Privacy
Privacy Notice
How Dinivoo collects, uses, protects and shares personal data.
Effective date: 27 September 2026
1. Scope and who we are
This Privacy Notice explains how Dinivoo, operated by SHAYDX LLC (“Dinivoo”, “we”, “us” or “our”), collects, uses, shares and protects personal data when you visit our website, create an account, subscribe to or use our restaurant platform, contact support, or interact with a Dinivoo-powered ordering experience.
2. Personal data we collect
- Account data: name, business name, email, phone number, role and login credentials.
- Business data: restaurant locations, menus, staff records, suppliers and operational settings.
- Transaction data: orders, invoices, subscription status, payment references and tax records.
- Customer data: names, contact details, order history, preferences and loyalty activity submitted through a restaurant.
- Technical data: IP address, device, browser, logs, cookies and usage events.
- Communications: support requests, feedback and correspondence with us.
3. How and why we use personal data
We process personal data to create and secure accounts; deliver orders and platform features; process and verify subscriptions; provide support; send service notices; prevent fraud and abuse; monitor reliability; improve the Services; comply with legal, tax and accounting obligations; and send marketing where permitted. Depending on the context, processing is based on performance of a contract, consent, compliance with law, or our legitimate interests in operating and protecting the Services.
4. Restaurant customers
When a restaurant uses Dinivoo to manage its own customers, the restaurant determines why and how that customer data is used and Dinivoo processes it on the restaurant’s instructions. Requests concerning a restaurant’s use of customer data should normally be directed to that restaurant. We will support the restaurant in responding where required.
5. Payments
Subscription payments are processed by Stripe. Dinivoo receives identifiers, payment status, billing details and limited card information such as brand and last four digits, but does not receive or store the complete card number or security code. Stripe processes payment data under its own privacy terms and security obligations.
6. When we share data
We may share data with vetted hosting, payment, communications, analytics, security and support providers that process it for us; with integrations you enable; within a restaurant’s authorised team; with professional advisers; in connection with a business reorganisation; or with authorities when legally required. We do not sell personal data. Service providers are limited to data needed for their role and are subject to contractual safeguards.
7. International transfers
Some providers may process data outside the UAE. Where personal data is transferred internationally, we use appropriate safeguards required by applicable data protection law, considering the destination, provider and nature of the data.
8. Retention
We retain personal data only for as long as reasonably needed for the purposes described here, including while an account is active and afterward where required for security, dispute resolution, tax, accounting, backup or legal obligations. Retention periods vary by data type and legal requirement. Data is deleted or anonymised when it is no longer needed, subject to secure backup cycles.
9. Security
We use administrative, technical and organisational safeguards designed to protect personal data, including access controls, encryption in transit, monitoring and restricted staff access. No internet service is completely secure, so you must also protect credentials and notify us promptly of suspected unauthorised use.
10. Your privacy rights
Subject to UAE Federal Decree-Law No. 45 of 2021 and other applicable law, you may have rights to obtain information about processing, access or receive a copy of your data, correct inaccurate data, request deletion, restrict or object to processing, withdraw consent, and request transfer of data where applicable. Some rights are subject to legal exceptions. We may verify your identity before acting on a request.
11. Cookies and communications
We use essential cookies and similar technologies for login, security, preferences and core functionality. We may use measurement technologies to understand website and product performance where permitted. You can control non-essential cookies through available consent controls or browser settings. You may opt out of marketing emails, but we will still send necessary account, billing and security messages.
12. Children, updates and contact
Dinivoo’s business Services are not directed to children and we do not knowingly create platform accounts for anyone under 18. We may update this Notice as our Services or legal obligations change. The effective date above shows the latest revision, and material changes will be communicated where appropriate.
To exercise a privacy right or ask a question, email hello@dinivoo.com.
