1. What does Flipdish's Privacy cover?

Flipdish's Privacy Policy reflects the data processing arrangements that apply when we partner with you and your customers to enable end-to-end online ordering and fulfilment. In legal jargon, Flipdish is a “joint controller” with you of personal data where we jointly collect and use the personal data of customers for the purpose of taking orders and recording customer details while Flipdish also acts as a “processor” of personal data in other cases, for example, when we arrange to undertake data analytics or an outbound marketing campaign on your behalf. Through our Privacy Policy we ensure that information on this data processing is communicated in a clear and transparent manner to data subjects.

2. What about your Privacy Policy?

If you are a Flipdish hosted website customer, a privacy policy is automatically published on your website and you won't need to take additional action. Please ensure that the information about your company (e.g. your company registered name or number) is up to date on the Flipdish Portal as this information is automatically populated in the privacy policy . You can update your company information in the Flipdish Portal by going to "General Settings" and clicking on Terms and policy documents:

If you embedded our Flipdish Online Ordering on your own website, Flipdish provides you with a template privacy policy that you can choose to use. However, please do keep in mind that if your website operates additional plug-ins or widgets which process personal data other than stated in the template privacy policy, you may need to create a custom privacy policy.

As you are primarily responsible for your own branded website, it is important that you check and confirm that the information contained in the privacy policy for your website is correct (or amend it as appropriate) as Flipdish is not responsible for this.

The Privacy Policy template can be viewed here.

3. How can you change the default / template Privacy Policy to your customer Privacy Policy?

If you opt to include a custom privacy policy on your website instead of the template policy Flipdish provided, you can do so by changing your settings in the Flipdish Portal:

a) Log into your portal and go to "General Settings"

b) Click on 'Terms and Policy documents' to see this:

c) Mark 'Custom policy documents (advanced) and add the urls to your policies and terms in the indicated fields.

4. What does Flipdish's Cookie Policy cover?

The Flipdish Cookie Policy sets out the cookies used on our site, the purpose and the duration of those cookies and the cookie settings modal reflects this.

Flipdish has also created a default Cookie Policy and Cookie settings modal/banner which is made available to our customers. You can find more information about how to use the java script library we created for your benefit here. Find out more about how to control the Flipdish cookie banner here.

5. What about your Cookie Policy?

If you are our Flipdish hosted website customer, the new Cookie Policy is published on your website automatically.

If you embedded our Flipdish Online Ordering on your own website, Flipdish provides you with a template Cookie Policy for your website. This sets out the

cookies used on your site or app (as applicable), the purpose and the duration of those cookies based on the standard website configuration we suggest.

If you use cookies otherwise than as described in the Cookie Policy there is a risk that you may not comply with data protection and e-privacy law. Therefore you should confirm that the default information contained in the Cookie Policy for your website is correct and you should amend it as required as Flipdish cannot be responsible for this. The same applies to cookie settings - the visitors to your website should be given the option to control which cookies are dropped (other than strictly necessary cookies).

6. Do the Flipdish Terms of Service account for Data Protection Laws?

The Terms of Service ensure that the data protection arrangements in place between Flipdish and you comply with the law and that these arrangements are clearly set out.

The Terms of Service cover where Flipdish and you act as joint controllers (see question 7 for more information) and where Flipdish acts as a data processor on your behalf (see question 12 for more information).

7. What is a joint controller?

Joint controllers exist where they jointly determine how and why personal data is processed. Under data protection law, joint controllers are required to have an “arrangement” in place between them to determine how responsibility is shared.

As Flipdish and you together determine what personal data to gather from end-users in respect of your orders, Flipdish and you are considered to be joint controllers under data protection law in respect of food orders. The Terms of Service set out these responsibilities between you and Flipdish.

8. Who is responsible for responding to data subjects’ requests where Flipdish and you act as joint controllers?

For personal data collected by Flipdish on the Flipdish Platform, Flipdish will be responsible for responding to data subject requests, including any data subject access requests.

For personal data received by you through the Flipdish Platform or provided to you directly by end-users, you are responsible for responding to data subject requests, including data subject access requests.

9. What about potential data protection enquiries or complaints where Flipdish and you act as joint controllers?

For personal data collected by Flipdish through the Flipdish Platform, Flipdish will be responsible for dealing with data protection enquiries or complaints from end-users or from regulators, including complaints made to a data protection supervisory authority.

You will be responsible for dealing with complaints and enquiries in relation to the personal data received by you through the Flipdish Platform or provided to you directly by end-users.

10. Who is responsible for notifying a potential personal data breach when Flipdish and you act as joint controllers?

Flipdish will be responsible for notifying a personal data breach in relation to personal data collected by Flipdish through the Flipdish Platform if such notification is required.

You will be responsible for notifying a personal data breach in relation to personal data received by you through the Flipdish Portal and directly from the end-users themselves if such notification is required.

11. What if I am unsure?

Data protection laws can be complex. If you are dealing with a customer complaint or regulatory enquiry relating to your use of personal data and you are unsure as to the respective obligations of yourself and Flipdish, please let us know. In most cases, we should be able to work together to ensure that the relevant issue is addressed efficiently and in accordance with the law. We have a shared interest in ensuring that issues are identified and resolved quickly.

12. When does Flipdish act as a data processor?

Flipdish acts as a data processor of any associated data processing in relation to marketing and customer analytics conducted on your behalf as a data controller. For example, if you give us your customer list and ask us to undertake an outbound marketing campaign for you, we are a processor and you are the controller.

13. What terms govern the relationship between you as a data controller and Flipdish as data processor?

Data protection law requires that certain terms are in place between a data controller and a data processor. These terms help to ensure that responsibilities for data processing are divided correctly. The terms are included in the Terms of Service.

14. What terms govern the relationship between Flipdish and the end-user (your customer)?

Flipdish has Terms & Conditions in place between us and end-users (your customers). Data protection law requires transparency around any processing of personal data and you may notice that our Privacy Policy as well as Terms & Conditions are clearly referred to in the online ordering process with the end-user. You can view our Terms & Conditions here.

September 2020

Did this answer your question?