1. Introduction

Welcome to Toffer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant management system, mobile application, and website (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Services.

1.1. Definitions

• Account means a unique account created for you to access our Services and manage your restaurant operations.

• Services refers to the Toffer restaurant management system, mobile application, website, and all related features including RMS, Point Rewards, VIP Club, Discount Management, and Kitchen Display System (KDS).

• Personal Data means any information that relates to an identified or identifiable individual, including but not limited to name, email address, phone number, and payment information.

• Restaurant Data refers to information related to your restaurant operations, including menu items, orders, customer information, sales data, and analytics.

• Customer Data means information about your restaurant's customers who use the Toffer app to place orders, earn points, or participate in VIP programs.

2. What Data We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Services, and information from third-party sources.

2.1. Information you provide to us

When you register for an account, use our Services, or communicate with us, you may provide us with:

• Restaurant information: business name, address, phone number, email, and business registration details.

• Account credentials: username, password, and security questions.

• Payment information: credit card details, bank account information for processing transactions and subscription payments.

• Menu and product information: item names, descriptions, prices, images, and categories.

2.2. Automatic data collection

When you use our Services, we automatically collect certain information, including:

• Device information: device type, operating system, unique device identifiers, and mobile network information.

• Usage data: features used, actions taken, time spent on pages, and interaction patterns.

• Location data: with your consent, we collect precise location information to help you find nearby restaurants and enable location-based food ordering features. You may disable location access at any time through your device settings.

• WiFi network information: we may access your device's WiFi network name (SSID) solely to detect if you are physically present at a participating restaurant for dine-in ordering purposes. This information is never stored on our servers, never shared with third parties, and is not used for any purpose other than in-restaurant detection.

• Log data: IP address, browser type, pages visited, and timestamps.

2.3. Customer order data

When customers place orders through your Toffer-powered system, we collect order details including items ordered, order amounts, delivery addresses, and contact information. This data is used to process orders and improve our Services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Services, including processing orders, managing reservations, and handling payments.

• To manage your account and provide customer support.

• To operate the Points Reward system and VIP Club features.

• To send notifications about orders, promotions, and service updates.

• To analyze usage patterns and improve our Services.

• To comply with legal obligations and protect against fraud.

4. Points Reward and VIP Club Data

Our Points Reward and VIP Club features collect and process customer data to provide loyalty benefits. This includes:

• Points earned and redeemed per customer.

• VIP membership status and tier levels.

• Order history for calculating rewards.

• Contact information for sending VIP notifications and exclusive offers.

Customers can opt out of promotional communications at any time while retaining their points balance.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share data with third-party vendors who assist us in providing the Services, such as payment processors, cloud hosting providers, and analytics services.

• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest using SSL/TLS protocols.

• Secure payment processing through PCI-DSS compliant providers.

• Regular security audits and vulnerability assessments.

• Access controls and authentication requirements for all users.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

Order and transaction data is retained for a minimum of 7 years for tax and accounting purposes as required by Canadian law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.

• Correction: Request correction of inaccurate or incomplete information.

• Deletion: Request deletion of your personal information, subject to legal retention requirements.

• Data Portability: Request a copy of your data in a portable format.

To exercise these rights, please contact us using the information provided below.

9. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Modified" date. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@toffer.ca or through our Contact Page.