Privacy Policy

1. Introduction

This Privacy Policy explains how SKH Web Agency collects, uses and protects your personal information when you use the Zpin restaurant online-ordering platform we operate.

The platform provides participating restaurants with a branded storefront, menu, cart and internal checkout. Each restaurant is an independent merchant on the platform.

2. Roles and responsibilities

SKH Web Agency acts as the platform and technical infrastructure provider.

The restaurant is responsible for food preparation, order fulfilment, delivery and for handling restaurant-level customer data.

3. Information collected directly

To place an order you provide your name, phone number, delivery address and order details.

When you contact us, we may retain contact details and the content of your message.

4. Order information

Order contents, selected modifiers, branch, delivery or pickup choice, notes and promo codes are processed to fulfil your order.

5. Technical information

For security, reliability and troubleshooting we may collect device type, browser, approximate location, IP address and technical logs.

6. Business account information

For restaurant partner accounts we process the contact person, business name, list of branches and menu data.

7. How information is used

Information is used to fulfil orders, provide customer support, improve the service, ensure security and meet legal obligations.

8. Legal or permitted grounds

Processing is based on contract performance, legal obligation, user consent or legitimate interests where permitted.

9. How data is shared

Order data is passed to the restaurant you ordered from. SKH Web Agency does not sell your data or share it with third parties for advertising.

10. Restaurant responsibility

Once an order is passed to the restaurant, responsibility for the customer data relating to that order lies with the restaurant.

11. Payments

Payments are not processed online at this time: payment is made on delivery or on pickup. Future payment integrations will be subject to separate provider terms.

12. Cookies and local storage

The site uses browser localStorage for cart state, language preference and other essential functions.

14. Data retention

Order data is retained for as long as needed to deliver the service, meet reporting duties and comply with legal requirements.

15. Data security

SKH Web Agency applies reasonable technical and organisational safeguards, but no system on the internet is completely secure.

16. Multi-tenant isolation

Restaurant data is isolated between tenants. One restaurant cannot access another restaurant's orders.

17. International or third-party infrastructure

Hosting and infrastructure providers may be located in other countries and are expected to meet appropriate security standards.

18. User choices and rights

Where applicable law allows, you may request access, correction or deletion of your personal data.

19. Children

The platform is not intended for children. Minors should use the service only under parental supervision.

20. Marketing communications

Operational messages about your order may be sent. Marketing messages require your separate consent.

21. Automated decision-making

The Zpin platform does not make fully automated decisions with legal effects on you.

23. Service providers

SKH Web Agency uses trusted providers for hosting, database and analytics, and enters into appropriate agreements with them.

24. Data breach response

In the event of a security incident SKH Web Agency will investigate, contain the incident and notify affected parties as required by law.

25. Changes to the policy

This policy may be updated from time to time. The current version is published on the site.

26. Contact

For privacy questions, contact SKH Web Agency via the website or at skhwebagency@gmail.com.