Privacy Policy

1. Data controller

DiniDine («DiniDine») is the controller of personal data collected on dinidine.com and in our demo, purchase and customer-support processes. Contact for privacy requests: info@dinidine.com · WhatsApp +1 (770) 615-9458.

This policy applies to visitors and customers in the United States and, where relevant, to individuals in Colombia (Law 1581 of 2012 and Decree 1377 of 2013), Mexico (Federal Law on Protection of Personal Data Held by Private Parties) and Canada (PIPEDA and CASL).

2. What we collect and why

• Demo request: restaurant name, your name, phone and, if you arrived from an ad or link, campaign source data (UTM). Purpose: to call or message you to prepare and arrange your demo.
• Purchase / activation: restaurant, name, email, phone and the order you chose. Purpose: to process your purchase, set up your account, send confirmations and provide service and support.
• Payment: processed by Helcim. We only receive payment status, transaction ID, amount and the last digits of the card. We never see or store the full number.
• Restaurant content: menu, prices, photos, logos and text you send us, to build your digital menu and materials.
• Communications: messages we exchange by WhatsApp, SMS, email or phone for service and support.
• Technical and security data: IP address, browser type and date/time when you submit forms, to prevent fraud and to keep proof of your acceptance (see section 6).

We do not ask for sensitive data (health, racial origin, sexual orientation, biometrics, etc.) or data about minors. Please do not send them.

We only ask for data needed for each purpose. If a field is optional we say so.

3. Legal basis and authorization

We process your data based on your prior, express and informed authorization (checkboxes you tick voluntarily), performance of the contract you request, our legal obligations (tax and accounting) and our legitimate interest in preventing fraud and protecting our rights. You may withdraw your authorization at any time, without affecting processing already carried out or legal retention duties.

4. Who we share data with

We do not sell your personal data or share it for third-party advertising. We share it with providers that help us operate, under their own confidentiality and security commitments:

• Netlify (hosting, forms and record storage).
• Helcim (payment processing).
• GoHighLevel (CRM and follow-up messaging).
• Google (spreadsheets and automations, fonts).
• Cloudinary (image upload and delivery).
• WhatsApp / Meta (messaging, when you write to us or we write to you there).

We may also disclose data if required by a competent authority or to defend legal rights.

5. International transfers

We operate from the United States and our providers may store data in the United States or other countries. If you live in Colombia, Mexico or Canada, by accepting this policy you expressly authorize that transfer and transmission, which we carry out with reasonable contractual and security safeguards.

6. Record of your acceptances

When you accept the Terms and this Policy we keep a record: date and time (UTC), IP address, browser, page and language, the version and exact text you saw, which boxes you ticked and your contact details. We do this so we can prove your authorization to you or to an authority (for example the SIC in Colombia). We keep it for the duration of the relationship plus 5 years.

7. How long we keep data

• Demo requests without purchase: up to 24 months from last contact.
• Customers: while the service lasts and the legal periods afterwards (payment and billing records: up to 7 years).
• Consent records: see section 6.

8. Security

We use encrypted connections (HTTPS), access controls and reputable providers. No system is 100% secure; if a breach affects you we will notify you as required by law.

9. Your rights

At any time you may: know, update and correct your data; ask for proof of your authorization; be told how we use your data; request deletion or withdraw your authorization; object to processing; and complain to an authority. To exercise them write to info@dinidine.com with your name, contact method and what you request.

• Colombia: we answer queries within 10 business days and claims within 15 business days (extendable as the law allows). You may go to the Superintendencia de Industria y Comercio (SIC) if you are not satisfied.
• Mexico: you may exercise access, rectification, cancellation and opposition (ARCO) rights and revoke consent with us, and go to the Secretaría Anticorrupción y Buen Gobierno.
• Canada: you may request access and correction, withdraw consent and contact the Office of the Privacy Commissioner of Canada; in Quebec Law 25 also applies. Commercial electronic messages include an unsubscribe mechanism (CASL).
• United States / California: we do not sell or share personal data for behavioral advertising. You may request access, correction or deletion by writing to us.

10. Minors

The service is for businesses and people over 18. We do not knowingly collect data from minors.

11. Changes to this policy

We will post changes here with their date and version; if important, we will tell you. If the purpose for which we use your data changes, we will ask for new authorization where the law requires.

12. Contact

info@dinidine.com · WhatsApp +1 (770) 615-9458.