BOMBAY FLAVOURS

Privacy Promise

Privacy policy for end users

In this privacy policy, you can learn more about how Qepos Solution Limited (Qepos) processes your personal data when you use our online order website and mobile application, depending on the platform you use (the Service).

We provide you with this information as we are required to do so under the EU General Data Protection Regulation (the GDPR).

Controller

Qepos is the controller in respect of the processing of your personal data when you create a user profile and/or when you complete an order on the Service.

Qepos’s contact details are stated at the bottom of this webpage.

Purposes of and legal basis for processing

Processing activities Purpose(s) of the processing Legal basis for the processing
Processing your orders and creating your user profile We process your contact details (name, address, email address and telephone number) and particular order data (any comments on the order, purchase history, payment details, etc.) for the purpose of registering and completing payment of your order which we share with the relevant restaurant and for the purpose of relocating the details in connection with future orders. In addition, we process your contact details to be able to create your user profile, if relevant. The legal basis for our processing is point (f) of article 6(1) of the GDPR as we are pursuing our legitimate interest in collecting payments for our and the restaurant's services, letting the restaurant know which order to prepare and deliver, and creating a profile for you.
Checking and correcting errors in the Service We record log data in the Service, and such log data may include personal data (e.g. your IP address). The log data is recorded for the purpose of correcting technical errors in the Service and identifying and preventing potential fraud (e.g. in case of unusual orders etc.). The legal basis for our processing is point (f) of article 6(1) of the GDPR as we are pursuing our legitimate interest in correcting errors and improving the Service, including making it more user-friendly.
Answering and processing enquiries about the Service When you contact us (e.g. by email or directly on the Service), your enquiry will often contain personal data, including your contact details and other personal data which you may disclose to us. We process such data to be able to process and answer your enquiries and provide general customer service and technical support etc. relating to your use of the Service The legal basis for our processing is point (f) of article 6(1) of the GDPR as we are pursuing our legitimate interest in providing relevant customer service and/or technical support to you when you use the Service.

Recipients of your personal data

Disclosure to external third parties

We disclose your name, email address and order data to the restaurant preparing your order, in particular for the purpose of enabling the restaurant to send service notices about the delivery of your order. The restaurant also receives your name and your email address for the purpose of distributing marketing material (if you have consented to receive electronic marketing from the restaurant).

We may also disclose your personal data to our external business partners (e.g. carriers or couriers who may deliver the items you have ordered from the restaurant on the Service). We also disclose personal data included in our accounting records (e.g. your contact and/or payment details) to the relevant public authorities, including the tax and customs authorities, in connection with our statutory bookkeeping etc.