PRIVACY POLICY
1.1. 1. General Provisions
1.2. This Privacy Policy outlines the rules for the collection, processing, storage, transfer, and protection of personal data during the use of the Services provided through the "Plan and Eat" mobile application and related web interfaces (collectively, the "Platform" or "Plan and Eat").
1.3. This Privacy Policy has been prepared in accordance with the Law of the Republic of Azerbaijan "On Personal Data" and other applicable normative legal acts, and is applied in conjunction with the "Terms of Use" ("Terms").
1.4. The term "Services" and other capitalized terms used in this Privacy Policy shall have the meanings ascribed to them in the Terms. In the event of any conflict between this Privacy Policy and the Terms, the provisions of this Privacy Policy shall govern regarding the processing and privacy of personal data, while the Terms shall prevail on other matters.
1.5. “Plan and Eat” LLC (TIN: 1704113041; legal address: AZ1003, Baku city, Sabail district, Neftchi Gurban Abbasov Street, building 5, apartment 5) (hereinafter referred to as the “Company”, “we”, “our”) ensures the protection of personal data and is considered the responsible party under this Policy. This Privacy Policy applies to the personal data processed by the Company within the scope of the Platform.
1.6. This Privacy Policy applies to all Users of the Platform. The use of the Platform by Users indicates that they are familiar with this Privacy Policy and consent to the processing of their personal data in the manner specified herein.
2. About Us
2.1. We are a digital food service aggregator that enables Users (including employees of Corporate Subscribers) to pre-select weekly or monthly meal plans according to their individual dietary, calorie, and nutritional needs through the Platform. Through the Platform, Users can input their individual physical metrics (age, weight, height, etc.) to calculate calorie requirements, mark their favorite dishes ("favorites") to receive personalized menu recommendations, and arrange direct delivery of these meals by partner Providers (kitchens) to designated addresses.
2.2. The Platform does not act as a payment service provider. Cashless payments are executed through the infrastructure of respective Payment Service Providers. The Company does not receive, store, or distribute funds. The Company only provides a technical interface to initiate payment transactions and ensures the technical conditions for the registration and display of payment status on the Platform.
3. Consent to the Privacy Policy
3.1. By accepting this Privacy Policy, Users provide their explicit and informed consent to the collection, processing, and storage of their personal data during the use of the Platform. This consent also covers the use of data for the purpose of providing the Services correctly and effectively. Consent is expressed through the completion of registration on the Platform, OTP verification, accessing the Platform, and/or the actual use of the Services.
3.2. In order to fulfill our legal obligations and ensure the quality of service, we may use personal data under the following circumstances:Platformanın idarə olunması və İstifadəçilərə təqdim edilən xidmətlərin fasiləsiz və funksional şəkildə işləməsinin təmin edilməsi;
3.2.1. Conducting statistical research and analytical assessments to improve the service and enhance user experience, as well as preparing anonymized statistical data to analyze user behavior;
3.2.2. The necessity of obtaining data for the purpose of user identification and security;
3.2.3. Establishing communication with the user (via email, SMS, "pop-up" and "push" notifications, etc.);
3.2.4. To ensure responses to Requests, feedback, complaints, and other submissions made by Users;
3.2.5. To provide responses to any applications, requests, feedback, complaints, or other submissions submitted by you or on your behalf in your capacity as a User;
3.2.6. To disclose information in cases prescribed by applicable law or upon the request of the relevant public authorities.
3.3. Users acknowledge and agree that the Company may contact them via email, SMS, push notifications, and telephone calls for the purpose of delivering important updates relating to their account and the Platform, including Notifications, security alerts, and service-related communications.
3.4. This Privacy Policy applies solely to the information collected by us. It governs the processing of information carried out by the Company within the scope of the Platform. Information processed independently by payment service providers and Third-Party Service Providers shall be subject to their respective privacy policies. Users are responsible for ensuring the accuracy of the personal data they provide. We shall not be liable for any services provided, or that cannot be provided, due to inaccurate or incomplete information supplied by Users. Furthermore, the accuracy and updating of information transmitted to the Platform by the Governing Authority shall remain the responsibility of the Governing Authority.
