Privacy Policy

1. Introduction

ChefSuite Pro Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant management platform and services.

This policy applies to all users of ChefSuite Pro services, including restaurant owners, managers, staff, and any other individuals who interact with our platform.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Name, email address, and phone number
• Business information (restaurant name, address, type)
• Payment and billing information
• Account credentials and preferences
• Communication records and support requests

2.2 Business Data

Through your use of our platform, we collect:

• Menu items, pricing, and inventory data
• Sales transactions and financial metrics
• Staff schedules and performance data
• Customer feedback and reviews
• Operational analytics and reports

2.3 Technical Information

We automatically collect technical data, including:

• IP addresses and device identifiers
• Browser type and operating system
• Usage patterns and feature interactions
• Log files and error reports
• Cookies and similar tracking technologies

3. How We Use Your Information

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with trusted third-party service providers who help us operate our platform:

• Cloud hosting providers (AWS, Microsoft Azure)
• Payment processors (Stripe, PayPal)
• Analytics services (Google Analytics)
• Customer support tools (Zendesk, Intercom)
• Email and communication services

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights and safety.

5. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: SOC 2 Type II compliance and security assessments
• Monitoring: 24/7 security monitoring and incident response
• Data Backup: Regular backups with disaster recovery procedures

6. Data Retention

We retain your data for different periods based on the type and purpose:

• Account Data: Until account deletion plus 30 days
• Business Data: 7 years for financial records, 3 years for operational data
• Technical Logs: 12 months for security and performance monitoring
• Marketing Data: Until consent is withdrawn

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for certain countries
• Certification schemes and codes of conduct

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for detailed information about:

• Types of cookies we use
• How to manage cookie preferences
• Third-party tracking and analytics

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.