FOXI ID Privacy Notice

1. Kontrollur tad-Data

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA

Email: support@foxi.food

Rappreżentant fl-UE (Artikolu 27 GDPR)

Euro business company Kft.
Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary
Numru tat-taxxa: HU28959364

2. Liema Data Niġbru

Meta toħloq u tuża kont FOXI ID, niġbru u nipproċessaw:

• Kredenzjali tal-kont — email address and password (stored as a cryptographic hash — we cannot read your password);
• Informazzjoni ta' kuntatt — name, phone number, and delivery address (provided by you to enable pre-filling across restaurants);
• Data ta' awtentikazzjoni — session tokens, login timestamps, IP address at login (for security and fraud prevention);
• Preferenzi tal-kont — preferenza ta' mili minn qabel bejn ir-ristoranti (mixgħul/mitfi), preferenza tal-lingwa.

Aħna MA niġbrux u MA nikkontrollawx:

• your order data (items ordered, order history, dietary preferences) — this is controlled by the restaurant;
• your payment information (card details are handled exclusively by the payment processor and the restaurant);
• ebda data minn ristoranti fejn ma għamiltx ordni.

3. Bażi Legali għall-Ipproċessar

Nipproċessaw id-data tal-FOXI ID tiegħek fuq il-bażijiet legali li ġejjin:

• Twettiq ta' kuntratt (Artikolu 6(1)(b) GDPR) — maintaining your FOXI ID account, authenticating you at the restaurant where you are placing an order, and storing your contact details for your convenience;
• Interess leġittimu (Artikolu 6(1)(f) GDPR) — pre-filling your contact data at restaurants where you have not previously ordered, to provide a seamless ordering experience. You may opt out of this at any time (see Section 6). Our legitimate interest has been balanced against your rights: only basic contact data is shared, no order history is disclosed, and pre-filling serves your convenience;
• Obbligu legali (Artikolu 6(1)(c) GDPR) — where required to comply with applicable laws (e.g., fraud prevention, responding to lawful requests from authorities).

4. Kif tinqasam id-data tiegħek

Your FOXI ID contact data (name, email, phone, delivery address) is shared with restaurants on the platform only when:

• tidħol bil-FOXI ID tiegħek fuq il-websajt tal-ordnijiet tar-ristoranti; u
• you have not opted out of cross-restaurant pre-filling (or you have previously ordered at that restaurant).

Each restaurant receives your contact data solely for the purpose of fulfilling your order. Restaurants do NOT have access to:

• l-istorja tal-ordnijiet tiegħek f'ristoranti oħra;
• il-preferenzi tiegħek jew informazzjoni dwar id-dieta f'ristoranti oħra;
• il-password tal-FOXI ID tiegħek jew data ta' awtentikazzjoni;
• lista ta' ristoranti oħra fejn għandek kont.

We do not sell your data. We do not use your data for marketing, profiling, or cross-restaurant analytics.

5. Proċessuri ta' partijiet terzi

We use the following third-party services to operate the FOXI ID infrastructure:

• DigitalOcean, LLC — cloud hosting (EU and USA data centers, Standard Contractual Clauses in place);
• Brevo (Sendinblue) — transactional emails such as password reset and account notifications (France/EU).

All third-party processors are contractually bound to process data only according to our instructions.

6. Id-drittijiet tiegħek

Skont fejn tgħix, għandek uħud mid-drittijiet li ġejjin jew kollha kemm huma fir-rigward tad-data FOXI ID tiegħek skont il-liġijiet tal-protezzjoni tad-data applikabbli għalik (bħall-GDPR fiż-ŻEE/ir-Renju Unit, il-liġijiet statali tal-Istati Uniti bħas-CCPA/CPRA, l-LGPD tal-Brażil jew liġijiet lokali ekwivalenti):

• Aċċess — titlob kopja tad-data personali li nżommu dwarek;
• Rettifika — update or correct your contact information at any time through your account settings, or by contacting us;
• Tħassir — delete your FOXI ID account (see FOXI ID Terms of Use, Section 6). This removes your login credentials and shared contact data. Order history at individual restaurants must be requested from the restaurant directly;
• Portabbiltà tad-data — receive your FOXI ID data in a structured, machine-readable format (JSON);
• Restrizzjoni tal-ipproċessar — request that we restrict processing of your data in certain circumstances;
• Oġġezzjoni — object to processing based on legitimate interest (cross-restaurant pre-filling). If you object, we will cease sharing your contact data with restaurants where you have not previously ordered;
• Irrinunzja għall-mili minn qabel bejn ir-ristoranti — you may disable automatic sharing of your contact data with new restaurants at any time through your FOXI ID account settings. This does not affect your ability to log in.

