Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

1. Introduction

Welcome to Supermacs ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://suppermacs.com and use our food delivery services.

By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Company Information

3. Information We Collect

We collect several types of information from and about users of our website and services:

3.1 Personal Information

When you place an order or create an account, we may collect:

• Full name (first and last name)
• Email address
• Phone number
• Delivery address (street address, city, postal code)
• Payment information (processed securely through third-party payment processors)
• Order history and preferences

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device identifiers

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience. These technologies help us:

• Remember your preferences and settings
• Understand how you use our website
• Improve our services and marketing efforts
• Provide personalized content and advertisements

4. How We Use Your Information

We use the information we collect for various purposes, including:

• Processing and fulfilling your food orders
• Communicating with you about your orders, including confirmations and delivery updates
• Providing customer support and responding to inquiries
• Improving our website, products, and services
• Personalizing your experience and providing tailored recommendations
• Sending promotional materials and marketing communications (with your consent)
• Analyzing usage patterns and trends
• Detecting and preventing fraud and security threats
• Complying with legal obligations and enforcing our terms

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Contract Performance: Processing necessary to fulfill our contract with you (order processing and delivery)
• Legitimate Interests: Processing for our legitimate business interests (improving services, fraud prevention)
• Consent: Processing based on your explicit consent (marketing communications)
• Legal Obligations: Processing required to comply with legal requirements

6. Information Sharing and Disclosure

We may share your information with third parties in the following circumstances:

6.1 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment processing
• Delivery and logistics
• Website hosting and maintenance
• Data analysis and marketing
• Customer service support

6.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6.3 Legal Requirements

We may disclose your information when required by law or in response to valid legal requests from government authorities.

6.4 Protection of Rights

We may disclose information to protect our rights, property, or safety, or that of our users or the public.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Regular security audits and updates
• Access controls and authentication procedures
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically:

• Order information: 7 years (for accounting and tax purposes)
• Account information: Until account deletion or 3 years of inactivity
• Marketing data: Until you withdraw consent or 2 years of inactivity
• Website analytics: 26 months

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Access and Portability

You have the right to request access to your personal information and receive a copy in a portable format.

9.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

9.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions.

9.4 Restriction

You have the right to request restriction of processing in certain circumstances.

9.5 Objection

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

9.6 Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise these rights, please contact us using the information provided in Section 14.

10. Cookies and Tracking

Our website uses cookies and similar technologies. You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality
• Performance Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements

11. Third-Party Links

Our website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

Acknowledgment: By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.