Get a Demo

Flipdish Privacy Policy

This Privacy Policy covers the services provided by Flipdish Limited trading as Flipdish (“Flipdish”, “we”, “us” or “our”). Flipdish is incorporated in Ireland with company registration number 555703 and having its registered address at First Floor Heron House, Corrig Road, Sandyford Business Park, Dublin 18, D18 Y2X6, Ireland. This Privacy Policy provides details of the way in which we process personal data in line with our obligations under the General Data Protection Regulation (No. 2016/679) (“GDPR”), the Data Protection Act 2018 and any other laws which apply to us in relation to the processing of personal data (collectively referred to as “Data Protection Laws”). In this Privacy Policy, “controller”, “personal data” and “process” (and its derivatives) have the meanings given to those terms in Data Protection Laws.

Personal data generally means information that can be used to individually identify a person, and processing generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. Flipdish will be the controller of your personal data processed in connection with our services. Flipdish and the restaurants who operate on the Flipdish Platform (“Restaurant” or “Restaurants”) are joint controllers in respect of any personal data that is processed for placing and completing orders made with a Restaurant via the Flipdish Platform. If you are a customer of a Restaurant and have queries how your personal data is processed by the Restaurant or wish to address your rights, please contact the Restaurant.

The purpose of this Privacy Policy is to explain Flipdish’s data processing activities, including how and why we process personal data. In addition, this Privacy Policy outlines our duties and responsibilities regarding the protection of such personal data. The manner in which we process personal data will evolve over time and we will update this Policy from time to time to reflect changing practices.

Personal Data We Collect

We collect personal data about you when you provide it directly to us through the Flipdish Platform, when third parties such as Restaurants provide us with personal data about you, or when personal data about you is automatically collected in connection with your use of the Flipdish website * (the “Website”). IIf you are acting on behalf of a Restaurant or are a Flipdish corporate customer, we collect personal data through the Restaurant’s or corporate customer’s engagement with Flipdish including personal data that is collected from you and from the Restaurant or corporate customer or through an account created on the Flipdish Portal. Flipdish does not disclose your personal data to third parties, except as outlined in this Privacy Policy.

In providing our services, we may collect and process the following information:

Personal Data Collected Directly From You

We receive personal data directly from you including when you provide it to us through use of the Website, place an order for food with a Restaurant through the Flipdish Platform or through creating an account on the Flipdish Portal, including, but not limited to:

  • name;

  • email address;

  • delivery address;

  • location data (when an order for food is placed through a kiosk);

  • telephone number;

  • username; and

  • payment details.

You may also include details in your food order that indicate your health information or religious beliefs.

Personal Data Collected From Third Party Sources

A Restaurant may provide us with personal data about you in order for us to fulfil food orders placed with the Restaurant through the Flipdish platform.

Personal Data Collected We Automatically Collect

Some personal data is automatically collected when you use the Website, such as:

  • IP address;

  • device identifiers;

  • browser information; and

  • cookie data (as explained in our Cookie Policy).

How We Use Personal Data

We process personal data to operate, improve, understand and personalise our services e.g. we use personal data to:

  • place and complete food orders made with a Restaurant through the Flipdish Platform;

  • personalise Flipdish content based on your preferences;

  • communicate with you;

  • protect against or deter fraudulent, illegal or harmful actions;

  • respond to user inquiries;

  • provide support and assistance through the Flipdish Portal;

  • comply with our legal or contractual obligations, including without limitation, obligations relating to third party payment processing providers;

  • enforce our terms and conditions;

  • deal with Restaurants and Flipdish corporate customers; and

  • resolve disputes.

Lawful Basis for Processing

Purpose of Processing

Lawful Basis under GDPR

Administration purposes

Such processing is necessary for the performance of a contract between you and a Restaurant, where necessary for the purpose of complying with our legal obligations and where you have consented to providing certain information in relation to your food order preferences at the time of purchase. If you are acting on behalf of a Restaurant or a Flipdish corporate customer and we are provided with
personal data, we will process that as required including to perform the Flipdish Customer Terms of Service.

Training, quality monitoring or evaluating the services we provide

Such processing is necessary for the legitimate interests pursued by us in monitoring and improving our services and their usage and ensuring that our users use the Website and the Flipdish Portal in accordance with our terms and conditions and policies.

Website services, including for troubleshooting, data analysis, and survey purposes.

We have a legitimate interest in operating and maintaining the Website and for related purposes including improving our services.

Statistical information that cannot be related back to individuals to help us improve the services we offer.

We have a legitimate interest in carrying out certain analytics to ensure the services we provide to Restaurants are effective and operate appropriately.