3.5. Users may withdraw their consent at any time where permitted under applicable law. The withdrawal of consent shall apply only to future processing activities and shall not automatically invalidate any processing carried out prior to such withdrawal. However, withdrawal of consent may limit or prevent the provision of certain Services (including, without limitation, account management, Notifications, Requests, and the display of payment statuses).
3.6. Data shall be retained for as long as necessary to fulfil the purposes set out in this Privacy Policy. As provided under the Terms, the Company may retain Audit Logs and related information for up to five (5) years, where necessary, for the purposes of dispute investigation, security, and compliance with legal obligations. Retention periods may be extended or shortened where required by applicable law or upon the request of competent authorities.
3.7. Personal data collected shall be retained only for the period necessary to provide our Services and to fulfil the purposes specified herein.
3.8. By accepting this Privacy Policy, Users confirm that, in accordance with the Law of the Republic of Azerbaijan on Personal Data, they provide their explicit and informed consent to the collection, processing, storage, and, where required by applicable law, transfer of their personal data to third parties for the purposes specified herein. Users further acknowledge that they have the right, where permitted under applicable law, to withdraw their consent and to obtain additional information regarding the processing of their personal data.
4. Scope of the Privacy Policy
4.1. Registration and Account Information – First name, last name, telephone number, email address (where provided), and date of birth (where provided).
4.2. Identity Document Information – The FIN code and serial number of the identity card.
4.3. Corporate Subscription and Delivery Information – For corporate Users, the name of the company they work for, its registered or actual business address, and the specific office address to which meals are to be delivered.
4.4. Personal Physical Characteristics and Nutritional Information – For the purpose of providing artificial intelligence (AI)-based nutrition recommendations and calorie calculations, the User's age, height, weight, sex, individual dietary preferences, favourite meals, information regarding allergens and food sensitivities, and dietary restrictions.
4.5. Other Voluntarily Provided Information – Any other information voluntarily provided by the User when contacting us, communicating with customer support, or participating in surveys, including messages sent to customer support and their content, requests and suggestions, feedback and complaints, as well as information provided in the course of participating in surveys.
5. Sources of Information
5.1. The Company obtains personal data from the following sources:
· Information directly provided by Users (including registration, account settings, identity document information, Requests, etc.);
· Information provided by Corporate Subscribers;
·
Technical data received from payment service providers and/or
through technical integrations (e.g., transaction status/identifier relating to
the execution of cashless payments).
6. Purposes of Processing
The Company processes personal data solely in accordance with legal
requirements and for the purpose of providing the Platform’s services in a
complete, secure, and high-quality manner:
6.1. Service Provision and Account Management: Registration of the User on the Platform, activation and management of the User profile through OTP (one-time password) verification.
6.2. Creation of Personalized Menus: Preparation of weekly or monthly personalized dietary plans (menus) and provision of relevant recommendations based on the User’s favourite meals.
6.3. AI (Artificial Intelligence) Calculations and Calorie Determination: Calculation of caloric and nutritional needs through a digital assistant based on the User’s personal physical characteristics (weight, height, age, etc.).
6.4. Logistics and Delivery Arrangement: Determination of addresses and offices of corporate subscribers and ensuring timely and accurate delivery of meals via courier service.
6.5. Health and Allergen Control: Processing of information regarding the User’s allergens and dietary restrictions to ensure the selection of safe menu alternatives for the User’s health.
6.6. Technical Management of Payment Operations: Ensuring the proper reflection of subscription payment statuses on the Platform and providing technical support for initiating payment processes.
6.7. Support and Request Management: Prompt handling and response to User inquiries, feedback, complaints, and requests.
6.8. Security, Fraud
Prevention and Legal Requirements
● prevention of unauthorized access and investigation of security incidents;
● maintaining audit logs;
● provision of information as required by applicable law or upon request of
competent state authorities;
● investigation and implementation of appropriate measures to prevent money
laundering, terrorist financing, tax evasion, and other unlawful activities as
provided under the Terms.
