In accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations, KaFeliz provides this Privacy Notice, which explains what personal data we collect, how we use, protect, and, if applicable, share it, as well as the rights you have as the owner of your data.
Identity and Address of the Data Controller: The entity responsible for processing your personal data is KaFeliz, a platform operated in Guadalajara, Jalisco, Mexico. For the purposes of this notice, KaFeliz designates its contact address as the City of Guadalajara, Jalisco, Mexico. You can contact us via email at info@ka-feliz.com for any matter related to this Privacy Notice or your personal data.
KaFeliz may collect data from two main types of individuals: (1) Restaurant Clients (registered users of the Platform) and (2) Diners (restaurant customers who interact with the system, for example, by placing orders via QR code). Below is a list of the categories of personal data we may collect from each type of individual:
Identification and Contact Data (Restaurant Clients): Full name of the representative or contact person, trade name or legal name of the restaurant, physical address of the establishment, Federal Taxpayer Registry (RFC) for invoicing, email address, landline and/or mobile contact number, and generally, location and contact data necessary for the commercial relationship. In the case of individuals contracting the service, personal data such as CURP (Unique Population Registry Code), fiscal address, etc., may also be collected as required for invoicing or contracting purposes.
Employment or Business Data: The business type of the restaurant, number of branches or their locations, operating hours, number of employees (e.g., number of waitstaff or personnel who will use the Platform), logo and commercial image of the business, and any other information related to the restaurant's operation that the Client provides to set up their account.
Account and Financial Data (Restaurant Clients): Information necessary to process payments and reload the Internal Balance, which may include transaction references (e.g., payment receipts, bank confirmations). Note : KaFeliz does not directly collect or store Restaurant Clients' credit or debit card data on the Platform; recharges are processed through secure third-party payment providers, and only the transaction result (amount, date, confirmation) is stored. For invoicing purposes, fiscal data (such as RFC, legal name, and fiscal address) will be collected.
Platform Usage Data (Restaurant Clients): Information about how the Client and their authorized users utilize KaFeliz, including account configurations, usage statistics, frequency of access, and activity logs within the system (e.g., menu creation, order reception, report generation). This helps us provide support and enhance the user experience.
Personal Data of Diners: In the operation of the Platform, certain data of Diners who place orders at a restaurant through KaFeliz may be collected. These data are typically provided by the Diner when interacting with the system, and may include, for example: the name (or alias) the Diner enters to identify their order, order details or order history at that restaurant, time and date of visits/orders, and the table or location within the restaurant associated with the order (if using QR codes per table). In some cases, the Diner's phone number or email may be included if the restaurant configures contact fields to, for example, send confirmations (this will depend on how the Restaurant Client configures the ordering experience; by default, KaFeliz does not ask the Diner for contact information unless it is necessary for the requested functionality, such as order ready notifications).
Location Data: As a general rule, KaFeliz does not track the GPS location of end users; however, we may obtain location information indirectly, for example: the restaurant branch that the Diner visits (and thus the city or area), or the IP address from which a Client or Diner connects (which could infer approximate location at the city level). This information is used for security purposes (to verify potential unusual accesses) and for usage statistics (to know from which locations our services are used most).
Technical and Navigation Data: When using our Platform, technical data is collected, such as the type of device used, web browser, operating system, IP address, access times, and session identifiers. Cookies and similar tracking technologies may also be used to gather information about interactions with our Platform (e.g., time spent, sections visited). These technical data generally do not identify you by themselves, but they may be considered personal data when associated with your account. Please refer to our Cookie Policy (if available) for more details about the use of these technologies.
Sensitive Personal Data: KaFeliz does not request or process sensitive personal data (such as health data, ideology, beliefs, biometric data, sexual orientation, etc.) from Restaurant Clients or Diners. Users are asked to refrain from entering this type of information on the Platform. In the event that, for any reason, KaFeliz must handle sensitive data (e.g., information about a Diner’s food allergies if the restaurant records it in an order), it will be processed with the highest security measures and only for the specific purpose required, obtaining the explicit consent of the data subject if the law so demands.
