1. Who is responsible for your data?
The data controller is the restaurant brand whose name the app bears (the “Brand”). The Brand decides why and how your data is used: ordering, delivery, loyalty programme and customer service.
Capitaine provides the technical platform that runs the app (hosting, maintenance, security). Capitaine acts as a data processor: it processes your data only on behalf of the Brand, to the extent necessary for the service, and never for its own purposes.
2. Data we collect
- Account data: first name, last name, title, email address, phone number, date of birth.
- Delivery addresses: address, postcode and city.
- Orders: selected location, products, service mode (takeaway, delivery, dine in), times, amounts and status.
- Loyalty: points earned and used, gifts obtained, loyalty card QR code.
- Location: only with your permission, see section 5.
- Technical data required for the app to work securely, including bot protection at sign-up and sign-in.
3. How the data is used
The Brand uses your data to:
- create and manage your account;
- prepare, deliver and track your orders;
- manage your loyalty programme and gifts;
- contact you about your orders, for example to send a verification code;
- keep the app secure and prevent fraud;
- comply with legal obligations, including accounting and tax requirements.
5. Location
With your permission, your location is used to show the nearest locations and check that you are close to a location when you order to dine in. It is not tracked in the background. You can withdraw this permission at any time in your device settings.
6. Retention
Account data is kept while your account is active. Order data is kept for the period required by law, including accounting and tax obligations.
7. Account deletion
You can delete your account at any time from the app, under My account then Delete my account. Your personal information is then anonymised and your loyalty points are lost. Data that the law requires to be kept is retained for the required period.
8. Your rights
Under the data protection law applicable in the country where the relevant location operates, you have the right to access, rectify, object to and erase your data.
These rights are exercised with the Brand, as data controller. If you send your request to Capitaine, it will be forwarded to the relevant Brand.
9. Security
Data is transmitted encrypted and hosted on secure servers. Access is limited to the people who need it to provide the service.
10. Contact
For any question about your data, please contact the brand whose app you are using first. You can also write to Capitaine, who will forward your request to the relevant Brand.