Biex teżerċita xi waħda minn dawn id-drittijiet, ikkuntattjana fuq: support@foxi.food. Nirrispondu fi żmien 30 jum.

Tista' wkoll tikkuntattja r-rappreżentant tagħna fl-UE: Euro business company Kft., Rómer Flóris utca 8/B. 3. em., Budapest 1024, Hungary.

You have the right to lodge a complaint with a supervisory authority in your country of residence. See the GDPR page on the FoxiFood website for a list of relevant authorities.

7. Cookies

FOXI ID juża l-cookies li ġejjin:

• Cookie tas-sessjoni (.foxi.food) — maintains your authenticated session at the restaurant where you are placing an order. Strictly necessary — no consent required;
• Awtentikazzjoni bejn ir-ristoranti — keeps you logged in when you visit other restaurants on the platform. Functional cookie — presented through the restaurant's cookie consent mechanism. You may decline it; you will need to log in manually at each restaurant;
• SSO redirect (dominji personalizzati) — short-lived cookie for restaurants using their own domain. Strictly necessary for the login redirect — no consent required.

FOXI ID does not use any third-party cookies, advertising cookies, or cross-domain tracking.

8. Żamma tad-data

• Active accounts: data is retained for as long as you maintain your FOXI ID account;
• Account deletion: data is deleted within 30 days of your deletion request;
• Inactive accounts: accounts with no login activity for 36 months are automatically scheduled for deletion, with 30 days' prior notice to your registered email address;
• Security logs (IP address, login timestamps): retained for 12 months for fraud prevention, then deleted.

9. Trasferimenti internazzjonali tad-data

Elite Digital Services, LLC hija bbażata fl-Istati Uniti u sservi klijenti madwar id-dinja. Id-data FOXI ID tiegħek tista' tiġi ttrasferita lejn u pproċessata fl-Istati Uniti u f'pajjiżi oħra fejn joperaw is-subproċessuri tagħna. Fejn meħtieġ mil-liġi applikabbli, niżguraw salvagwardji xierqa għal dawn it-trasferimenti — għad-data soġġetta għall-GDPR, skont il-Kapitolu V tal-GDPR, inklużi l-Klawżoli Kuntrattwali Standard (SCC). L-infrastruttura tal-hosting tagħna (DigitalOcean) topera ċentri tad-data f'diversi reġjuni, inklużi ċentri tad-data fl-UE għall-utenti Ewropej.

10. Sigurtà tad-data

Nipproteġu d-data tal-FOXI ID tiegħek bi:

• kriptaġġ tad-data kollha waqt it-trażmissjoni (TLS/SSL);
• password hashing using industry-standard algorithms (we cannot read your password);
• kontrolli tal-aċċess u monitoraġġ;
• aġġornamenti tas-sigurtà regolari u evalwazzjonijiet tal-vulnerabbiltà.

11. Rekwiżit tal-età

FOXI ID accounts may only be created by individuals who are at least 16 years of age or have reached the age of digital consent in their jurisdiction. If we become aware that an account has been created by an individual below this age, we will delete the account and associated data promptly.

12. Fejn Issib Dan l-Avviż

Dan l-Avviż dwar il-Privatezza huwa dejjem aċċessibbli:

• on each restaurant's ordering website — in the footer or during FOXI ID registration;
• fuq il-websajt FoxiFood fis-sezzjoni Legali;
• fis-settings tal-kont FOXI ID tiegħek.

13. Bidliet f'dan l-avviż

We may update this Privacy Notice from time to time. Material changes will be notified via email to your registered FOXI ID address at least 30 days before they take effect.

14. Kuntatt

Għal mistoqsijiet relatati mal-privatezza dwar il-kont FOXI ID tiegħek, ikkuntattjana fuq: support@foxi.food

Elite Digital Services, LLC
1111B S Governors Ave #21653
Dover, DE 19904, USA