PRIVACY POLICY

Last updated on [26/12/2025]

Please read this Privacy Policy ("Policy") carefully. The users, subscribers, partners, and viewers ("Users") accept the terms of this Policy by accessing and or utilizing the restaurant services of POTOLO (the "Company"). The Users acknowledge that they agree to this Policy and accept the rights and obligations created by it. This Policy is drafted to outline the privacy practices of the Company in relation to its restaurant platform. This Policy is designed to comply with applicable laws and standards.

1. INTRODUCTION

1.1. Purpose of the Privacy Policy

This Policy has been meticulously crafted to serve as a comprehensive guide outlining the manner in which POTOLO collects, utilizes, processes, and safeguards the personal information of its Users in connection with its restaurant-focused services. These services include, but are not limited to, browsing restaurant listings, placing food orders, scheduling deliveries or pickups, making reservations, processing payments, and communicating with restaurant partners.

The Company recognizes the paramount importance of privacy and data protection in the context of food ordering and delivery services, which involve the collection of personal information such as contact details, delivery locations, order preferences, and payment information. This Policy delineates the principles and practices that the Company adheres to in compliance with global data protection regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), ensuring that Users' privacy is respected and protected.

1.2. Scope and Application

The scope of this Policy extends to all personal information collected by the Company through its restaurant platform, regardless of the manner in which Users access or utilize the services. This Policy applies to all platforms, technologies, and devices through which the restaurant services are made available. It informs Users about their privacy rights and choices regarding the collection, use, and disclosure of their personal information.

1.3. Agreement to Terms

By accessing, registering, or using the restaurant platform, Users explicitly agree to the collection, use, processing, and sharing of their personal information in accordance with this Policy. If a User does not agree with any part of this Policy, they should discontinue use of the services. Continued use of the platform following updates constitutes acceptance of the revised Policy.

1.4. Updates and Changes to the Privacy Policy

The Company reserves the right to modify this Policy at any time. The latest revision date will be displayed at the top of the document. Significant changes will be communicated through the platform or other appropriate channels.

2. INFORMATION COLLECTION

2.1. Types of Information Collected

2.1.1. Personal Identification Information

This includes information such as full name, email address, phone number, and delivery address. This information is required to create accounts, process orders, communicate with Users, and deliver restaurant services effectively.

2.1.2. Payment Information

Payment information is collected to process food orders and related transactions. This may include card details or other payment credentials, which are securely processed through authorized third-party payment processors. POTOLO does not store full payment card details on its own servers.

2.1.3. Location Data

Location data is collected to facilitate accurate delivery services, show nearby restaurants, estimate delivery times, and improve service efficiency. Location access may be based on user permission and device settings.

2.1.4. Device and Usage Information

The Company collects device and usage information such as IP address, device type, operating system, browser type, and interaction data. This information helps improve platform performance, security, and user experience.

2.2. Methods of Collection

2.2.1. Information You Provide

Information is collected directly when Users register, place food orders, make payments, contact customer support, or interact with the platform.

2.2.2. Information Collected Automatically

The Company uses cookies and similar technologies to collect information automatically as Users interact with the platform, enabling service optimization and analytics.

2.2.3. Information From Third Parties

Information may be received from restaurant partners, payment processors, and service providers strictly for order fulfillment, payment processing, fraud prevention, and service improvement.

3. USE OF INFORMATION

3.1. Providing Restaurant Services

Personal information is used to facilitate food ordering, delivery and pickup services, restaurant discovery, order tracking, and communication between Users and restaurant partners.

3.2. Payment Processing

Payment information is used to process transactions securely and efficiently. The Company follows industry-standard security practices and applicable financial regulations.

3.3. Customer Support

Information is used to respond to inquiries, resolve disputes, manage refunds where applicable, and improve customer service quality.

3.4. Marketing and Communications

With User consent, the Company may send promotional communications related to restaurant offers, updates, and new features. Users may opt out of marketing messages at any time in compliance with 10DLC and applicable regulations. Transactional communications remain unaffected.

3.5. Improvement of Services

Usage data and feedback are analyzed to improve platform features, enhance restaurant listings, optimize delivery experiences, and develop new functionalities.

3.6. Legal Obligations

Information may be used to comply with legal requirements, enforce platform terms, prevent fraud, protect users, and respond to lawful requests by authorities.

4. INFORMATION SHARING AND DISCLOSURE

4.1. With Service Providers

Information may be shared with trusted service providers such as payment processors, hosting services, analytics providers, and customer support vendors strictly for service delivery purposes and under confidentiality obligations.

4.2. For Legal Reasons

Information may be disclosed when required by law, court order, or to protect the rights, safety, and security of the Company, Users, or the public.

4.3. Business Transfers

In the event of a merger, acquisition, or sale of assets, User information may be transferred as part of the transaction, subject to applicable privacy laws and notice requirements.

4.4. With Your Consent

Personal information may be shared with third parties when explicit User consent is provided. Consent may be withdrawn at any time.

5. DATA RETENTION AND SECURITY

5.1. Retention Period

Personal information is retained only as long as necessary to provide restaurant services, comply with legal obligations, resolve disputes, and enforce agreements.

5.2. Security Measures

The Company implements appropriate technical and organizational safeguards including encryption, access controls, and secure infrastructure to protect personal information.

5.3. Breach Notification

In the event of a data breach, affected Users and authorities will be notified in accordance with applicable data protection laws.

6. YOUR RIGHTS AND CHOICES

Users may request access, correction, deletion, portability, or restriction of their personal data, withdraw consent, and opt out of marketing communications, subject to applicable laws.

7. COOKIES AND TRACKING TECHNOLOGIES

Cookies are used to improve functionality, analyze usage, and personalize experiences. Users may manage cookie preferences through browser settings.

8. INTERNATIONAL DATA TRANSFER

Personal information may be transferred internationally using lawful mechanisms such as Standard Contractual Clauses and appropriate safeguards.

9. CHILDREN'S PRIVACY

The restaurant platform is not intended for children under thirteen (13). The Company does not knowingly collect personal information from children.

10. LINKS TO OTHER SITES

The platform may contain links to third-party websites. The Company is not responsible for their privacy practices.

11. COMPLIANCE WITH GLOBAL REGULATIONS

POTOLO complies with GDPR, CCPA, and other applicable data protection laws and supports Users' statutory rights.

12. CONTACT INFORMATION

Email: contact@potolo.com

Address: Suite 325 100 Matawan Road, Matawan, NJ 07747

13. POLICY UPDATES

This Policy may be updated periodically. Continued use of the services constitutes acceptance of the updated Policy.