PRIVACY POLICY

Last Updated:

1. Introduction

This Privacy Policy describes how the Company (“the Company”, “we”, “our”, or “us”) collects, uses, processes, stores, and protects personal data of users who access or use our website, mobile application, and related services (collectively, the “Platform”).

The Platform allows users to order food and beverages prepared in the Company’s own restaurants and request delivery in Dubai, United Arab Emirates.

We are committed to protecting personal data and handling it responsibly in accordance with applicable laws, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

By using the Platform, you acknowledge that your personal data may be collected and processed in accordance with this Privacy Policy.

2. Information We Collect

We may collect different categories of personal data when users interact with the Platform.

2.1 Personal Identification Information

This may include:

full name
phone number
email address
delivery address
account login credentials

This information is typically collected during account registration or when placing an order.

2.2 Order and Transaction Information

When users place orders through the Platform, we may collect information such as:

order history
items purchased
delivery instructions
order value and transaction records

This data allows us to process and fulfill food orders.

2.3 Payment Information

Payments made through the Platform are processed by secure third-party payment providers.

Payment-related information may include:

transaction confirmation data
payment identifiers
billing details

The Company does not store full credit or debit card numbers.

2.4 Device and Technical Information

When users access the Platform, certain technical information may be collected automatically, including:

IP address
device type
operating system
mobile device identifiers
browser type and version

2.5 Usage Information

We may collect information about how users interact with the Platform, including:

pages visited
features used
time spent on the Platform
interaction with app functionality.

3. How We Use the Information

The Company uses personal data for purposes including:

processing and delivering food orders
managing user accounts
processing payments
communicating with users about orders or services
providing customer support
improving the functionality of the Platform
preventing fraud and abuse
complying with legal and regulatory obligations.

Where permitted by applicable law, we may also use contact information to send updates, promotions, or marketing communications.

Users may opt out of marketing messages at any time.

4. Legal Basis for Processing

Under the UAE Personal Data Protection Law (PDPL), personal data may be processed on the following legal grounds:

user consent
performance of a contract (such as processing an order)
compliance with legal obligations
legitimate business interests, provided such interests do not override the rights of the user.

5. Cookies and Tracking Technologies

The Platform may use cookies and similar technologies to:

improve the user experience
maintain login sessions
analyze usage patterns
enhance the functionality of the website and mobile application.

Users may configure their browser settings to refuse or limit cookies.

Please note that disabling cookies may affect certain Platform features.

6. Sharing Data with Third Parties

We may share personal data with trusted service providers where necessary to operate the Platform.

Delivery Partners

Authorized delivery partners may receive limited information required to complete delivery, including:

delivery address
contact phone number
order reference information.

Payment Service Providers

Payment processing is performed by licensed payment providers that comply with financial and security regulations.

Technology and Service Providers

We may use third-party vendors that provide services such as:

cloud hosting
data analytics
technical support
customer service tools.

All such providers are required to maintain appropriate data protection and security measures.

7. Data Storage and Security

We implement appropriate technical and organizational security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

These measures may include:

encrypted data transmission
secure server infrastructure
restricted access to personal data
internal security policies.

Despite these precautions, no data transmission system can be guaranteed to be completely secure.

8. International Data Transfers

In certain circumstances, personal data may be transferred to or processed in countries outside the United Arab Emirates.

Where such transfers occur, the Company will ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

9. User Rights Under UAE PDPL

Users may have the following rights regarding their personal data:

the right to access their personal data
the right to request correction of inaccurate information
the right to request deletion of personal data where permitted by law
the right to withdraw consent for certain processing activities
the right to request restrictions on processing.

To exercise these rights, users may contact the Company using the contact details provided below.

We may request identity verification before processing such requests.

10. Data Retention

Personal data will be retained only for as long as necessary to:

fulfill the purposes outlined in this Privacy Policy
comply with legal and regulatory obligations
resolve disputes
enforce agreements.

Order and transaction records may be retained for accounting and legal compliance purposes.

11. Children’s Privacy

The Platform is not intended for individuals under the age of 18 years.

We do not knowingly collect personal data from children.

If we become aware that personal data has been collected from a minor, we will take appropriate steps to delete such information.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes in legal requirements
updates to our services
improvements to data protection practices.

The updated version will be published on the Platform with the revised effective date.

Continued use of the Platform constitutes acceptance of the updated Privacy Policy.

13. Contact Information for Privacy Requests

For questions regarding this Privacy Policy or requests related to personal data, please contact:

Email: dubai@smilefood.ua Address: Shop No. G02, Business Bay, Dubai

14. Communication via Messaging Services (Including WhatsApp)

By providing your phone number when registering an account or placing an order, you consent to receiving communications from the Company via messaging services, including WhatsApp, SMS, or other messaging platforms.

These communications may include:

order confirmations and delivery updates
customer service communications
account notifications
promotional messages, special offers, discounts, and marketing communications related to the Company’s services and restaurants.

The Company will only send such communications in accordance with applicable laws and messaging platform policies.

Users have the right to opt out of marketing or promotional communications at any time.

To stop receiving promotional messages, users may:

follow the unsubscribe instructions included in the message
reply with a request to stop receiving messages (for example, sending “STOP”)
contact customer support through the Platform.

Please note that even if a user opts out of promotional communications, the Company may still send essential service-related messages, such as order confirmations or delivery updates.

Kiiro