Privacy Policy

This Privacy Policy explains how Chixito collects, uses, stores, shares, and protects personal information when you use our website, place orders, create an account, contact support, participate in events, or otherwise interact with our services.

This policy is intended to follow common international privacy principles, including transparency, purpose limitation, data minimisation, reasonable security, and user access rights. It should be read together with our Terms and Conditions and any order-specific notices shown during checkout.

Depending on how you use the site, we may collect your name, email address, phone number, delivery or service address, postcode, order timing preferences, selected outlet details, saved fulfilment preferences, account credentials, and communication history.

We also collect transaction-related information such as cart contents, order identifiers, fulfilment selections, applied offers, payment status, and payment references. We do not store full card details on the website when payments are processed through third-party payment providers.

Technical information may also be collected automatically, including IP address, browser or device information, approximate location data, cookies or local storage identifiers, and site usage logs needed for performance, fraud prevention, analytics, and service reliability.

We use personal information to operate the storefront, authenticate users, save order setup preferences, process payments, confirm orders, arrange delivery or pickup, communicate order updates, and respond to support or booking enquiries.

We may also use information to maintain service quality, personalise relevant parts of the experience, analyse demand patterns, improve operations, prevent fraud or abuse, enforce our policies, and satisfy accounting, tax, regulatory, or other legal obligations.

Where applicable under data protection laws, we process personal information because it is necessary to provide services you request, to manage our contractual relationship with you, to meet legal obligations, to protect legitimate business and security interests, or based on consent where consent is required.

If consent is used for a specific activity, you may withdraw it where applicable, although this will not affect processing already carried out lawfully before withdrawal.

We may share relevant information with payment providers, delivery or fulfilment partners, outlet teams, customer support systems, technology vendors, hosting providers, analytics tools, communication providers, and professional advisers, but only to the extent reasonably required for the service.

We may also disclose information where required by law, legal process, regulatory request, fraud investigation, business restructuring, or to protect rights, safety, security, or the integrity of our services.

Our website uses cookies and local storage to keep you signed in where applicable, remember order setup selections, preserve cart state, maintain session continuity, improve performance, and support analytics or operational diagnostics.

You can control cookies through your browser settings. Restricting certain cookies or local storage may affect cart continuity, account access, location selection, checkout, or other website functions.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order support, operational continuity, dispute handling, compliance, fraud prevention, accounting, and record-keeping obligations.

Retention periods may vary depending on the type of data, the service involved, legal requirements, and whether the information is needed for security, claims, audits, or business administration.

We use reasonable administrative, technical, and organisational measures to protect personal information against unauthorised access, misuse, disclosure, alteration, and loss. No website or transmission method is fully immune from risk, but we take commercially reasonable steps to reduce exposure.

You are responsible for keeping your account credentials secure and for notifying us promptly if you believe your account or information has been accessed improperly.

Depending on the laws that apply to you, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction, objection to certain processing, data portability, or complaint to a relevant supervisory authority.

We may need to verify your identity before acting on a request and may retain certain information where required for legal, security, fraud-prevention, or operational reasons.

Our services are not directed to young children for independent use. If we become aware that personal information has been provided in a way that violates applicable child privacy requirements, we will take reasonable steps to remove or restrict that information as appropriate.

Our technology providers, support systems, or service infrastructure may process information across different jurisdictions. Where this occurs, we aim to use reasonable safeguards consistent with applicable law and the nature of the service.

If you have questions about privacy, data handling, or a personal information request, please contact Chixito through the contact channels published on this website.

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or business operations. The updated version becomes effective when posted on this page.