In short
- If you are an end customer of a restaurant, the restaurant is normally responsible for your quote or order.
- Smooth Catering runs the system behind the order flow and usually processes data on the restaurant's instructions.
- Contact the restaurant first if the question concerns a catering request. Contact Smooth Catering if it concerns accounts, demos, support, cookies or security.
Controller and contact
For Smooth Catering's own processing: Stream Shed AB, company reg. no. 556788-5818, Fältvägen 12A, 16340 Spånga, Sweden. Contact: info@streamshed.com.
When a restaurant uses the service for its own customers, the restaurant is normally the controller for the customer relationship, catering request, order, fulfillment and customer communication. Smooth Catering provides the technical platform and is normally the processor for that processing.
Data we process
- Restaurant admins: name, e-mail, password hash, sessions, memberships and support-related activity.
- Demo requests: name, company, e-mail, phone, website, business type and message.
- End-customer requests: name, e-mail, phone, company, company registration number, date, time, people count, delivery address, postal code, menu choices, dietary counts and customer message.
- Restaurant data: menu, prices, allergen labels, terms, media, delivery rules, capacity rules and production sheets.
- Operational data: sessions, reset tokens, Stripe IDs, calendar export tokens, platform events, alerts and superadmin audit logs.
Purposes and lawful basis
- Account, login and security: contract and legitimate interest.
- Demo requests and sales: legitimate interest or steps before contract.
- Restaurant quote, order, CRM and production workflows: the restaurant's contract/legitimate interest, with Smooth Catering processing on the restaurant's instructions.
- Billing, accounting and Stripe references: contract and legal obligation where applicable.
- Product analytics with Google Analytics: consent.
- Support, troubleshooting and security logs: legitimate interest.
Recipients, retention and rights
Data is shared with the relevant restaurant, technical subprocessors and payment/communication providers when enabled. The current subprocessor list is available on the subprocessor page.
Retention follows the purpose: session data is short-lived, demo leads are normally retained for up to 12 months, operational/audit logs normally for up to 24 months, and order/invoice records for as long as the restaurant's contract, accounting or legal requirements require.
You may request access, correction, deletion, restriction, portability or object to processing. For a catering request, contact the restaurant first. For Smooth Catering's own processing, contact us through the privacy contact above. You may also complain to the Swedish Authority for Privacy Protection.