1. Data we collect
• Account: email, password (stored only as a hash), preferred language, sign-in times. • Restaurant profile: details, photos, menu and team information you submit — this is public content. • Contact form: name, email, company, phone number (if entered) and your message. • Technical data: IP address, browser type, pages viewed — used for security, spam prevention and daily per-restaurant view counts (aggregated, not identifying individuals).
2. How we use it
To run the service (sign-in, managing restaurants, content review), send transactional emails (verification, password reset, approval and VIP notices), reply to enquiries, prevent abuse and improve the product. We do not send marketing emails unless you opt in.
3. Legal basis
We process data on the basis of your consent when you create an account or submit a form, to provide the service you request, and in line with our obligations under Vietnam's personal data protection rules (Decree 13/2023/ND-CP).
4. Third-party processors
• Cloudflare: Turnstile bot protection on sign-up and login forms, and image storage (R2). • Email provider: delivers transactional emails to your address. • AI services (Google Gemini or Anthropic Claude): receive only public restaurant profile content for translation; never emails, passwords or account data. These providers process data only on our instructions.
6. Storage and security
Data is stored on servers we manage, with HTTPS encryption in transit, Argon2 password hashing and regular backups. Only staff who need it can access account data.
7. Retention
Account data is kept until you delete your account. Removed restaurant profiles disappear from the public site immediately and from backups within 30 days. Aggregated view statistics are kept for 90 days. Contact form submissions are kept for up to 12 months.
8. Your rights
You can access, correct, export or request deletion of your personal data, withdraw consent and lodge a complaint. Most actions are available in your Account page; for other requests email [email protected] and we will respond within 72 hours.
9. Children
The service is not intended for anyone under 18 and we do not knowingly collect data from children.
10. Changes to this policy
This policy may be updated; the date of the latest update appears at the top of this page. Material changes will be announced by email. Privacy questions: [email protected].