This Privacy Policy covers the services provided by Atlas Kitchen Pte Ltd, a company registered in Singapore under company UEN number 202041399N and having its registered address at 5 Burn Road #06-03 Singapore 369972.

This Privacy Policy provides details of the way in which we process personal data in line with our obligations under the Personal Data Protection Act (PDPA) and any other laws which apply to us in relation to the processing of personal data (collectively referred to as “Data Protection Laws”). In this Privacy Policy, “controller”, “personal data” and “process” (and its derivatives) have the meanings given to those terms in Data Protection Laws.

Personal data generally means information that can be used to individually identify a person, and processing generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure.

Who is responsible for your data

Depending on context, Atlas may act as:

• an organisation under the PDPA for Atlas’ own purposes (e.g., merchant account management, billing, platform security, service analytics);
• an independent organisation together with the relevant Business for certain order-related features where Atlas and the Business jointly determine purposes and means (GDPR mapping: joint controllers); and
• a data intermediary (processor) when we process personal data on a Business’ documented instructions (e.g., the Business’ own marketing and analytics).

We process your personal data across a range of systems and tools, including our end-user management system, our customer management system and communications platforms.

The Atlas Platform includes technology that enables you to order products from Businesses. For order placement and fulfilment flows where Atlas and the Business co-determine the purposes and means of processing (e.g., routing orders to kitchens, payment and fraud checks, service quality metrics), Atlas and the relevant Business each act as independent organisations under the PDPA (and may be considered joint controllers under the GDPR/UK GDPR).

For Business-led marketing and analytics, the Business is the organisation and Atlas acts as its data intermediary (processor). For Atlas’ own activities (e.g., billing our merchant clients, security monitoring, platform analytics to operate the Atlas Platform), Atlas is the organisation.

If you are a customer of a Business and have queries about how your personal data is processed by that Business or wish to exercise your rights for Business-led processing (e.g., their direct marketing), please contact the Business. You may contact either party for order data; we will coordinate and ensure your request is handled.