Waffle Buyer Privacy Policy

‍

Last updated: 11 December 2023

Introduction

Waffle Technologies Private Limited (“Waffle”, "we," "our," or "us") is committed to protecting the privacy of users ("you" or "users") of the various applications (collectively the "Services") offered or operated by us, whether online or offline and whether directly or through our merchants (“Merchants”). This Privacy Policy outlines how we collect, use, store, and/or disclose your personal data such as personal information, contact information, financial information, transactional data and/or computer cookies (your “Personal Data”). It is intended to assist users in making an informed decision before providing us with your Personal Data.

We respect your privacy and do not tolerate spam and will not sell, rent, lease, or give away your information (name, address, email, etc.) to any third party who does not have your agreement to use your Personal Data or is not necessary for us to provide the Services.

Information We Collect

Personal information: When you register for the Services, we may collect personal information such as your name, email address, phone number, and any other information you provide voluntarily.
Transaction information: We may collect transaction details, including purchase history and order preferences, to facilitate rewards and loyalty programs.
Device information: We may collect information about your device, such as its unique device identifier, IP address, operating system, and geolocation data.
Usage information: We may gather usage data, including interactions with the Services, pages visited, and features used.
Cookies: Some of the information collected will not personally identify you but will instead track your use of the Services so that we can better understand how the Services are used by customers and in turn enhance and improve your user experience. We may obtain this information by the use of cookies. Cookies are small data file transferred to your device that recognise and identify your device and/or allow your device to ‘remember’ information from the relevant Services for future use. Cookies do not contain any information that by itself personally identifies you and we do not use cookies in order to obtain such information. Your device and/or your web browser should allow you to refuse cookies if you wish by changing the settings. You can learn more about cookies and how to manage your preferences by visiting http://www.allaboutcookies.org.
We may also work with third-party service providers (e.g. card processing, food delivery partners) who may collect Personal Data about you. Such information is only collected where reasonable or necessary to provide the Services and limited to the information required or desirable in order to provide such Services.

Use of Collected Information

Service provision: We use the collected Personal Data to provide you with the products and features you choose to use.
Personalization: We use the collected Personal Data to personalize your experience with the Services, including tailored offers, rewards, and recommendations.
Service Improvement: We use the collected Personal Data to analyze and enhance the functionality, performance, and user-friendliness of the Services.
Marketing & Communications: We may send you SMSes, emails, notifications, or other communications to provide information about the Services, promotions, and relevant updates.
Other Uses: For any other reason we may tell you about it from time to time, with your consent.

Relationship with Merchants

Where and to the extent that you provide any Personal Data to us via Services made available through a Merchant, we will be a data controller of that Personal Data in our own right, and the Merchant will also be a data controller of that Personal Data in its own right.
In this case, that Merchant’s handling of your Personal Data will be governed by that Merchant’s own privacy policy; this Privacy Policy will not apply, and we bear no liability or responsibility (and hereby expressly disclaim any liability or responsibility) for that Merchant’s handling of your Personal Data.
Where applicable, you may be able to use the settings provided in the Services to exercise your rights under that Merchant’s privacy policy.

Information Sharing

If and to the extent that any Merchants, service providers, or any other third-party entities that we work with handle your Personal Data on our behalf, they will be required to apply standards of data protection that are not lower than those outlined in this Privacy Policy. If we have reason to believe that any such third-party is not appropriately handling your Personal Data as made available by us, we will take appropriate action up to and including termination of our relationship with them.

With our Service Providers

We may share your Personal Data with external service providers who directly or indirectly help or enable us to provide the Services. This includes, but not is limited to, vendors providing food delivery, fraud prevention, and identity verification services, as well as financial institutions, payment networks, payment card associations, credit bureaus, and other entities in connection with the Services..

With Others with Your Consent

With your consent, at your direction or as described at the time you agree to share, for example, when you authorize a third-party application or website to access your Personal Data.

Business Transfers and Corporate Changes

We may provide part or all of your Personal Data to a subsequent owner, co-owner, or operator (whether singly, jointly or otherwise) of one or more of the Services.
If we undertake or seek to undertake a corporate merger, consolidation, or restructuring (including during due diligence and negotiation of these); or a sale or transfer of a majority or all of our stock and/or assets; or a financing, acquisition, divestiture, or dissolution of any part or all of our business; or any similar transaction or other corporate change, we may provide part or all of your Personal Data to one or more counterparties or their related parties in connection with that transaction or change.

