Privacy Policy

_{Privacy Policy}

This Privacy Policy describes how Munchi ("Munchi," "we," "our," or "us") collects, processes, and protects personal data in connection with our services. Munchi provides an all-in-one order and payment solution, including self-ordering kiosks, online store management, and marketing services for restaurants.

By using our services, you agree to the processing of your personal data as described in this policy. The latest version of this Privacy Policy is always available on our website at [www.gomunchi.com].

1. Data Controller and Contact Information

Munchi acts as the data controller for certain processing activities and as a data processor on behalf of our restaurant partners. If you have any questions regarding this Privacy Policy or your personal data, you can contact us at:

Munchi
Helsinki, Finland
Email: privacy@gomunchi.com

2. Data We Process

We collect and process personal data for the following purposes:

2.1 Customers of Restaurants Using Munchi‍

If you place an order online, use a self-ordering kiosk, or interact with a restaurant that uses Munchi, we process the following data:

• Name, email address, and phone number (if provided)
• Order history and transaction details
• Payment information (processed by third-party payment providers)
• Loyalty program participation (if applicable)
• Interactions with Munchi-powered online stores or in-venue kiosks
• Marketing preferences (if consented)

2.2 Data from Third-Party Delivery Platforms

If a restaurant partner uses third-party delivery platforms (e.g., Wolt, Foodora, Uber Eats) that integrate with Munchi, we may process:

• Order details from the delivery platform
• Customer information shared by the platform (if permitted)
• Sales and analytics data for restaurant performance tracking

2.3 Visitors to Our Website

When you visit our website, we may collect:

• IP address and device information
• Cookie preferences and tracking data (if consented)
• Behavioral analytics for website improvement

3. How We Use Personal Data

We process personal data for the following purposes:

• Providing services: Facilitating order processing, transaction handling, and kiosk functionality.
• Analytics and insights: Helping restaurants analyze customer behavior and sales trends.
• Customer engagement: Enabling restaurants to communicate with customers who have interacted with them through Munchi’s systems (subject to applicable laws).
• Loyalty programs: Managing customer participation in restaurant loyalty programs.
• Marketing and promotions: If a customer has consented, we or our restaurant partners may send promotional messages.
• Security and compliance: Preventing fraud, ensuring legal compliance, and securing user data.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Performance of a contract: When processing orders and transactions.
• Legitimate interest: For analytics, fraud prevention, and service improvements.
• Consent: For marketing communications and optional data collection.
• Legal obligations: When required to comply with laws (e.g., financial regulations).

5. Data Sharing

We share personal data only when necessary:

• With restaurant partners: Restaurants using Munchi’s services may access customer data when a customer has interacted with their business.
• With third-party service providers: Payment processors, analytics providers, and IT infrastructure partners who help deliver Munchi’s services.
• With third-party delivery platforms: If orders are processed through an integrated delivery service.
• When required by law: If mandated by authorities.

We do not sell personal data to third parties.

6. Data Retention

We store personal data only as long as necessary to fulfill the purposes stated in this policy:

• Order history and transaction records: Retained as required for financial reporting and compliance.
• Customer accounts: Retained as long as the user maintains an active relationship with a restaurant using Munchi.
• Marketing data: Retained until a user withdraws consent.

7. Data Security

We implement industry-standard security measures to protect personal data from unauthorized access, loss, or misuse. However, no method of data transmission over the internet is 100% secure.

8. Your Rights

You have the following rights under applicable data protection laws:

• Access: Request a copy of your personal data.
• Correction: Request corrections to inaccurate data.
• Deletion: Request the deletion of personal data (subject to legal obligations).
• Objection: Object to certain data processing activities.
• Withdraw consent: If processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at privacy@gomunchi.com.

9. International Data Transfers

If we transfer personal data outside the EU/EEA, we ensure appropriate safeguards, such as:

• The use of standard contractual clauses approved by the EU Commission.
• Compliance with adequacy decisions where applicable.

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website. We will notify users of significant changes.