of full card numbers on Foodfy servers.
  • Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
  • Motuhēhēnga API mā te whakamahi i ngā tohu haumaru me te whakawhāiti reiti me te kimi tūkino.
  • Regular automated vulnerability scanning and penetration testing.

13.2 Nga Tiaki Whakahaere

  • Role-based access controls ensuring employees can only access data necessary for their function.
  • Ko te hoahoanga raraunga kairëti maha me te tohatoha raraunga motuhake mo te whenua, me te whakarite kia wehe tika nga raraunga mai i nga mana whakahaere rereke.
  • Nga whakaaetanga tukatuka raraunga me nga kaiwhakarato ratonga tuatoru katoa.
  • Regular security awareness training for all personnel with access to personal data.
  • Ko nga tikanga whakautu mai i nga aitua me te roopu haumaru i whakatapua.
  • Nga mahi whakaiti raraunga: ka kohia e matou nga raraunga e tika ana mo te kaupapa kua tohua.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Whakawhiti Raraunga Ao

Ka mahi a Foodfy puta noa i nga whenua 250+ ma roto i tana hanganga ao me te whatunga Hoa Teritori. Ka tukuna pea o raraunga whaiaro ki nga whenua ke atu i to whenua noho. Ina whakawhiti ana matou i nga raraunga whaiaro ki te ao, ka whakatinanahia e matou nga whakamarumaru tika hei whakarite kia tiakina o raraunga:

  • Standard Contractual Clauses (SCCs): Mo nga whakawhitinga mai i te EEA/UK ki nga whenua karekau he whakatau tika, ka whakamahia e matou nga rara kirimana Paerewa kua whakaaetia e te Komihana a te Pakeha.
  • Nga Whakaaetanga Tukatuka Raraunga: Ko nga kaiwhakarato ratonga tuatoru katoa e tukatuka ana i nga raraunga whaiaro mo matou e herea ana e nga kirimana tukatuka raraunga matawhānui e mau ana i nga herenga whakamarumaru raraunga, nga whakaritenga haumarutanga, me nga whakamarumaru whakawhiti rohe.
  • Tirihanga Raraunga Motu-Motu: Ko ta maatau hoahoanga kairëti maha e whakamahi ana i nga kongakonga raraunga motuhake mo te whenua, ko te tikanga kei te rongoa nga raraunga whakahaere me te tukatuka i roto, tata atu ranei ki te rohe matawhenua o te Rohe e tika ana, me te whakaiti i nga whakawhitinga whakawhiti rohe mo nga mahi o ia ra.
  • Nga Whakatau Tikanga: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
  • Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. Ō Tikanga Matatapu

I runga i to waahi, he maha nga mana kei a koe mo o raraunga whaiaro. E pono ana a Foodfy ki te whakanui i enei motika mo nga kaiwhakamahi katoa o te ao:

15.1 Tikanga Ao

Regardless of your location, all Foodfy users may:

  • Urunga: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
  • Whakatikatika: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
  • Te whakakore: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
  • Restriction: Request that we restrict the processing of your personal data in certain circumstances.
  • Whakahē: Whakahe ki te tukatuka o o raraunga whaiaro mo nga kaupapa hokohoko tika. Ka whakatutuki wawe matou i nga tono whakaputa katoa.
  • Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Muku Pūkete: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 Me pehea te Whakamahi i o Tika

You may exercise your rights by:

  • Te uru atu ki o tautuhinga pūkete mo te whakahaere raraunga ratonga whaiaro, nga huringa manakohanga, me te mukunga kaute.
  • Te imeera i to maatau Apiha Tiaki Raraunga i [email protected] me to tono.
  • Ko te imeera ki a [email protected] mo nga uiuinga mo te tūmataiti.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Mana Matatapu a-rohe

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Rohe Ohaoha Pakeha me Ingarangi (GDPR / UK GDPR)

Mena kei roto koe i te EEA, i te UK ranei, kei a koe enei motika taapiri i raro i te Ture Tiaki Raraunga Whanui:

  • Kawenga Raraunga: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
  • Whakatau Aunoa: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
  • Apiha Tiaki Raraunga: Ka taea te toro atu ki a maatau DPO i [email protected] mo nga patai e pa ana ki te GDPR.

16.2 California, United States (CCPA / CPRA)

Mena he tangata no California koe, kei a koe enei motika i raro i te California Consumer Privacy Act (kua whakarereketia e te California Privacy Rights Act):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: Kaore a Foodfy e hoko i o korero whaiaro. Kaore matou e tohatoha i nga korero whaiaro mo nga panui whanonga whakawhiti korero me te kore koe e whakaae.
  • Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
  • Whakahāwea-kore: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

I roto i nga marama 12 o mua, kaore matou i hoko i nga korero whaiaro i tautuhia e te CCPA/CPRA.

