Privacy policy
Draft: this wording is being reviewed and may change before launch.
This policy explains what personal information Breakout collects, why we collect it and what your rights are. Breakout is run by Breakout.
Our role
When you place an order, we handle your order details on behalf of the caterer you are ordering from. For that information, the caterer decides how it is used and we act on their instructions. For messages you send us through this website, and for running the website itself, Breakout decides how the information is used.
What we collect
- your name, work email address and, if you give it, your phone number
- the office, room and number of guests for your order
- what you ordered, the time you need it, and your Purchase Order reference
- anything you write to us through our contact or registration forms
- for caterers using the dashboard, a sign-in cookie that keeps you signed in
We don't collect card details. Card payments, where offered, are handled by the caterer's payment provider.
Why we use it
- to pass your order to the caterer and send you a confirmation
- so the caterer can prepare, deliver, invoice and keep records of your order
- to reply to your messages
- to keep the website secure and stop fake orders
We use your information because it is needed to carry out your order, because we have a legitimate interest in running and protecting the service, and to meet legal obligations such as keeping financial records.
Who we share it with
Your order goes to the caterer you ordered from. We also use trusted service providers to run Breakout: MongoDB Atlas for our database, Vercel to host the website, and Resend to send emails. They only use your information to provide their service to us. We never sell your information.
Where a provider handles information outside the European Economic Area, we rely on legal safeguards such as the European Commission's standard contractual clauses.
How long we keep it
Order records are kept for six years, because Irish businesses must keep financial records for that long. Messages sent through our forms are deleted within 12 months unless they lead to an ongoing business relationship.
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, or object to how it is used. For order information, we may pass your request to the caterer, who decides on it. To make a request, use our contact page.
If you're unhappy with how we have handled your information, you can complain to the Data Protection Commission at dataprotection.ie.
Cookies
See our cookie notice.