Privacy Policy

1. Introduction

FAT CAFE LIMITED ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our SaaS services and website.

2. Information We Collect

Personal Information

• Name, email address, and contact details
• Company information and job title
• Billing and payment information
• Communications with our support team

Technical Information

• IP addresses and browser information
• Usage data and analytics
• Cookies and similar technologies
• Device and connection information

3. How We Use Your Information

• Service Provision: To provide and maintain our SaaS services
• Communication: To respond to inquiries and provide customer support
• Billing: To process payments and manage subscriptions
• Improvement: To analyze usage and improve our services
• Legal Compliance: To comply with legal obligations
• Marketing: To send relevant updates and promotional content (with consent)

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract Performance: To fulfill our service obligations
• Legitimate Interest: For business operations and service improvement
• Consent: For marketing communications and cookies
• Legal Obligation: To comply with UK and EU regulations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors who assist with our operations
• Payment Processors: To handle billing and payments securely
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale

6. Data Security

We implement industry-standard security measures including:

• SSL encryption for data transmission
• Secure cloud infrastructure with regular backups
• Access controls and authentication measures
• Regular security audits and monitoring
• Staff training on data protection

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for marketing communications

To exercise these rights, contact us at [email protected]

8. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Typically:

• Active Accounts: For the duration of your subscription
• Inactive Accounts: Up to 3 years after closure
• Financial Records: 7 years for tax and accounting purposes
• Marketing Data: Until consent is withdrawn

9. International Transfers

Your data may be processed outside the UK/EU by our service providers. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by relevant authorities
• Other approved transfer mechanisms

10. Cookies and Tracking

We use cookies and similar technologies for functionality, analytics, and marketing. See our Cookie Policy for detailed information about our cookie usage and your choices.

11. Changes to This Policy

We may update this privacy policy periodically. We will notify you of material changes via email or website notice. Your continued use of our services constitutes acceptance of the updated policy.

12. Contact Us

For questions about this privacy policy or to exercise your rights, contact us:

Complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK if you believe we have not handled your personal data appropriately.