1. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, and account role (student, restaurant owner, admin).
• Contact Data: includes email address (which serves as your primary login identifier).
• Transaction Data: includes details about orders you have placed, tables you have joined, favorites, and records of any unpaid debts to restaurants.
• Technical Data: includes login sessions, browser type, and time zone setting.

2. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a new user and authenticate your account.
• To process and deliver your food orders to the correct table on campus.
• To manage payments, calculate shared table bills, and track unpaid debts.
• To notify you about changes to our terms or privacy policy.

3. Disclosures of Your Personal Data

We do not sell your personal data to any third parties. However, your Identity Data (such as your name) and Transaction Data (your orders and order notes) are shared with the specific restaurants you order from within the Campus Cravings platform solely for the purpose of preparing, tracking, and delivering your food.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Passwords are securely hashed before being stored in our database. Access to your personal data is limited to those employees, restaurant owners, and administrators who have a strict business need to know.

5. Cookies and Sessions

We use session variables and strict functional cookies to keep you logged in, remember your cart items, and track your active table sessions. You can set your browser to refuse all or some browser cookies, but note that parts of this platform will become inaccessible or not function properly if you do so.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data (Note: Accounts with active unpaid debts cannot be erased until debts are settled).

If you wish to exercise any of the rights set out above, please contact the site administrators.