The personal data collected by KaFeliz will be used solely and exclusively for the following purposes related to the provision of our services and the operation of the Platform:
Primary Purposes (necessary for the service):
Provision of the Contracted Service: We use the information of Restaurant Clients to create and manage their accounts, provide them access to the Platform, and enable them to use the various functionalities (manage menus, receive orders, coordinate the kitchen, and view statistics). For example, the Client's identification data is used to register the account and personalize the interface (display the restaurant's name, logo, etc.), and the Diner's data (name, order) is necessary for the system to process and display the order correctly to the restaurant.
Transaction and Subscription Processing: We use financial and Internal Balance data to manage subscription payments, recharge balances, issue invoices, and maintain a payment history. The fiscal information is used exclusively for issuing the corresponding receipts.
Communication with the Client: Contact data (email, phone) is used to communicate with the Restaurant Client regarding the service, for example: notifications of charges, notices of updates or improvements to the Platform, low balance alerts in the Internal Balance, responses to technical support or customer service requests, and sending relevant operational information (such as scheduled maintenance or issues).
Order and Kitchen Operation: The data provided by Diners when placing orders (name, order details, table, etc.) is processed so that the restaurant can manage the order: this includes displaying it on the kitchen interface, associating it with the correct table, updating the order status, and storing it in the restaurant's order history.
Generation of Operational Statistics: The Platform compiles usage data (e.g., number of orders, service times, most requested dishes, peak service hours) and presents statistics to the Restaurant Client to support business management. These statistics are generated from daily order and operation data. KaFeliz may also use this information internally and in an aggregated manner (non-personally identifiable) to improve the overall functioning of the system, detect usage trends, optimize servers, etc.
Ensuring Platform Security: Technical and navigation data (IP addresses, activity logs, etc.) are processed to maintain the security of our systems, detect and prevent fraud, unauthorized access, or misuse of the Platform. For example, we may use IP and activity logs to identify multiple failed login attempts or access from unusual locations, allowing us to take protective measures.
Compliance with Legal Obligations: If necessary, we will use personal data to comply with applicable legal requirements related to the service. This may include providing information to competent authorities that legally request it (e.g., for tax requirements, criminal investigations, compliance with applicable e-commerce regulations, etc.), or retaining certain information for the periods mandated by law (e.g., billing data for tax obligations).
Secondary Purposes (additional, not necessary for the service, but that help us provide better service to you):
Improvement of Service and User Experience: We may use usage information, feedback you provide, and navigation data to analyze how Clients use KaFeliz, in order to improve our tools, develop new features, and optimize the usability of the Platform. This is done internally, generally with anonymized or aggregated data.
Marketing and Promotions: With your contact information (primarily email), KaFeliz may send you promotional communications regarding Platform updates, new products or services, special offers, training sessions, newsletters, or informational bulletins related to restaurant management and the use of technology. Important: We will only send these marketing communications if we have your consent or if you have not expressed your opposition to receiving them. The Client may opt out of receiving promotional messages at any time by sending an email to info@ka-feliz.com with their unsubscribe request, or by using the "unsubscribe" mechanism in the email if available.
Success Stories and References: In some cases, we may invite certain satisfied Clients to participate in case studies, testimonials, or appear as references for the successful use of KaFeliz on our website or other media. This will only be done with the explicit authorization of the Client, and the data or comments to be published will be agreed upon in advance.
Sending Relevant Information to Diners: KaFeliz does not engage in direct marketing to Diners, as our relationship is primarily with the restaurants. However, if at any point a feature is enabled where KaFeliz sends confirmations or surveys to Diners on behalf of the restaurant (e.g., a satisfaction survey after their visit), such communications will only be made with the minimum necessary information (such as the email or phone number provided during the order, if applicable) and always under the instruction of the Restaurant Client. Under no circumstances will KaFeliz use the Diner’s data to contact them for purposes unrelated to the service requested by the restaurant.
If you are the data subject (Restaurant Client or Diner) and do not wish for your data to be used for any of the secondary purposes mentioned (e.g., receiving promotional newsletters), you can express your refusal now or at any time by sending an email to info@ka-feliz.com, clearly stating your request. Refusal to use your data for secondary purposes will not affect the provision of our main services to you.
At KaFeliz, we do not sell or rent your personal data to unrelated third parties. However, in the normal course of operations and only for the permitted purposes described, your data may be transferred or shared with third parties under the following circumstances:
Service Providers (Data Processors): We may share personal data with third-party service providers who act under our instructions and on our behalf to facilitate KaFeliz's operations. Examples include hosting or cloud storage companies (which securely host our database), software maintenance services, payment gateway providers or transaction processors for recharging the Internal Balance, email transactional or notification services, and customer support services. These providers only receive the necessary information to perform their functions (e.g., a payment processor receives transaction data, an email service receives the email address to send notifications) and are contractually committed to protecting personal data and not using it for purposes other than those instructed by KaFeliz.
Government Authorities: KaFeliz may transfer your personal data to competent authorities (administrative, tax, judicial) when required by legal mandate or to comply with properly grounded and justified official requests. For example, we may disclose billing information to the SAT (Tax Administration Service) if requested for an audit, or data about a Client or transactions in the case of receiving a court order in the context of an investigation. Only the strictly necessary information will be shared in these cases.
Authorized Business Partners: In the event that KaFeliz forms partnerships with third parties to offer additional benefits to Clients (e.g., integration with third-party services, special offers from partners for KaFeliz restaurant users), any transfer of personal data to such partners will only be made if the Client provides their consent. In the absence of such consent, KaFeliz may share aggregated statistical information (non-personally identifiable) but not individual personal data.
Corporate Transactions: If in the future KaFeliz undergoes a merger, acquisition, asset sale, or corporate restructuring, the personal data held by KaFeliz may become part of the assets transferred to the new owner or successor entity. In such an event, the continuity of protection for your data will be ensured in accordance with this Privacy Notice, and if necessary, the data subject will be notified about the change of data controller.
Other Transfers Permitted by Law: The LFPDPPP establishes certain cases in which data transfer can occur without the need for the data subject's consent, such as: (a) When the transfer is necessary due to a contract between the data controller (KaFeliz) and the data subject (Client), or a contract made in the interest of the data subject. (b) When the transfer is necessary for the recognition, exercise, or defense of a right in a legal process. (c) When the transfer is between affiliated companies under the common control of KaFeliz (this situation will be communicated to the data subject at the time). (d) When the transfer is necessary for the maintenance or compliance with a legal relationship between the controller and the data subject. KaFeliz will strictly adhere to these legal provisions.
Outside of the cases mentioned above, we will not share your personal data with any third party unless we have your explicit consent. If, for any reason, a new need for data transfer arises that is not listed here, we will notify you and, when required by law, request your authorization beforehand.
In accordance with the LFPDPPP, you have the right to exercise your ARCO rights at any time regarding your personal data held by KaFeliz:
Access: Request to be informed about which personal data we have in our records, how we use it, and the conditions of its processing (e.g., purposes, whether it has been shared with third parties, and the source of the data).
Rectification: Request the correction or update of your personal data if it is outdated, inaccurate, or incomplete. For example, you can ask us to correct your name if it is misspelled or update your contact email.
Cancellation: Request the deletion of your personal data from our records when you believe it is not being processed in accordance with the principles, duties, and obligations set forth by law, or when it is no longer necessary for the purposes outlined here. When data is canceled, we will block and delete it from our records in accordance with the law. Note:: Due to legal obligations, some data may not be immediately deleted (e.g., transaction information that we must retain for X years under tax regulations); in such cases, the data will only be kept for legal compliance and will be deleted at the end of the required retention period.
