We protect your data like we protect our recipes.
Last updated:
This policy explains what information we collect, why we collect it, and how you can control it. We've written it in plain language—no jargon.
Data We Collect
We collect information you provide directly and information gathered automatically.
| Category | Examples | Source |
|---|---|---|
| Identity | Name, table number, guest code | You provide it |
| Usage | Pages visited, orders placed, chat messages | Automatic |
| Device | IP address, browser type, language | Automatic |
| Payment | Transaction reference (no card numbers stored) | Payment processor |
How We Use It
- Process your orders: Confirm, prepare, and deliver your food order.
- Improve our service: Analyze anonymized usage data to improve menus and features.
- Customer support: Respond to questions and resolve issues.
- Safety & fraud prevention: Detect abuse and protect platform integrity.
- Marketing (with consent): Send promotions only if you have opted in. Unsubscribe anytime.
Data Retention
We retain personal data only as long as necessary:
- Order data — 3 years for accounting purposes.
- Chat session data — 90 days, then permanently deleted.
- Guest session data — deleted when you close your table session.
- Analytics data — aggregated and anonymized indefinitely.
Your Rights
Under applicable law, you have the right to:
Access
Request a copy of the data we hold about you.
Rectification
Ask us to correct inaccurate data.
Erasure
Request deletion of your data ("right to be forgotten").
Portability
Receive your data in a machine-readable format.
Objection
Object to processing for direct marketing.
Withdraw consent
Opt out of any optional processing at any time.
To exercise any right, email privacy@bigboy.vn. We'll respond within 30 days.
Security
We implement industry-standard measures including TLS encryption in transit, encrypted storage at rest, access control policies, and regular security audits. No method of transmission over the internet is 100% secure. We notify affected users within 72 hours if a data breach occurs.
Contact
Questions about this policy? Reach our privacy team: