FoodFil — Privacy Policy

1. Who we are

FoodFil is an off-peak restaurant dining and table booking platform operated by SETTISFY GLOBAL (Registration No. 202503269187) ("FoodFil", "we", "us", or "our"), incorporated in Malaysia.

This Privacy Policy applies to our website (https://foodfil.my/), web application, waitlist registrations, diner bookings, and communications with diners and restaurant partners across Malaysia.

Business address: Perak, Malaysia

We operate as the data controller responsible for your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. What personal data we collect

We collect personal data only to the minimum extent necessary to operate the platform and fulfill bookings:

• Contact Information: Name, email address, mobile/WhatsApp phone number.
• Booking & Reservation Details: Restaurant selected, date and time of reservation, discount rate, party size, seating preferences, and arrival confirmation status.
• Restaurant Partner Details: Restaurant business name, authorized representative name, contact telephone, email, outlet locations in Kuala Lumpur, Selangor, or Penang, and off-peak discount scheduling.
• Device & Usage Data: IP address, device type, browser information, referral sources, and page interaction timestamps.
• Communications Data: Inquiries, feedback, referral submissions, or support messages submitted via email, WhatsApp, or web forms.

Important Note on Payments: FoodFil is a booking platform. You pay the restaurant directly at the venue. We do not collect or store your payment card numbers, CVVs, or bank login credentials.

3. Why we use your personal data

We process your personal data for legitimate business purposes under Malaysian law, specifically:

1. To confirm and coordinate your table booking and apply your verified off-peak discount at partner restaurants.
2. To manage your waitlist position and send status updates or launch announcements.
3. To verify restaurant partner applications, coordinate off-peak capacity, and facilitate partnership onboarding.
4. To track and reward verified restaurant referrals.
5. To deliver customer support, assist with booking modifications, and resolve inquiries.
6. To safeguard platform security, prevent fraudulent reservations, and ensure service reliability.
7. To comply with statutory legal, accounting, and regulatory obligations in Malaysia.

4. Who we share it with

We do not sell, rent, or trade your personal data. We only share information with:

• The Restaurant You Booked: We share your name, booking time, party size, discount tier, and contact phone number so the restaurant can hold your table and apply the discount.
• Service Providers: Cloud database, hosting, email, and messaging infrastructure providers that assist in running our application under strict confidentiality agreements.
• Legal & Regulatory Authorities: Where legally mandated by applicable law, court order, or governmental authority.

5. How long we keep it

We retain personal data only for as long as necessary to fulfill the purposes set out in this Privacy Policy, provide ongoing services, and satisfy statutory record-keeping requirements.

When data is no longer needed, it is securely destroyed, deleted, or permanently anonymized in compliance with the PDPA Retention Principle.

6. How we keep it secure

We employ industry-standard technical and operational safeguards to protect your personal data from loss, unauthorized access, misuse, or alteration:

• HTTPS / TLS encryption for all data in transit across our website and application.
• Restricted administrative access controls and role-based permissions.
• Continuous system monitoring and regular security reviews of cloud storage environments.

7. Marketing communications

We may send you updates regarding new restaurant additions, exclusive discount promotions, or platform features if you opted in or joined our waitlist.

You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails, replying "STOP" to messages, or contacting us at info.foodfil@gmail.com.

8. Cookies and similar technologies

We use cookies and similar analytical tools to enhance navigation, analyze site usage, and maintain user preferences.

You can manage or disable cookie preferences through your web browser settings. Disabling essential cookies may impact certain interactive features.

9. Your rights

Under the Personal Data Protection Act 2010 of Malaysia, you have the following statutory rights regarding your personal data:

• Access: Request access to and obtain a copy of your personal data held by us.
• Correction: Request rectification of inaccurate, incomplete, or out-of-date information.
• Data Portability / Export: Request a structured copy of your personal data.
• Deletion / Erasure: Request the deletion of your account and personal data where no longer legally required.
• Withdraw Consent: Withdraw your consent for data processing or direct marketing at any time.

To exercise any of these rights, please email us at info.foodfil@gmail.com. We will respond within the statutory timeframe (21 days).

10. Minors

FoodFil services and dining reservations are intended for individuals aged 18 and above. We do not knowingly collect personal data from children or minors under 18 years of age without parental or guardian consent.

If you believe that a minor has provided us with personal data without proper consent, please contact us immediately to have such information promptly removed.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our operational model, new features, or legislative requirements.

Any amendments will be posted on this page with an updated "Last updated" date. Continued use of FoodFil following any modifications signifies your acknowledgement of the updated terms.

12. How to contact us or complain

If you have questions, feedback, requests, or complaints regarding how we handle your personal data, please contact our Data Protection team: