Who we are
Feazio Technologies (“Feazio”, “we”, “us”) builds and runs Feazio, a restaurant and hotel operating system: point of sale, kitchen screens, ordering, stock, accounting, staff management, the staff app and the clock-in kiosk. We sell in India, the United Kingdom, the United Arab Emirates and Thailand.
This policy explains what personal information we handle through feazio.com and the Feazio platform, why, and the choices and rights you have. Our offices and how to reach us are listed at the end.
Two roles: our own data, and data we handle for restaurants
We decide how your information is used (we are the “controller”, or “data fiduciary” in India) when you visit our website, ask for a demo, sign up, or are the person who holds a restaurant’s Feazio account.
When a restaurant uses Feazio for its guests and staff, the restaurant decides what it records and why. For that information the restaurant is the controller and Feazio processes it on the restaurant’s behalf and on its instructions. If you are a guest or an employee of a restaurant, please contact the restaurant first; we will help it answer you.
Information we collect on our website
- Demo requests: your name, business name, email, phone, type of venue, number of outlets and any message you write. We keep each request and may pass it to our sales tool so the team for your country can contact you.
- WhatsApp: if you press a WhatsApp button, WhatsApp opens with a message already typed. Nothing is sent until you send it, and WhatsApp handles it under its own privacy policy.
- Your country and language: a small cookie (fz_locale) remembers the country and language you chose, for a year. We read your country from your connection, or your browser’s language, to show the right prices; we do not store it.
- Technical data: our servers see your IP address and browser details to deliver pages and to stop abuse (for example, limiting repeated demo requests). We do not use advertising or cross-site tracking cookies.
Information about restaurant account holders
- The owner’s and administrators’ names, email addresses, phone numbers and sign-in details. Passwords are stored only as one-way hashes.
- The restaurant’s business details: name, addresses, tax registration numbers, bank details for invoices, the country it trades in, and its subscription and billing history.
- Support conversations and, when you ask for help, a support session on your account so our team can see what you see.
Information restaurants keep in Feazio
Depending on the parts a restaurant uses, Feazio holds the following on the restaurant’s behalf:
- Guests: orders and bills, and, where given, a name, phone number, email, delivery address, table bookings, feedback and marketing choices. Guests who order through a delivery app are handled under that app’s policy as well.
- Staff records: name, contact details, role, outlet, pay, bank details, contracts and e-signatures (with the signer’s IP address and device, as the audit trail), leave, rota, timecards and payslips.
- Staff papers: identity and right-to-work papers such as passports, visas, work permits, labour cards and national ID numbers (Aadhaar numbers are shown masked), with their scans. Scans are kept in private storage and opened only by people the restaurant allows to manage staff.
- Clock-in: the time of every punch and, if the restaurant switches them on, a small photo taken at the kiosk (kept for 90 days, then deleted) and the location of a self clock-in on a phone, used to check the person is on site.
- Face recognition: if a restaurant uses the face kiosk, each enrolled person’s face is stored as a face signature (a set of 128 numbers) used to recognise them at the kiosk. This is biometric information. The restaurant must tell its staff and obtain any consent the law requires; it can use PIN clock-in instead.
- Workplace tools: team chat, announcements, surveys (anonymous surveys keep answers apart from who answered), daily checklists and their photos.
How we use information
- To provide Feazio: run the restaurant’s system, keep its data safe and available, and support its users.
- To answer demo requests and enquiries, set up accounts and send service messages (for example, billing and security notices).
- To keep Feazio secure: detect abuse, protect accounts and investigate problems.
- To improve Feazio, using information about how features are used. We do not sell personal information, and we do not use restaurants’ guest or staff data for our own marketing.
- To meet legal obligations, such as tax and accounting records, and to establish or defend legal claims.
Our reasons (legal bases)
For our own data we rely on: performing our contract with the restaurant; our legitimate interests in running, securing and improving our service and in answering business enquiries; legal obligations; and your consent where the law requires it (for example, marketing messages). For data we process for restaurants, the restaurant is responsible for its own legal basis.
International transfers
We and our providers may process information outside the country it was collected in. When we do, we use the safeguards the law of that country requires, such as contractual clauses approved for that purpose.
How we keep it safe
- Every restaurant has its own separate database.
- Information is encrypted in transit. Passwords are stored only as hashes; staff PINs are hashed, and the floor-staff PINs a manager may reveal are kept encrypted.
- Staff papers, punch photos and contract documents are kept in private storage, never on public addresses.
- Access inside a restaurant follows its roles and permissions; our team reaches a restaurant’s data only to support it.
How long we keep it
We keep restaurant data while the restaurant uses Feazio and delete it when the restaurant’s account is closed and its data deleted, except where we must keep records longer by law (for example, our own invoices). Punch photos are deleted after 90 days. Demo requests are kept for up to two years unless you become a customer or ask us to delete them sooner.
Your rights
Depending on where you live you can ask to see, correct, delete or receive a copy of your information, object to or restrict some uses, and withdraw consent you gave. Email us at the address below; we may need to confirm your identity. If your information is held by a restaurant, we will pass your request to it and help it answer.
Children
Feazio is a business tool and is not directed at children. Restaurants that employ young workers are responsible for handling their records lawfully.
Changes to this policy
We will post any change here with a new date, and tell account holders directly about changes that matter.
Your country’s law
Thailand
Personal Data Protection Act B.E. 2562 (2019) (PDPA)
You can ask to access and obtain a copy of your data, have it transferred, object to or restrict its use, have it corrected or deleted, and withdraw consent. Biometric data such as face signatures is sensitive data and needs explicit consent.
You can complain to the Personal Data Protection Committee (PDPC).
India
Digital Personal Data Protection Act, 2023
For our own data Feazio is a data fiduciary. You can ask for a summary of your data, its correction and erasure, nominate someone to act for you, and raise a grievance with us. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Where we rely on consent, you can withdraw it as easily as you gave it.
Grievances: write to our privacy team at the address below; we answer within the time the Act and its rules allow.
United Kingdom
UK GDPR and the Data Protection Act 2018
You have the rights of access, rectification, erasure, restriction, portability and objection, and the right not to be subject to decisions made only by automated means that significantly affect you. Face signatures are special category (biometric) data: a restaurant that uses the face kiosk needs a lawful condition for it, and staff can be offered PIN clock-in instead.
You can complain to the Information Commissioner’s Office (ico.org.uk), though we would like the chance to put things right first.
United Arab Emirates
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
You can ask to access, correct, erase and restrict the processing of your data, to receive it, and to object to processing. Businesses in the DIFC and ADGM free zones are covered by those zones’ own data protection laws, which give similar rights.
You can complain to the UAE Data Office, or the DIFC or ADGM data protection authority where it applies.
Contact us
For anything about privacy, or to exercise your rights, email [email protected] or write to the office for your country:
Feazio India
250 Officers Campus, Janak Marg Sirsi Road, Jhotwara, Khatipura, Jaipur, Rajasthan, 302012
[email protected]Feazio United Kingdom
Eleven Brindley Place, 2 Brunswick Square, Birmingham, England, B1 2LP
[email protected]Using the Feazio Attendance mobile app? See its own app privacy policy.