Opposition: Object to the processing of your data for specific purposes, provided you have a legitimate reason. For example, you can object to the use of your data for secondary marketing purposes, or even object to certain primary processing due to personal circumstances if permitted by law. If your opposition request is deemed valid, KaFeliz will cease processing the data for the indicated purposes, unless there is a legal reason that requires continuing the processing.
In addition to the ARCO rights, the legislation recognizes the right to revoke consent previously granted, as well as to limit the use or disclosure of your personal data. This means that if you have given us permission for any secondary use of your data, you can later withdraw that consent; or you can opt out of our lists to stop receiving certain communications, for example.
Method and Procedure to Exercise Rights: To exercise any of your ARCO rights, as well as the revocation of consents or limitation of use, you (or your legally accredited representative) must send a request to the email address info@ka-feliz.com, addressed to the "Data Protection Area" of KaFeliz.
The request must include at least the following:
Your full name (or legal name, if applicable) and contact details (email address or physical address) to communicate the response.
A copy of an official document that proves your identity (e.g., INE, passport) or, if applicable, documents proving the legal representation of the data subject (e.g., a simple power of attorney accompanied by the identification of the data subject and the representative).
A clear and precise description of the personal data for which you wish to exercise any of the rights, and the specific ARCO right you wish to exercise. For example: "I request Access to my account information and payment records." or "I request the Rectification of my registered phone number, the correct one is ____." or "I request the Cancellation of my personal data, which consists of ____, as the service is no longer needed." or "I oppose the processing of my data for advertising purposes."
Any other element or document that facilitates the location of the personal data. For example, indicating your registered username on the Platform, the email associated with the account, the date you registered, or the context in which you provided the data (e.g., if you were a Diner, specify the restaurant and the date you placed an order, if possible).
If you are requesting a Rectification, please attach the documentation that proves the correction to be made (for example, a copy of CURP or RFC if you wish to correct those data, a proof of address to update a location, etc.).
Once your complete request is received, KaFeliz will communicate the determination within a maximum of 20 business days. If the request is accepted, it will be implemented within 15 business days after the date we communicate the response (as per the LFPDPPP, Article 32). If the information provided in your request is insufficient or incorrect, or if the necessary supporting documents are not included, KaFeliz may request that you submit the missing evidence or corrections within 5 business days after receiving the request. You will then have 10 business days to respond to the request; if you do not respond within that period, the request will be considered not presented.
KaFeliz's response will be sent through the contact method you provided (e.g., via email). When access to personal data is granted, a copy or reproduction will be provided in electronic format (unless another method is requested); when rectification is approved, the necessary changes will be made; in the case of cancellation, the data will be deleted or blocked as applicable; and if opposition is granted, the processing in question will cease.
Revocation of Consent: In cases where you have granted us consent to process your personal data (for example, for secondary purposes), you can revoke it at any time. The mechanism for revocation is the same as described for ARCO rights: send an email to info@ka-feliz.com, clearly stating that you wish to revoke the consent granted for a specific processing purpose. It is important to note that in some cases, we may not be able to immediately process your revocation request, as there may be legal obligations that require us to continue processing certain data (e.g., retaining transaction data for tax obligations). However, if it concerns voluntary purposes (such as marketing), we will stop using your data for those purposes within a reasonable period.
Limitation of Use or Disclosure: If you wish to be added to our internal opt-out list to stop receiving promotional communications, you can also request it via email. You can also apply privacy settings to your KaFeliz Account (if the platform provides such options, like disabling non-essential notifications).
For more information about the procedure or any questions regarding the exercise of your rights, you can contact us at the provided email, and we will be happy to assist you.
KaFeliz is committed to the security of your personal data. To prevent unauthorized access, use, or disclosure of data, we maintain administrative, technical, and physical security measures in accordance with the law and industry standards:
Technical Level: The Platform operates under encrypted connections using the SSL (Secure Sockets Layer) or TLS protocol, which means that information transferred between your device and our servers is encrypted. You can verify the presence of a padlock or "https://" in your browser’s address bar when using KaFeliz, indicating a secure connection.
