Privacy Policy

1. Who We Are

SíChef is a food marketplace platform that connects independent chefs with local customers. This Privacy Policy explains how we collect, use, store, and protect personal information when you use the SíChef platform and related services.

For data-protection purposes, the controller of your personal data is KHADIJA HAMMAWA.

You can contact us about privacy at hello@sichef.es.

2. Information We Collect

We aim to collect only the personal information needed to create and operate your SíChef account and provide the service.

• Basic account information: your name and email address.
• Authentication information: technical account and authentication identifiers needed to create your account, keep you signed in, and secure access to the platform.
• Google Sign-In information: if you choose to sign in with Google, we receive the basic information needed for sign-in, including your name, email address, and a unique Google account identifier. We use this information only to create, authenticate, and manage your SíChef account.
• Information you provide through SíChef: information you choose to submit when using platform features, such as profile information, order or event-related information, or messages sent to us for support.
• Transaction information: where a payment is made through SíChef, we may receive information such as payment status, amount, transaction identifier, refund status, and related records. We do not store full payment-card numbers.

We do not intentionally collect sensitive personal information through the standard SíChef account-registration process.

3. How We Use Your Information

We use personal information only where necessary to:

• Create, authenticate, and manage your SíChef account.
• Provide the features and services you request.
• Connect customers and chefs through the platform.
• Maintain transaction and booking records where applicable.
• Respond to support requests or messages you send us.
• Protect the security and integrity of the platform.
• Comply with applicable legal and regulatory obligations.

We do not use your personal information for third-party advertising, and we do not sell your personal information.

4. Google Sign-In and Google User Data

SíChef uses Google Sign-In only as an authentication option. If you choose Google Sign-In, we use the basic Google account information described above to verify your identity, create or link your SíChef account, and allow you to sign in securely.

We do not request access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or other unrelated Google account content.

Google user data received for sign-in is not sold, used for advertising, or shared with unrelated third parties. It is used only for authentication and account functionality and may be processed by service providers that help us operate the platform.

5. Service Providers and Disclosure

SíChef does not sell personal information and does not disclose it to unrelated third parties for their own marketing or advertising.

We do use service providers that process limited personal information on our behalf where necessary to operate the platform. These may include:

• Google, when you choose Google Sign-In.
• Supabase, for database, authentication, and application infrastructure.
• Stripe, where card-payment services are used. Stripe processes payment-card information under its own privacy and security practices; SíChef does not store full card details.
• Other infrastructure providers strictly where needed to host, secure, maintain, or deliver the SíChef service.

These providers process information to provide services to SíChef and are not permitted by us to use SíChef user information for unrelated purposes.

We may also disclose information if required by applicable law, regulation, legal process, or a valid request from a competent authority.

6. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal information on one or more of the following bases:

• Performance of a contract: where processing is necessary to create and operate your account or provide the SíChef services you request.
• Legitimate interests: where necessary to secure, maintain, and improve the reliability of the platform, provided those interests are not overridden by your rights and interests.
• Legal obligations: where we need to keep or disclose information to comply with applicable law.
• Consent: where consent is specifically required by law for a particular type of processing.

7. How Long We Keep Information

We keep account information for as long as your SíChef account is active or as otherwise necessary to provide the service.

If an account is deleted, we will delete or anonymise personal information that is no longer needed, except where we must retain certain information for legal, accounting, fraud-prevention, dispute-resolution, or regulatory purposes.

8. Cookies and Similar Technologies

SíChef may use strictly necessary cookies, local storage, or similar technologies to keep users signed in, maintain sessions, remember essential settings, and protect account security.

We do not use these technologies to sell personal information or provide third-party behavioural advertising.

9. Your Privacy Rights

If the GDPR or another applicable privacy law applies to you, you may have rights including the right to:

• Access personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of certain processing.
• Object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact hello@sichef.es. You also have the right to lodge a complaint with the relevant data protection authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).

10. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. No online service can guarantee absolute security.

11. International Data Processing

Some of the service providers we use may process information outside Spain or the European Economic Area. Where required by applicable law, we rely on appropriate safeguards for those transfers.

12. Automated Decision-Making

SíChef does not use the basic account information described in this policy to make solely automated decisions that produce legal or similarly significant effects on users.

13. Changes to This Policy

We may update this Privacy Policy from time to time as SíChef changes or as legal requirements evolve. When we make changes, we will update the “Last updated” date at the top of this page and provide additional notice where required by law.

14. Contact Us

If you have questions about this Privacy Policy, your personal information, or your privacy rights, contact us at hello@sichef.es.