1. Introduction
This Privacy Policy explains how DckFood ("we", "us", or "our") collects, uses, stores, and shares information when you visit our website, create an account, or use our restaurant management platform, including POS, kitchen display, inventory, loyalty, reservations, and related services (the "Services").
By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
2. Information we collect
We may collect the following categories of information:
- Account & business data: name, email, phone, company/restaurant details, branch information, and login credentials.
- Operational data: orders, menus, inventory, payments metadata, staff roles, and configuration settings you enter into the platform.
- Loyalty & customer data: member profiles, contact details, points balances, referrals, and related loyalty activity when you use loyalty features.
- Usage & device data: IP address, browser type, device information, pages viewed, and approximate location derived from IP for security and analytics.
- Communications: messages you send to support or through in-product channels.
3. How we use information
We use information to:
- Provide, operate, maintain, and improve the Services
- Authenticate users and protect accounts from unauthorized access
- Process restaurant operations such as orders, inventory, loyalty, and reporting
- Send service-related notices, updates, and support responses
- Analyze usage to improve performance, reliability, and product features
- Comply with legal obligations and enforce our terms
4. How we share information
We do not sell personal information. We may share information with:
- Service providers who help us host, secure, process payments metadata, send messages, or analyze usage, under confidentiality obligations
- Your authorized restaurant staff and branch users according to roles you configure
- Authorities when required by law or to protect rights, safety, and security
- Successors in connection with a merger, acquisition, or asset transfer
5. Data retention
We retain information for as long as your account is active or as needed to provide the Services, meet legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. You may request deletion subject to lawful retention needs.
6. Security
We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
7. Cookies and similar technologies
We may use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect functionality.
8. Your rights and choices
Depending on applicable law, you may have rights to access, correct, update, export, or delete personal information, or to object to or restrict certain processing. Contact us using the details below to make a request. We may need to verify your identity before responding.
9. Children's privacy
The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children.
10. International transfers
Information may be processed in countries other than where you are located. Where required, we take steps to protect information consistent with this policy and applicable law.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.
12. Contact us
If you have questions about this Privacy Policy or our data practices, contact us at privacy@dckfood.my or through your DckFood account support channel.