
Privacy Policy
Satay Haji Ibrahim Privacy Policy
Effective Date: 26th February 2026
Last Updated: 26th February 2026
1. Who We Are
Satay Haji Ibrahim (“SHI”, “we”, “our”, or “us”) is a food and beverage business managed and operated by SPHI Foods.
This website provides:
-
Our menu
-
Business locations
-
Instagram content
-
Hotline and WhatsApp contact details
-
A link to our TakeApp online ordering store
We are committed to protecting personal data in accordance with:
-
The Brunei Darussalam Personal Data Protection Order (PDPO)
-
Other applicable data protection laws
This Privacy Notice explains how we collect, use, store, and protect personal data through this website and our ordering channels.
2. What Personal Data We Collect
A. Website Visitors
When you browse our website, we may collect:
-
IP address
-
Browser type
-
Device information
-
Pages visited
-
Date and time of access
This information is used for website security, analytics, and performance improvement.
B. When You Contact Us
If you contact us via:
-
WhatsApp
-
Phone call
-
Instagram or other social media platforms
We may collect:
-
Your name
-
Phone number
-
Order details
-
Delivery or pickup location
-
Any other information you voluntarily provide
C. Online Orders (TakeApp Store)
When you place an order through our TakeApp store:
-
Personal data is collected directly by TakeApp as the ordering platform.
-
We receive only the information necessary to prepare and fulfil your order, such as:
-
Name
-
Contact number
-
Order details
-
Delivery or pickup information
Please refer to TakeApp’s own Privacy Policy for details on how they process your personal data.
3. Use of AI Chatbot for WhatsApp Orders
Our WhatsApp ordering channel may be supported by an automated AI chatbot system.
This means:
-
Initial messages and order details may be received and processed automatically.
-
The chatbot may collect your name, phone number, order details, and delivery or pickup information.
-
The system helps organize, confirm, and streamline orders before review by our staff.
-
Final order confirmation and fulfilment remain under human supervision.
We use this system to:
-
Improve response time
-
Reduce ordering errors
-
Ensure accurate order recording
-
Enhance customer service efficiency
Automated processing through our chatbot does not involve automated decision-making that produces legal or similarly significant effects.
If you prefer to speak directly to a human staff member, you may request this at any time during the WhatsApp conversation.
4. How We Use Personal Data
We use personal data to:
-
Process and fulfil food orders
-
Confirm orders and delivery details
-
Respond to inquiries
-
Manage customer service matters
-
Comply with accounting, tax, and regulatory requirements
-
Improve our products and services
We do not sell or rent personal data to third parties.
5. Legal Basis for Processing (PDPO Compliance)
We process personal data based on:
-
Performance of a contract (to fulfil your order)
-
Legitimate business interests
-
Legal obligations
-
Your consent (where required)
You may withdraw consent at any time by contacting us.
6. Disclosure of Personal Data
We may share personal data only when necessary with:
-
Delivery personnel (for order fulfilment)
-
Payment service providers
-
IT and hosting providers supporting our systems
-
Government authorities if required by law
All third parties are required to handle personal data securely and confidentially.
7. Social Media and Third-Party Platforms
Our website may display or link to:
-
Instagram
-
Facebook
-
WhatsApp
-
TakeApp
When you interact with these platforms, their own privacy policies apply.
We are not responsible for how third-party platforms collect or process your data.
8. Data Retention
We retain personal data only for as long as necessary for:
-
Order fulfilment
-
Customer service follow-up
-
Accounting and tax compliance
-
Legal obligations
Data that is no longer required will be securely deleted or anonymised.
9. Data Security
As part of SPHI Foods’ management structure, we implement such as:
-
Restricted access to order information
-
Secure digital storage
-
Role-based access control
-
Staff confidentiality obligations
-
Incident management procedures
While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure.
10. Your Rights
Subject to applicable law, you may:
-
Request access to your personal data
-
Request correction of inaccurate information
-
Request deletion where legally permissible
-
Withdraw consent
To exercise your rights, please contact our Data Protection Officer using the details below.
11. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect legal, operational, or security changes.
The latest version will always be available on this website.
12. Contact Us
If you have any questions about this Privacy Notice or wish to exercise your data rights, please contact our Data Protection Officer:
Email: dpo@sphifoods.com
Phone: +673 3 230642
SPHI Foods
#1 & 2, Block B, Ground Floor, Lot 2061 (Phase 2)
Kg. Gana, Sg. Liang, Kuala Belait, KC1335
Negara Brunei Darussalam
