PRIVACY POLICY:
This policy sets out:
(1) the information we collect about you when you visit our website, use our products or services, or otherwise interact with us;
(2) how we use, share, store, and secure the information; and
(3) how you may access and control the information.
In this policy, “Daily Munch” or “we” refers to Daily Munch and “Platform” means our app “Daily Munch- Food Diary” on the App Store.
In this policy, “personal information” refers to any data, information, or combination of data and information that is provided by you to us, or through your use of our products or services, that relates to an identifiable individual.
1. WHAT INFORMATION WE COLLECT ABOUT YOU
1.1 We collect the following types of information about you:
a) account and profile information that you provide when you register for an account or sign up for our products or services, for example your name, username or similar identifier, other personal description, physical address (billing or mailing or both), email address, telephone number(s) (collectively, “Account Data”);
b) information you provide through support channels, for example when you report a problem to us or interact with our support team, including any contact information, documentation, or screenshots (collectively, “Support Data”);
c) communication, marketing, and other preferences that you (collectively, “Preference Data”);
d) details of any transactions, purchases, or orders that you've made with us (collectively, “Transaction Data”);
e) payment information, for example your payment card information or bank account details (collectively, “Financial Data”);
f) information about your device or connection, for example your internet protocol (IP) address, log-in data, browser type and version, time-zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our products or services and information we collect through cookies and other data collection technologies (please read our Cookies Policy for details) (collectively, “Technical Data”); and
g) Information about your use of or visit to our Platform, for example your clickstream to, through, and from our Platform, products you viewed, used, or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods to browse away from the page (collectively, “Usage Data”).
1.2 We collect the above information when you provide it to us or when you use or visit our Platform. We may also receive information about you from other sources, including:
a) our personnel, agents, advisors, consultants, and contractors in connection with our operations or services, for example our staff engaged in the fulfilment of your order, processing of your payment, and provision of support services;
b) other users of our products or services, for example other users from the user's organization;
c) other services linked to your account, for example other services provided by us;
d) our group companies or overseas offices that provide development, support, sales and other services; and
e) our business partners and service providers who provide development, support, sales and other services.
1.3 We do not collect sensitive data or special category data about you. This includes details about your race, ethnic origin, politics, religion, trade union membership, genetics, biometrics, health, or sexual orientation.
2. HOW WE USE INFORMATION WE COLLECT
2.1 We only use your personal information where the law allows us to. We use your personal information only where:
a) we need to perform the contract we have entered into (or are about to enter into) with you, including to operate our products or services, to provide customer support and personalised features, and to protect the safety and security of our Platform;
b) it satisfies a legitimate interest which is not overridden by your fundamental rights or data protection interests, for example for research and development, and in order to protect our legal rights and interests;
c) you have given us consent to do so for a specific purpose, for example we may send you direct marketing materials or publish your information as part of our testimonials or customer stories to promote our products or services with your permission; or
d) we need to comply with a legal or regulatory obligation.
2.2 If you have given us consent to use your personal information for a specific purpose, you have the right to withdraw your consent at any time by contacting us (please refer to paragraph 8. For contact information), but please note this will not affect any use of your information that has already taken place.
2.3 We do not share your personal information with any company outside our group for marketing purpose, unless with your express specific consent to do so.
2.4 For visitors to or users of our Platform who are located in the European Union, we have set out our legal bases for processing your information in the Legal Bases Table at the end of this policy.
3. HOW WE SHARE INFORMATION WE COLLECT
3.1 We share information with other companies in our group in order to operate our Platform and to offer and improve our products and services.
3.2 We may share personal information on an aggregated or de-identified basis with third parties for research and analysis, profiling, and similar purposes to help us improve our products and services.
3.3 If you use any third-party software in connection with our products or services, for example any third-party software that our Platform integrates with, you might give the third-party software provider access to your account and information. Policies and procedures of third-party software providers are not controlled by us, and this policy does not cover how your information is collected or used by third-party software providers. We encourage you to review the privacy policies of third-party software providers before you use the third-party software.