6.9. Analytics and
Improvement
● improvement of services and enhancement of user experience;
● preparation of anonymized/statistical analytical reports;
● diagnosis of technical issues.
6.10.
Execution of Cashless Payments on the Platform
Cashless payments on the Platform are carried out through the infrastructure of
a payment service provider. The Company does not act as a payment service
provider. The Company does not collect or store sensitive payment data.
Depending on the integration model, the entry of card details may be performed
within the environment of the payment service provider or through its technical
solutions. In such cases, the Company processes only the technical identifiers
and payment status necessary for the execution of the payment.
7.
Disclosure
and Sharing of Information
The Company may disclose personal data only to the extent necessary for the
purposes set out in this Privacy Policy and in the following cases:
● To Suppliers (Catering Providers): In order to ensure that meal orders are prepared in accordance with individual dietary programs and, in particular, allergen restrictions, only necessary information such as allergen, calorie, and dietary preferences is shared, without disclosing personally identifiable information such as the User’s name, surname, or telephone number.
● To Courier and Logistics Partners: For the timely delivery of ordered meal packages to designated addresses (including corporate offices), the User’s name, surname, contact telephone number, and delivery address are shared.
● To Payment Service Providers: For the secure execution of cashless payments, confirmation of subscription packages, and updating payment status on the Platform, only the technical identifiers necessary for the execution of the transaction are shared.
● To System and IT Infrastructure Providers: For ensuring the uninterrupted operation of the Platform, including cloud storage, hosting services, and the secure implementation of artificial intelligence (AI) technologies, data may be shared with partner providers strictly under confidentiality obligations and contractual agreements.
● To Competent State Authorities: Where required under the legislation of the Republic of Azerbaijan, upon receipt of official and legally grounded requests, data may be disclosed to relevant state authorities.
8. Processing of Third-Party Data
8.1. In cases where
third-party data is provided during the use of the Platform, such data shall be
collected in accordance with the conditions set out below. Before disclosing
any such third-party data, Users must:
● inform the relevant third parties in advance that their data will be
processed through the Platform;
● obtain prior consent from the individuals whose data is being disclosed.
8.2.By providing
third-party data, Users represent and warrant that:
● the information provided is complete, accurate, and correct;
● they have valid authorization to act on behalf of such individuals and to
collect, use, disclose, and process their data within the scope of the purposes
stated above and to submit such data to the Platform.
9. Deletion of Collected Data
9.1. Personal data shall be stored only for the period necessary to achieve the purposes specified in this Privacy Policy, unless a longer retention period is required by law.
9.2. After using the Services, Users have the right to request the deletion of their personal data. For this purpose, Users must contact the Company through the communication channels specified in this Policy (in particular, via email). Upon such request, in accordance with Article 9.4 of the Law of the Republic of Azerbaijan “On Personal Data,” personal data relating to Users may be deleted from our servers.
9.3. Certain data may not be deleted upon request where legal obligations require continued retention, and where the necessity for such storage remains valid (e.g., audit logs, dispute-related materials, security incident records, etc.).
9.4. In the event of any suspicion or defect regarding the security of personal data, the Company shall take all reasonable preventive and necessary measures to ensure the protection of such data.
10. Changes
10.1. The Company may periodically make changes to this Privacy Policy. The updated version of the Privacy Policy shall enter into force upon its publication on the Platform. Users may be informed of significant changes via in-Platform notifications and/or other communication channels.
10.2. Continued use of the Platform after the publication of the updated Privacy Policy shall constitute acceptance of such changes. If Users do not agree with the changes, they must stop using the Platform and delete their account.
10.3. The legal consequences of account deletion are governed by the Terms.
11. Final Provisions
11.1. The Company is governed by the applicable legislation of the Republic of Azerbaijan in the operation of the Platform.
11.2. In case of any questions, complaints, or requests for additional information regarding this Privacy Policy, Users may contact the Company through the following means:
Email: info@planandeat.az
Postal address: AZ1000
Telephone: +994
10 265 61 34