Privacy Policy

1. Introduction ==================================== Lovely Grub is a product made by Peaceful Programming Limited. It is a website where people can sell food at no extra cost (other than the Stripe/Sumup card fees which we can not do anything about). It is intended to provide an ethical alternative to modern exploitative food-ordering platforms. Users can browse kitchens and their menus, create baskets to select items and "share" baskets with other users. This lets 2 or more people all be part of the same single order. Other users can create kitchens and menus and sell their food. Sellers must verify their identity with Stripe and have a Stripe or Sumup account in good standing. Payments are processed using Stripe or Sumup. Peaceful Programming Limited are absolutely committed to privacy. 2. Information Collection ==================================== The only information collected directly and persisted by Peaceful Programming is information you give us. We do not record anything else like IP address or inferred location or anything like that. That is not to say we won't check your IP address when you visit us (standard security procedure). In the future, we might ask for your location to show kitchens closest to you. That is optional, and we do not record that information. However, we can not state with authority what kind of data is collected by Stripe or Sumup when, e.g. paying for an order. Stripe's privacy policy can be read here: https://stripe.com/privacy Sumup's privacy policy can be read here: https://www.sumup.com/en-ie/privacy/ 3. Use of Information ==================================== We use: - your email address to send you emails. - your phone number to let you put your phone number on orders. - Stripe to verify the identity of sellers, in case someone behaves unethically. We do not use any data for marketing. We do not and never will engage in targeted advertising, user profiling, etc. 4. Information Sharing and Disclosure ==================================== We will only ever share information if a buyer or seller commits a crime. For example, if a seller accepts orders but does not provide any goods. In such a situation, we would provide as much relevant data as possible to law enforcement. 5. Data Subject Rights ==================================== You of course have the right to request the data we have on you and to delete your data. Check your account settings page for more information on this. 6. Cookies and Tracking Technologies ==================================== Our site will give you 4 types of cookies: 1. Lovely Grub cookies! There are 3 of these: - The session cookie (essential). - A "super chill" cookie (containing very little and useless info). - A "remember me" cookie - so you can stay logged in after closing the browser. 2. Possibly multiple Stripe cookies. These are created by Stripe's Javascript. 3. Possibly multiple Sumup cookies. These are created by Sumup's Javascript. 4. A hcaptcha cookie (tells us you are human). This is used by the "anti-bot" thing where you solve a puzzle like "which animal does not belong in the ocean?". You have no options with these cookies. If you use the site, you get these cookies. All of these cookies are essential to the functioning of the product. We do not track you. 7. Data Security ==================================== All data is stored in a postgres database on a private network. It is only ever directly accessed via a wireguard tunnel or by a machine on the private network that also has access credentials. 8. Data Retention ==================================== All data is retained indefinitely unless we receive a "forget me" request. Since we do not store anything more than your name, email and phone this is very fair. 9. International Data Transfers ==================================== There are no international data transfers 10. Children’s Privacy ==================================== Other people are not visible on Lovely Grub. You can only interact by sharing a basket, which reveals only your "handle" (username). As described above, only Stripe or Sumup get the personal info. And that only happens for people who want to sell on the platform. There is no age threshold for using the website. All public strings are scanned for offensive words and automatically redacted or simply not created. All public images are scanned for offensive content and automatically removed or simply not created. 11. Changes to the Privacy Policy ==================================== When the privacy policy is updated, we will ensure there is a dismissable notification for all users. 12. Contact Information ==================================== info@lovelygrub.ie