3.4 Our Platform may contain links to third-party websites over which we have no control. If you follow a link to any of these websites or submit information to them, your information will be governed by their policies. We encourage you to review the privacy policies of third-party websites before you submit information to them.
3.5 We may share your information with government and law enforcement officials to comply with applicable laws or regulations, for example when we respond to claims, legal processes, law enforcement, or national security requests.
3.6 If we are acquired by a third party as a result of a merger, acquisition, or business transfer, your personal information may be disclosed and/or transferred to a third party in connection with such a transaction. We will notify you if such a transaction takes place and inform you of any choices you may have regarding your information.
4. HOW WE STORE AND SECURE INFORMATION WE COLLECT
4.1 We use data hosting service providers based in Hong Kong, the United States of America and Canada to host the information we collect.
4.2 We have adopted the following measures to protect the security and integrity of your personal information:
a) information is encrypted using TLS/SSL technology;
b) your account is password-protected, with the requirement(s) that passwords must be at least 8 characters long, with a combination of letters and numbers;
c) access to your personal information is restricted to personnel or service providers on a strictly need-to-know basis, who will only process your information on our instructions and who are subject to a duty of confidentiality; and
d) our information collection, storage, and processing practices are reviewed regularly.
4.3 We have put in place procedures to deal with any suspected privacy breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
4.4 While we implement safeguards designed to protect your information, please note that no transmission of information on the Internet is completely secure. We cannot guarantee that your information, during transmission through the Internet or while stored on our systems or processed by us, is absolutely safe and secure.
4.5 We only retain personal information for so long as it is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. After such time, we will delete or anonymize your information, or if this is not possible, we will securely store your information and isolate it from further use. We periodically review the basis and appropriateness of our data retention policy.
5. YOUR RIGHTS
5.1 You have the right to:
a) be informed of what we do with your personal information;
b) request a copy of personal information we hold about you;
c) require us to correct any inaccuracy or error in any personal information we hold about you;
d) request erasure of your personal information (note, however, that we may not always be able to comply with your request of erasure for record keeping purposes, to complete transactions, or to comply with our legal obligations);
e) object to or restrict the processing by us of your personal information (including for marketing purposes);
f) request to receive some of your personal information in a structured, commonly used, and machine readable format, and request that we transfer such information to another party; and
g) withdraw your consent at any time where we are relying on consent to process your personal information (although this will not affect the lawfulness of any processing carried out before you withdraw your consent).
5.2 You may opt out of receiving marketing materials from us by using the unsubscribe link in our communications, by updating your preferences within your account on our Platform, or by contacting us. Please note, however, that even if you opt out from receiving marketing materials from us, you will continue to receive notifications or information from us that are necessary for the use of our products or services.
5.3 As a security measure, we may need specific information from you to help us confirm your identity when processing your privacy requests or when you exercise your rights.
5.4 Any request under paragraph 5.1 will normally be addressed free of charge. However, we may charge a reasonable administration fee if your request is clearly unfounded, repetitive, or excessive.
5.5 We will respond to all legitimate requests within one (1) month. Occasionally, it may take us longer than a month if your request is particularly complex or if you have made a number of requests.
6. CHANGES TO THIS POLICY
We may amend this policy from time to time by posting the updated policy on our Platform. By continuing to use our Platform after the changes come into effect, you agree to be bound by the revised policy.
7. POLICY TOWARDS CHILDREN
We are committed to protecting the privacy of children who use our platform. This children's privacy policy explains our information collection, disclosure, and parental consent practices with respect to information provided by children under the age of 13 ("child" or "children"), and uses terms that are defined in our general Privacy Policy.
We take the privacy of the Site's users very seriously. Accordingly, this policy aims to comply with requirements of the U.S. Children's Online Privacy Protection Act ("COPPA"). For more information about COPPA and general tips about protecting children's online privacy, please visit OnGuard Online (http://www.onguardonline.gov/articles/0031-protecting-your-childs-privacy-online). We reserve the right to amend this Children's Privacy Policy. Please check this page periodically for changes.
