Personal data
Privacy
and cookies
Last updated: 6 November 2026
This is a translation provided for information. The French version prevails.
Spiraltis, which publishes the foodnfeed.fr website and the Food'n Feed platform, takes the protection of your personal data very seriously. This policy explains what data we process, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Who is responsible for your data?
The data controller is Spiraltis, an SAS with a share capital of 2 euros, registered with the Paris Trade and Companies Register under number 941 399 503, 60 rue François Ier, 75008 Paris, France. For any question about your data or to exercise your rights: rgpd@foodnfeed.fr, or by post to the registered office.
2. Who this policy covers
- Visitors to the website foodnfeed.fr, including people who fill in a form;
- Our restaurant clients and their teams, who use the Food'n Feed platform;
- Our clients' guests, who view a menu, book or order with Food'n Feed. For their data, the restaurant is the data controller (see section 8).
3. The data we process, why and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answering a demo, quote, sign-up or contact request | Name, restaurant, number of venues, email, phone, message | Pre-contractual measures taken at your request |
| Following up the business relationship and sending you information about our offers (business-to-business marketing) | Identity, business contact details, history of exchanges | Legitimate interest; you can object at any time |
| Creating and managing your account, providing the platform and support | Identity, contact details, company name, SIREN, VAT number, login details, team roles, support requests | Performance of the contract (terms of sale) |
| Invoicing and collecting the subscription | Billing details, invoices, payment history (card data is processed by Stripe, never by us) | Performance of the contract and legal accounting obligations |
| Managing referrals | Referral code, identity of the referrer and the referred client | Performance of the contract |
| Measuring website traffic | Pages viewed, source, device, browsing events (Google Analytics) | Your consent |
| Keeping the website and platform secure | Connection logs, IP address, technical information | Legitimate interest and legal obligations |
| Handling disputes and requests to exercise rights | Data needed to handle the request | Legal obligation and legitimate interest |
Required form fields are marked with an asterisk; without them, we cannot handle your request. We do not take any decision based solely on automated processing that produces legal effects concerning you.
Referral code: if you arrive through a referral link (?ref=), the code is kept in your browser for 60 days so that it can be passed on at sign-up. No other tracking is attached to it.
4. How long we keep your data
| Data | Retention period |
|---|---|
| Requests received through the forms and prospect data | 3 years from your last contact |
| Client account data | For the whole subscription, then 3 months after the account is closed (export period), before deletion |
| Contractual relationship data (contract, exchanges) | 5 years after the end of the relationship, as evidence (commercial limitation period) |
| Invoices and accounting records | 10 years (French Commercial Code) |
| Connection logs | 1 year |
| Audience measurement cookies | 13 months at most; the related statistics are kept for 14 months in Google Analytics |
| Your cookie choice | 6 months |
| Requests to exercise rights | As long as needed to handle them, then 5 years in archive as evidence |
5. Who receives your data
Your data is intended for the Food'n Feed team at Spiraltis, each within the limits of their role. It is also processed, on our behalf and on our instructions, by our processors:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Hosting of the foodnfeed.fr website | United States, delivered through a global network |
| Amazon Web Services EMEA SARL | Hosting of the platform and client data | European Union (Paris) |
| OVH SAS (OVHcloud) | Email hosting and sending of form emails | France |
| Stripe Payments Europe Ltd | Subscription payments; guests' card holds and prepayments | European Union, with safeguarded transfers |
| Google Ireland Limited | Audience measurement (Google Analytics), only with your consent | European Union and United States |
We may also disclose data to the authorities when required by law, and to our advisers (accountant, lawyer), who are bound by professional secrecy. Your data is never sold or rented.
6. Transfers outside the European Union
Some providers are based in the United States or may access data from there. These transfers are covered by the adequacy decision of 10 July 2023 (EU–US Data Privacy Framework) for certified companies, or otherwise by the European Commission's standard contractual clauses, together with the necessary security measures. You can obtain a copy by writing to rgpd@foodnfeed.fr.
7. Security
We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), role-based access, protected passwords, regular backups, hosting of the platform in the European Union and incident monitoring. In the event of a data breach likely to put your rights at risk, we notify the CNIL and, where necessary, the people concerned, within the time limits set by the GDPR.
8. Guests' data
When you view a restaurant's menu, book or order with Food'n Feed, the restaurant decides how your data is used: it is the data controller. Food'n Feed acts as a processor, under a data processing agreement compliant with Article 28 of the GDPR, and never uses this data for its own purposes. To exercise your rights over this data, contact the restaurant; we help it to answer you. Payments, card holds and prepayments are processed by Stripe, a separate data controller.
9. Cookies and audience measurement
With your consent, we use Google Analytics (Google Ireland Limited) to measure traffic on the website: pages viewed, visit duration, source, clicks on the main buttons and form submissions. These statistics are used only to improve the website. No advertising cookie is set and the referral code is removed from the addresses sent.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga, _ga_* | Google Analytics audience measurement | 13 months at most |
| fnf_consent (local storage) | Remember your cookie choice | 6 months |
| fnf_ref (local storage) | Pass the referral code on at sign-up | 60 days |
Google Analytics only loads after you click “Accept” in the banner; if you refuse, nothing is loaded. Your data may be transferred to the United States: this transfer is covered by the EU–US Data Privacy Framework, to which Google adheres.
Changing your mind: the “Cookie settings” link at the bottom of every page reopens the banner. If you withdraw your consent, measurement stops and the _ga cookies are deleted. Your choice is kept for 6 months, after which the banner is shown again.
No other third-party content (maps, Instagram posts) is loaded without your consent.
10. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to its processing, in particular for marketing, as well as the right to withdraw your consent at any time, without affecting processing already carried out. You can also set instructions on what happens to your data after your death.
To exercise your rights, write to rgpd@foodnfeed.fr. We may ask you to prove your identity if we have reasonable doubts. We answer within one month, which may be extended by two months for complex requests; we will let you know if so.
If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).
11. Changes to this policy
We may update this policy, in particular to follow regulations or changes to our services. The date of the last update appears at the top of the page; in the event of a significant change, we inform our clients by email or in their client area.