Introduction
Welcome to DineHub ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant reservation management platform and services.
Key Point: By using our services, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Register an account: Email address, password, phone number
- Set up your restaurant: Restaurant name, address, contact information, business details
- Make a reservation: Name, email address, phone number, party size, special requests
- Contact us: Any information you provide in communications
Technical Information
We automatically collect certain information when you use our services:
- Device information: IP address, browser type, operating system
- Usage data: Pages visited, time spent, features used
- Cookies and tracking: Session data, preferences, analytics
- Location data: General location based on IP address
Third-Party Authentication
When you sign in with Google, we receive:
- Your Google account email address
- Basic profile information (name, profile picture)
- Account verification status
Information Sharing and Disclosure
With Restaurants
When you make a reservation, we share necessary information with the restaurant:
- Your name, email, and phone number
- Reservation details (date, time, party size)
- Special requests or dietary requirements
Service Providers
We may share information with trusted third-party service providers:
- Firebase/Google Cloud: Data hosting and authentication
- Email services: Sending notifications and confirmations
- SMS providers: Phone verification and notifications
- Analytics providers: Usage analysis and improvement
Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal obligations
- Protect our rights and property
- Prevent fraud or security threats
- Protect user safety
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Data is encrypted in transit and at rest
- Access controls: Limited access to authorized personnel only
- Firebase security: Enterprise-level security infrastructure
- Regular monitoring: Continuous security monitoring and updates
- Secure authentication: Multi-factor authentication options
Important: However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
Specific Retention Periods
- Account data: Until account deletion or 3 years of inactivity
- Reservation data: 2 years after reservation date
- Communication records: 1 year after last contact
- Analytics data: Aggregated data may be retained indefinitely
Your Rights and Choices
GDPR Rights (EU Residents)
If you are in the European Union, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Restriction: Limit how we process your data
- Objection: Object to certain types of processing
- Withdraw consent: Withdraw consent for data processing
CCPA Rights (California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it's used
- Request deletion of your personal information
- Opt-out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
How to Exercise Your Rights
To exercise any of these rights, please contact us at info@dinehub.org. We will respond to your request within 30 days.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Authenticate your account
- Analyze website usage and performance
- Provide personalized experiences
Types of Cookies
- Essential cookies: Required for basic functionality
- Analytics cookies: Help us understand usage patterns
- Preference cookies: Remember your settings
- Security cookies: Protect against fraud and abuse
You can control cookies through your browser settings, but disabling certain cookies may affect functionality.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Google Cloud Platform's global infrastructure with GDPR compliance
- Standard contractual clauses for international transfers
- Adequate protection measures as required by applicable law
Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
Parental Notice: If you believe your child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a prominent notice on our platform
Your continued use of our services after any changes constitutes acceptance of the updated policy.
Supervisory Authority
If you are in the European Union and have concerns about our data processing practices, you have the right to lodge a complaint with your local data protection supervisory authority.
EU Residents: You can find your local supervisory authority contact information on the European Data Protection Board website.