7.1 In any instance that we collect personal information from a child, we will retain that information only so long as reasonably necessary to fulfill the activity request or allow the child to continue to participate in the activity, and ensure the security of our users and our services, or as required by law. In the event we discover we have collected information from a child in a manner inconsistent with COPPA's requirements, we will either delete the information or immediately seek the parent's consent for that collection.
7.2 In certain cases, children can register with our platform. During the registration process, we may ask the child to provide certain information for notification and security purposes, including a parent or guardian's email address, the child's account username, and password. We instruct children under the age of 13 to input their parent or guardian's email address and to not use their first or last name when creating a username. We will not require a child to provide more information than is reasonably necessary in order to register. With regard to school-based registration, COPPA allows teachers and school administrators to act instead of parents to provide consent for the collection of personal information from children. Therefore, when registering with the platform, a teacher's email address may be used in lieu of a parent's. Schools should always notify parents about these activities. For more information on parental rights with respect to a child's educational record under the Family Educational Rights and Privacy Act (FERPA), please visit the FERPA site (http://www.ed.gov/policy/gen/guid/fpco/ferpa/index.html).
7.3 Certain activities and applications on our Platform allow children to create or manipulate content and save it with WCS through the Site. None of these activities require children to provide any personal information and therefore do not result in notice to the parent or require parental consent. We strongly advise children to never insert personal information in their created content.
7.4 In the event that we wish to collect additional personal information from a child, we will first seek a parent or guardian's consent by email. In the email we will explain what information we are collecting, how we plan to use it, how the parent can provide consent, and how the parent can revoke consent. If we do not receive parental consent within a reasonable time, we will delete the parent contact information and any other information collected from the child in connection with that activity.
7.5 We may share or disclose personal information collected from children in a limited number of instances, including the following:
a) We may disclose personal information if permitted or required by law, for example, in response to a court order or a subpoena. To the extent permitted by applicable law, we also may disclose personal information collected from children (i) in response to a law enforcement or public agency's (including schools or children services) request; (ii) if we believe disclosure may prevent the instigation of a crime, facilitate an investigation related to public safety or protect the safety of a child using our sites or applications; (iii) to protect the security or integrity of our sites, applications, and other technology, as well as the technology of our service providers; or (iv) to enable us to take precautions against liability.
7.6 At any time, parents can refuse to permit us to collect further personal information from their children in association with a particular account, and can request that we delete from our records the personal information we have collected in connection with that account. Please keep in mind that a request to delete information may lead to deletion of an account and associated content, groups and challenges.
8. CONTACT US
8.1 Please contact us at dailymunch.fd@gmail.com
8.2 Please contact us in the first instance if you have any questions or concerns. If you have unresolved concerns, you have the right to file a complaint with a data protection authority in the country where you live or work or where you feel your rights have been infringed.
Last updated: 4 June 2023
COOKIES POLICY
Cookies are small text files that are placed on your device by a web server when you access our Platform. We use cookies to identify your access and monitor usage and web traffic on our Platform to customise and improve our products and services. We use both persistent cookies and session cookies. A persistent cookie stays in your browser and will be read by us when you return to our Platform or a partner site that uses our services. Session cookies only last for as long as the session lasts (usually the current visit to a website or a browser session). We use the following types of cookies:
a) Strictly necessary cookies: these are cookies that are required for the operation of our Platform. They include, for example, cookies that enable you to log into secure areas of our Platform.
b) Analytical/performance cookies: these are cookies that allow our Platform to recognise and count the number of visitors, and to see how visitors move around our Platform when they are using it. This helps us to improve the way our website works, for example by ensuring that users find what they are looking for easily.
c) Functionality cookies: these are cookies that are used to recognise the user when the user returns to our Platform. This enables us to personalise our content for the user, greet the user by name, and remember the user's preferences (for example the user's choice of language or region).
d) Targeting cookies: these are cookies that record the user's visit to our Platform, the pages the user has visited, and the links the user has followed.
You can block cookies by activating the setting on your browser that allows you to refuse the use of all or some cookies. However, if you do so, you may not be able to access all or parts of our Platform.
Last updated: 4 June 2023