1. Information We Collect

Customer and account information

We may collect your name, phone number, email address, delivery address, account details, language preference, and communication preferences.

Orders and service activity

We collect order details, reservations, selected branch, transaction references, discount use, feedback, support requests, and related service history. Payment providers process card or wallet details under their own policies; we may receive a payment status and transaction reference but do not need to retain full payment-card details.

WhatsApp and other communications

When you contact us through WhatsApp, we may receive your phone number, WhatsApp profile information made available to us, message content, attachments, and message delivery or read status. We also keep records of consent and opt-out requests for promotional messages.

Staff operations

For authorized staff users, we may process profile and branch assignments, checklists and photos, purchase requests, waste reports, tasks, team chat, schedules, meetings, attendance-related activity, and audit records needed to operate the business.

Technical information

We may collect device identifiers, notification tokens, IP address, browser or app version, timestamps, and security or diagnostic logs.

2. How We Use Information

• Provide online ordering, delivery, reservations, customer support, and account services.
• Send requested order updates, service messages, reminders, feedback requests, and approved WhatsApp template messages.
• Send promotions only where permitted and in line with recorded marketing preferences.
• Operate staff workflows such as checklists, tasks, schedules, inventory requests, waste reporting, and internal communication.
• Maintain security, prevent misuse, troubleshoot failures, and keep audit records.
• Comply with applicable legal, accounting, tax, and regulatory obligations.

3. WhatsApp Business Platform

Our customer-service system uses the WhatsApp Business Platform provided by Meta. Meta and WhatsApp process information according to their own terms and privacy notices. When a customer sends us a message, authorized Kaco staff may view and reply to it through our service inbox.

Outside WhatsApp's customer-service conversation window, we use an approved message template where required. You can stop promotional WhatsApp messages at any time by replying STOP or contacting us.

4. When We Share Information

We do not sell personal information. We may share only the information needed with:

• Meta and WhatsApp for messaging, message delivery, and related platform functions.
• Hosting, email, notification, analytics, security, and technical service providers working for us.
• Payment processors and delivery or operational partners needed to complete a requested service.
• Government authorities or other parties when disclosure is legally required or necessary to protect people, rights, or systems.

5. Retention and Deletion

We retain information only for as long as reasonably needed for the purposes described in this policy, including service delivery, customer support, business records, security, dispute handling, and legal obligations. Retention periods may differ by data type. Operational media such as checklist images may be removed under administrator-controlled retention rules.

When information is no longer required, we delete it or de-identify it where reasonably possible. Some information may remain temporarily in backups or must be retained where required by law. See our Data Deletion Instructions to submit a request.

6. Your Choices and Rights

Subject to applicable law and appropriate identity verification, you may ask to access, correct, or delete your personal information, object to certain processing, or withdraw consent. You may also opt out of marketing communications at any time. Service and order messages may still be sent when needed to fulfill a request.

7. Security and International Processing

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet or storage system can be guaranteed completely secure. Our service providers may process information in countries other than the country where it was collected, subject to their safeguards and applicable requirements.

8. Children

Our business systems and direct marketing services are not designed for children. A parent or guardian who believes a child provided personal information without appropriate permission should contact us so we can review and remove it where required.

9. Changes to This Policy

We may update this policy when our services, providers, or legal obligations change. The date at the top identifies the latest version.

10. Contact Us