16.3 Brazil (LGPD)

Mena kei Brazil koe, kei a koe nga mana i raro i te Lei Geral de Protecao de Dados (LGPD), tae atu ki te tika ki: te whakapumautanga o te tukatuka, te uru, te whakatikatika, te whakaingoatanga, te kawe, te whakakore i nga raraunga i tukatukahia me te whakaae, nga korero mo te tiri, me te tika ki te tono ki te Autoridade Nacional de Protecao de Dados (ANPD).

16.4 Ahia-Kiwa (PDPA me nga Ture Taurite)

Mena kei roto koe i nga mana whakahaere me nga Ture Tiaki Raraunga Whaiaro, ture rite ranei (tae atu ki Singapore, Thailand, me etahi atu whenua o Ahia-Kiwa), kei a koe te mana ki te uru atu, whakatika, whakakore, here, me te kawe i o raraunga whaiaro e whakaratohia ana e te ture rohe e tika ana. Ka tukatukahia e matou o raraunga kia rite ki nga whakaritenga PDPA e tika ana, tae atu ki te whiwhi whakaaetanga ina hiahiatia me te tuku panui marama mo nga mahi tukatuka raraunga.

16.5 Middle East me North Africa

Mo nga kaiwhakamahi i UAE, Saudi Arabia, me etahi atu mana whakahaere MENA, ka whai matou ki nga ture whakamarumaru raraunga e tika ana tae atu ki te Ture Whakatau a te Federal UAE mo te Tiaki Raraunga Whaiaro, Ture Tiaki Raraunga Whaiaro o Saudi Arabia, me nga angamahi rohe rite. Kei roto i tenei ko nga whakaritenga waahi raraunga i te wa e tika ana.

16.6 Ētahi atu Mana Whakahaere

E ū ana a Foodfy ki te whai i nga ture whakamarumaru raraunga i roto i nga mana whakahaere katoa. Mena he whakaritenga whakamarumaru raraunga motuhake to rohe kaore i te raarangi i runga ake nei, me waea atu ki [email protected] mo nga korero mo te tiaki i o motika i raro i to ture rohe.

17. Whakamōhiotanga Takahanga Raraunga

Mena ka pakaruhia nga raraunga whaiaro ka tupono ki o motika me o herekoretanga, ka:

  • Whakamōhiotia te mana mātakitaki whai take i roto i te 72 haora i muri i te mohiotanga ki te takahitanga, i runga i te whakahau a GDPR Upoko 33 me nga whakaritenga rite i etahi atu mana whakahaere.
  • Whakamōhio atu ki nga tangata kua pa ki a ia me te kore e whakaroa rawa ina he nui te tupono o te takahi ki o raatau motika me o raatau herekoretanga, pera me ta te GDPR Upoko 34 me nga whakaritenga rite.
  • Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
  • Tuhia nga takahi raraunga whaiaro katoa, tae atu ki nga meka, nga paanga, me nga mahi whakatikatika i mahia, i runga ano i ta maatau rehita pakaru o roto.

Ki te whakapono koe kua taupatupatuhia o raraunga, me waea atu ki [email protected].

18. Nga Tamariki me nga Raiti

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

Mena ka mohio matou kua kohia pohehe matou i nga raraunga whaiaro mai i tetahi tamaiti kei raro iho i te paepae tau e tika ana me te kore whakaaetanga a nga matua, kaitiaki ranei, ka mahi tonu matou ki te whakakore i aua korero mai i a maatau punaha. Ki te whakapono koe kua kohia e matou he korero mai i tetahi tamaiti, tena koa whakapiri mai ki a matou i [email protected].

19. Hononga Tuatoru me nga Ratonga

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. Nga Huringa ki tenei Kaupapahere Whaiaro

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

  • We will update the "Last updated" date at the top of this page.
  • We will provide prominent notice on the Platform.
  • Mo nga huringa rawa e tino pa ana ki te whakahaere i o raraunga, ka whakamohio atu matou ki a koe ma te imeera i te iti rawa 30 ra i mua i te mana o nga huringa.
  • Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Whakapā mai

Mena kei a koe etahi patai, he awangawanga, he tono ranei e pa ana ki tenei Kaupapahere Whaiaro, ki o raraunga whaiaro, ki a maatau tikanga tiaki raraunga ranei, me waea mai ki a maatau ma nga huarahi e whai ake nei:

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.