Data Storage: Personal data is stored in secure databases located in controlled environments. We implement access controls so that only authorized KaFeliz personnel (e.g., technical support or administrative staff requiring access to information) can consult the data, and even then, only the data necessary for their duties. This staff is subject to confidentiality obligations.
Additional Security Measures: We use firewalls, intrusion detection systems, and continuous monitoring of our infrastructure to prevent and detect unauthorized access. We conduct periodic backups of information to prevent data loss and aim for pseudonymization or encryption of sensitive data when applicable.
Administrative Level: We have internal data protection policies and staff training to ensure that everyone understands the importance of safeguarding our users' privacy. Only trusted employees and providers, under confidentiality contracts, are involved in the processing of personal data.
We regularly review our security and privacy practices, updating measures as new technologies or risks emerge. Although no system is 100% invulnerable, KaFeliz strives to maintain high levels of protection. In the event of a vulnerability or incident that significantly impacts the protection of your personal data, we will notify you as required by applicable regulations and take corrective actions.
Data Retention: Your personal data will be kept for the duration of the contractual relationship and use of the Platform, and subsequently, only for the period required by applicable legislation or necessary to comply with legal obligations or resolve potential disputes. For example, billing data may be retained for the required fiscal period; account data may be kept for a few months after account deactivation in case the Client returns, etc., all in accordance with the regulations. After these periods, the data will be securely deleted.
The KaFeliz Platform may use cookies and other tracking tools (such as scripts or pixels) to enhance the user experience, analytics, and essential functionality purposes (e.g., keeping the session active). These technologies may collect data such as browser type, operating system, pages visited, time on site, and unique cookie identifiers.
In any case, cookies are not used to collect sensitive personal data or do so without your knowledge. You can control cookies through your browser settings, including deleting or blocking them. Please note that if you disable essential cookies, the Platform may not function properly (e.g., you may be logged out or it may not remember your preferences).
For more details, please refer to the Cookie Policy available on our site (if provided separately), or contact us with any questions regarding this topic.
If you have any questions, comments, or complaints regarding this Privacy Notice or the processing of your personal data, we will be happy to assist you through the following contact methods:
Email: info@ka-feliz.com
Address: Guadalajara, Jalisco, México. (For the exercise of ARCO rights or other matters, we prefer electronic contact; if you need to submit something physically, please request the address and procedure for coordination via email.)
We remind you that for exercising ARCO rights or revocation/limitation of data use, the appropriate channel is the aforementioned email, following the procedure already described in the ARCO Rights section.
KaFeliz reserves the right to update or modify this Privacy Notice at any time, for legal reasons, changes in our information practices, or improvements to our privacy procedures. Any substantial changes will be communicated to the data subjects:
We will publish the updated version of the Privacy Notice on our official website at app.ka-feliz.com in the corresponding section, indicating the date of the last update.
If the changes are significant or affect the conditions under which we process your data (e.g., if we start collecting additional data not initially foreseen, or modify purposes), we may notify you via the email you have provided or through a notice within the Platform when you log in.
We recommend reviewing this Privacy Notice periodically to stay informed about how we protect your information. Continued use of the Platform or failure to explicitly object to the new terms of the Privacy Notice after its publication or notification will be interpreted as consent and acceptance of the changes by the data subject, to the extent permitted by law. If you do not agree with the modifications, you must inform us and/or exercise your rights of opposition or cancellation as described.
By providing your personal data and using the KaFeliz Platform, you express your consent for it to be processed in accordance with the provisions of this Privacy Notice, unless explicit consent is required by law (in which case, you will be asked for it separately).
KaFeliz informs you that, if you do not object to the terms of this notice and continue with the business relationship or use of the service, it will be understood that you have read, understood, and agreed to the terms outlined here. We are committed to processing your data lawfully, securely, and confidentially, in accordance with the described purposes.
Last updated on: 2025-08-09.
© 2025 KaFeliz. All rights reserved. You can contact KaFeliz at info@ka-feliz.com for any further clarification regarding the Privacy Notice.