1. Introduction

Welcome to Dine Reserve (operated by Naifeast Digital). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services.

By accessing or using our Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Lawful Basis for Processing

Under the Data Protection Act, 2019 (Kenya), we process your personal data under the following lawful bases:

• Performance of a Contract: To provide our services to you (e.g., managing your reservation or restaurant account).
• Consent: When you voluntarily provide information or opt-in to marketing communications.
• Legitimate Interests: To improve our platform, ensure security, and prevent fraud.
• Legal Obligation: To comply with tax and accounting laws.

3. Information We Collect

A. Restaurant Partner Information

When you register your restaurant on our platform, we collect:

• Account Details: Name, email address, phone number, and password.
• Business Profile: Restaurant name, description, cuisine type, operating hours, and location.
• Financial Information: Banking details for commission payments and payouts.

B. Diner/Guest Information

When a guest makes a reservation using a booking link provided by a restaurant partner, we collect:

• Contact Details: Name, email address, and phone number.
• Reservation Details: Date, time, party size, and special requests.
• Dining Preferences: Any dietary restrictions or preferences noted during booking.

C. Usage and Analytics Data

• Platform Usage: How Restaurant Partners interact with the dashboard and management tools.
• Booking Analytics: Aggregated data on reservation trends, peak times, and customer volume.
• Technical Data: IP address, browser type, and device information for security and optimization.

4. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our Service.
• To process and manage reservations and table bookings.
• To process payments, commissions, and generate invoices.
• To communicate with you regarding your account, updates, security alerts, and support messages.
• To improve our services and customer experience.
• To comply with legal obligations and enforce our Terms and Conditions.

5. Data Retention

We retain personal user data for as long as necessary to fulfill the purposes outlined in this policy.

• Account Data: Retained as long as your account is active.
• Transaction Data: Retained for 7 years as required by tax laws in Kenya.
• Reservation Data: Retained for historical analytics unless deletion is requested.

Upon account termination, data is deleted or anonymized within 30 days, barring legal hold requirements.

6. Data Sharing and International Transfers

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors (e.g., Supabase, Paystack) who assist in service delivery.
• Business Transfers: In connection with merger or acquisition.
• Legal Requirements: If required by law.

International Transfers: Some of our partners (e.g., cloud hosting) may process data outside Kenya. We ensure such transfers comply with Section 48 of the Data Protection Act via adequate safeguards (e.g., Standard Contractual Clauses).

7. Your Rights

Under the Data Protection Act, 2019, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct false or misleading data.
• Erasure: Request that your personal data be deleted ("Right to be Forgotten").
• Objection: Object to the processing of your personal data.
• Data Portability: Receive your data in a structured, commonly used format.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: support@nairobifeast.com

Data Protection Officer (DPO):
For specific data protection inquiries, you may contact our DPO directly at privacy@nairobifeast.com.