Enforcing and Defending Our Rights

We have a legitimate interest in ensuring that our services and the Website are used in accordance with our terms and conditions of use and policies.

Where necessary for the purpose of complying with our legal obligations.

Where necessary for the purpose of establishing, exercising or defending a legal claim, a prospective legal claim, legal proceedings or prospective legal proceedings.

Individual Data Subject Rights

Data Protection Laws provide certain rights in favour of data subjects (the “Data Subject Rights”).

Data Subject Rights include the right of a data subject to:

  • receive detailed information on the processing (as per transparency obligations on controllers) which we have provided through this Privacy Policy;

  • access personal data;

  • rectify or erase personal data (i.e. right to be forgotten);

  • restrict processing;

  • withdraw consent to processing based on consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal;

  • data portability;

  • object to processing; and

  • object to automated decision making (including profiling).

These Data Subject Rights will be exercisable by you subject to limitations as provided for under Data Protection Laws.

If you require more information about how a Restaurant processes your personal data or you wish to exercise any of your data subject rights in respect of the processing of your personal data by a Restaurant you should contact the Restaurant directly.

You may also contact us or make a request to exercise any Data Subject Right by contacting [email protected]. Your request will be dealt with in accordance with Data Protection Laws. If you are acting on behalf of a Restaurant or a corporate customer of Flipdish and your personal data is processed through the Flipdish Portal, you may change your privacy settings through the Flipdish Portal.

Disclosing Your Information

We do not share any personally identifying data with third parties and will not disclose your personal data to any other party except as set out in this policy. Flipdish may be required to disclose personal data in some scenarios e.g. when you violate our terms and conditions or other policies. Flipdish may disclose such personal data, at our sole discretion, if we believe it necessary or appropriate in connection with investigation of fraud, IP infringement, piracy, or other unlawful activity. This may require disclosure of your name, address, phone number, or email.

Flipdish may engage other companies and people to perform tasks on our behalf (i.e. processors) and may need to share your information with them to provide you with our services e.g. delivery services, hosting services, analysing data, billing, and marketing assistance.

In some cases, Flipdish may buy or sell its assets which may involve the transfer of user information. Flipdish will transfer such information if we are acquired by or merged with another company. In this event, we will notify you by email.

Without limiting the above, in an effort to respect your privacy and Flipdish’s ability to keep the community free from bad actors, we will not otherwise disclose your personal data to law enforcement, other government officials, or other third parties without a court order, law enforcement request, legal process, or substantially similar legal procedure, except when we believe in good faith that the disclosure of information is necessary to protect Flipdish’s rights or the rights of third parties, prevent physical harm or financial loss, or to report suspected illegal activity.

Personal Data Obtained by Restaurants

As part of the food ordering process, a Restaurant may obtain from Flipdish a user’s name, email, phone number, delivery address or other information. This information should only be used for Flipdish-related communications or for Flipdish-facilitated transactions.

Where users consent to direct marketing, the user’s consent is provided directly to the Restaurant. Flipdish, acting as a processor, may assist Restaurants in managing users’ consent preferences. Users may unsubscribe from direct marketing through the opt-out link included in marketing communications. Flipdish also acts as processor when it assists Restaurants with managing their analytics.

Data Retention

We will keep personal data only for as long as the retention of such personal data is deemed necessary for the purposes for which that personal data are processed (as described in this Privacy Policy) unless we are required to retain your personal data for a longer period (e.g. in the event of legal proceedings or investigations).

Data Transfers Outside the EEA

We may occasionally transfer personal data outside of the European Economic Area to countries that are not deemed to grant an adequate level of protection. Any such transfers will be in accordance with applicable law and appropriate safeguards such as the standard contractual clauses approved under EU law from time to time. If you require further information, please contact [email protected].

Third Party Links

On occasion we include links to third parties on the Website. Where we provide a link it does not mean that we have any control over the linked website or its privacy policy or that we endorse, or approve that website’s policy towards visitor privacy. You should review the linked website’s privacy policy before sending them any personal data.

Service-related Announcements and Changes

Any changes to this Privacy Policy in the future will be posted to the Website and, where appropriate, through email notification. Flipdish may send you Flipdish Portal service-related announcements. You may not opt-out of service-related communications.

Contacting Us

For further information about this Privacy Policy or the processing of your personal data by or on behalf of Flipdish, please contact us at [email protected].

While you may make a complaint in respect of Flipdish’s compliance with Data Protection Laws to the Data Protection Commission, we ask that you contact us in the first instance to give us the opportunity to address your concerns.

This Policy was last updated in August 2023.