Safety and Compliance with Law

We may provide your Personal Data to any law enforcement, courts, government, or regulatory bodies, if we believe that disclosure is reasonably necessary:
(i) to comply with any applicable law, regulation, legal process or governmental request;
(ii) to establish, exercise or defend our legal rights;
(iii) to enforce or comply with our terms of service or other applicable agreements or policies;
(iv) to protect our or our customers’ (including our Merchants’) rights or property, or the security or integrity of our Services;
(v) for an investigation of suspected or actual illegal activity; or
(vi) to protect us, users or customers of our Services or the public from potential or actual harm, fraud, or prohibited or illegal activities.

Aggregated and Anonymized Information

We may share (within our group of companies or affiliates, or with service providers or other third parties) aggregated and/or anonymized information that does not specifically identify you.

Data Retention

We keep your information as long as it is useful or necessary for the purposes identified in this Privacy Notice, including to provide you the Services, to comply with applicable law and legal obligations, and to protect or enforce our legal rights, property, and users and customers.
We will destroy any Personal Data we hold in relation to you, within a reasonable time frame after we determine that we no longer require it under the terms of this Privacy Policy.

User Rights and Choices

You have the right to access, update, and request for the deletion (or anonymization, where we deem deletion to be impracticable) of your Personal Data through the settings provided in the Services.
You may choose to stop sharing Personal Data with certain Merchants through the settings provided in the Services.
You may choose to opt out of receiving promotional communications from us (or any Merchant, where applicable) at any time through the settings provided in the Services.
You will not be able to request a complete erasure of all transaction-related data collected (e.g. purchase history), because we are required to present this data to Merchants. However, upon request in accordance with our policies and processes, such data will be scrubbed to ensure that no personally identifiable information is incorporated.
You may contact us to correct any of your Personal Data that is inaccurate, incomplete, or out-of-date, or to request that all or any part of your Personal Data be corrected or deleted. We will use reasonable methods to correct or remove your Personal Data as requested within a reasonable period of our receipt of your request.

Withdrawing your Consent

The consent that you provide for the collection, use and disclosure of your Personal Data will remain valid until such time as we received your withdrawal of consent. You may withdraw consent and request us to stop using and/or disclosing your Personal Data for any or all of the purposes listed above by submitting your request via email to our Data Protection Officer at the contact details provided below.
Upon our receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we aim to begin processing your request within ten (10) business days of receiving it.
Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing services to you; in such circumstances, we will notify you before completing the processing of your request.
Your withdrawal of consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclosure without consent is permitted or required under applicable laws.

Access to and Correct of Personal Data

If you wish to make (a) a request for access to a copy of the Personal Data which we hold about you, or to information about the ways in which we use or disclose your Personal Data, or (b) a request to correct or update any of your Personal Data which we hold about you, you may submit your request via email to our Data Protection Officer at the contact details provided below.
Please note that we may charge a reasonable fee for any access request. If we decide to do so, we will inform you of the fee before processing your request.
In general, we aim to respond to your request within ten (10) business days of receiving it. If we determine that we are not able to process your request within thirty (30) days after receiving your request, we will inform you in writing as soon as reasonably practicable after that determination. If we are unable to provide you with any personal data or to make a correction requested by you, we will inform you of the reasons why we are unable to do so to the maximum extent practicable.

Data Security

We take reasonable measures, including administrative, technical, and physical safeguards, to protect your Personal Data from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction.
Please contact us immediately if you become aware or have reason to believe there has been any unauthorized use of your Personal Data in connection with the Services.

Storage and Processing

We may use third-party service providers to process and store your Personal Data in any country. Authorized employees, representatives, and agents will have access to your Personal Data for the purposes described in this Privacy Policy.

Links to third-party services

Our Services may contain links to other websites, apps, content, services, or resources on the internet that are operated by third parties. We will take any reasonable measures to ensure that any linked third-party services uphold standards of data protection that are not lower than those outlined in this Privacy Policy. However, we do not have any control over any data submitted to these third-party services. Users are advised to be cautious with any information they provide when using these third-party services.

Changes to the Privacy Policy

We reserve the right to update this Privacy Policy from time to time with an updated “Effective Date”. The most recent version of this notice/statement will be available at www.wafflepos.com/legal/waffle-buyer-privacy-policy.
Any updated version will be effective starting from the “Effective Date” stated in that version.
We will use reasonable efforts to inform you of any updated version via email, text, or other mode of communication if you have provided one.
We will obtain your consent if and to the extent required by applicable laws.
If you disagree with the changes in the Privacy Policy, you may withdraw your consent as outlined in this Privacy Policy. Your continued use of the Services on or after the “Effective Date” stated in an updated version of this Privacy Policy constitutes your consent to that updated version.

Contact Us

If you have any queries on this Privacy Policy or in relation to how we may manage, protect and/or process your Personal Data, please contact our Data Protection Officer (the “DPO”) by emailing privacy@wafflepos.com.