This Data Processing Agreement (DPA) applies when VenueChef processes personal data on behalf of a venue or other business customer. It supplements the VenueChef Terms of Service and Privacy Policy.
Roles
For data that a venue enters or collects through VenueChef — such as staff details, guest orders and reservations — the venue is the controller and VenueChef is the processor. For account and billing data of the venue itself, VenueChef is the controller.
What data is processed?
VenueChef processes staff identity and contact data, operational transaction data, and guest data submitted by the venue through QR ordering, reservations and feedback. The venue decides what data to enter and remains responsible for lawful collection.
Purpose and instructions
VenueChef processes data only to provide, secure and improve the services described in the Terms of Service, and in line with instructions given by the venue through normal use of the product. We do not use venue data for unrelated purposes.
Subprocessors
VenueChef uses the subprocessors listed at https://venuechef.com/subprocessors to host, authenticate, bill and support the service. We remain responsible for their compliance with this DPA.
Security measures
We apply technical and organisational measures including encryption in transit, access controls, row-level security, audit logging, two-factor authentication and staff training. A fuller security overview is at https://venuechef.com/security.
International transfers
Data is hosted by Supabase. We rely on appropriate safeguards, including standard contractual clauses where applicable, for any transfer outside the European Economic Area.
Confidentiality and personnel
VenueChef personnel who may access venue data are bound by confidentiality obligations and access is granted on a need-to-know basis.
Termination and return or deletion
On termination of the venue's account, VenueChef will delete or return venue data in accordance with the venue's instructions and applicable law, except where retention is required for legal, tax or regulatory reasons.
Contact
For DPA questions, including requests for a signed copy or an amendment, contact legal@venuechef.com.