Privacy Policy

Introduction

Welcome to Laravel, a comprehensive school meal management system. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Personal Information

• Account Information: Name, email address, phone number, and password
• Student Information: Student names, class information, dietary restrictions, and allergies
• Parent/Guardian Information: Contact details and relationship to students
• Payment Information: Billing address and payment transaction details (payment card information is processed by our secure payment processor and not stored on our servers)
• School Information: School name, address, and administrative contact details
• Supplier Information: Business details, food offerings, and contact information

Usage Information

• Log data including IP address, browser type, and access times
• Device information and operating system details
• Usage patterns and feature interactions
• Order history and meal preferences
• Communication records within the platform

How We Use Your Information

• Service Provision: To provide and maintain our meal management system
• Order Processing: To process meal orders and manage payments
• Communication: To send service-related notifications and updates
• Account Management: To manage user accounts and provide customer support
• Safety & Security: To ensure food safety compliance and platform security
• Analytics: To improve our service and user experience
• Legal Compliance: To comply with applicable laws and regulations

Information Sharing

We may share your information in the following circumstances:

• With Schools: Student meal orders and dietary information are shared with respective schools
• With Suppliers: Order details necessary for meal preparation and delivery
• Service Providers: Third-party vendors who assist in service delivery (payment processing, hosting, analytics)
• Legal Requirements: When required by law, court order, or government request
• Safety Concerns: To protect the rights, property, or safety of our users

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data transmission is encrypted using SSL/TLS protocols
• Access Controls: Strict access controls and authentication measures
• Regular Audits: Security assessments and vulnerability testing
• Staff Training: Regular privacy and security training for our team
• Incident Response: Procedures for handling potential security breaches

Account Deletion and Data Retention

Your Right to Delete Your Account

You have the right to request deletion of your account and associated personal data at any time. We provide multiple ways to delete your account:

How to Delete Your Account

What Happens When You Delete Your Account

Data Retention Periods

• Active Account Data: Retained while your account is active
• Transaction Records: Anonymized and retained for 30 days after account deletion
• Financial Records: Retained for 7 years as required by law
• Legal Hold Data: Retained as required by legal obligations
• Backup Data: Deleted from backups within 90 days

Exceptions to Account Deletion

In certain circumstances, we may be unable to immediately delete all your data:

• Outstanding financial obligations or disputes
• Active legal proceedings or investigations
• Regulatory or legal retention requirements
• Fraud prevention and security purposes

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of data processing
• Objection: Object to certain types of data processing
• Withdrawal: Withdraw consent for data processing

Children's Privacy

Our service is designed for use by schools, parents, and authorized personnel. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.