Privacy Policy

1. Introduction

This Privacy Policy explains how we handle your information when you use our food ordering website. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Key Points:

• We collect minimal personal information (only email addresses for registered users)
• Guest users can order without creating accounts - we use local storage only
• We do not track individual user behavior or create user profiles
• We do not share your information with third parties for marketing purposes
• All guest data stays on your device and is never transmitted to our servers

2. Information We Collect

2.1 Personal Information

We collect minimal personal information:

• Email Address: Only for registered user accounts (authentication and communication)
• Account Credentials: Username/password for registered users only

Note: We do not collect names, phone numbers, addresses, or other personal details unless you explicitly provide them.

2.2 Guest User Data

For guests (non-registered users), we use local storage to:

• Track previous orders for convenience
• Store cart items during the current session
• Remember user preferences for the current visit

Important: Guest data is stored locally on your device and is not transmitted to our servers. This data is automatically cleared when you clear your browser data.

2.3 Automatically Collected Information

We automatically collect minimal technical information when you visit our website:

• IP address (for security and basic analytics)
• Browser type and version (for compatibility)
• Pages visited (for basic usage statistics)

Note: We do not track individual user behavior, create detailed user profiles, or use advanced analytics that could identify individual users.

3. How We Use Your Information

We use your information for the following limited purposes:

• Account Management: Creating and maintaining your user account (registered users only)
• Authentication: Verifying your identity when you log in
• Order Processing: Processing your food orders and payments
• Communication: Sending order confirmations and important updates (registered users only)
• Service Improvement: Basic analytics to improve website functionality
• Security: Protecting against fraud and unauthorized access

Guest Users: For non-registered users, we only use local storage to enhance your browsing experience. This data never leaves your device and is not used for any other purpose.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our contractual obligations when you place an order
• Legitimate Interest: To provide essential services and ensure website security
• Consent: For optional features like analytics cookies (only with your permission)
• Legal Obligation: To comply with applicable laws and regulations

Note: For guest users, no personal data is processed on our servers. Local storage usage is based on your browser's default settings and can be controlled through your browser preferences.

5. Data Sharing and Disclosure

We have a strict policy of not sharing your personal information:

• No Third-Party Sharing: We do not sell, trade, or rent your personal information to any third parties
• No Marketing Lists: We do not share your email address with marketing companies
• No Social Media Integration: We do not share your data with social media platforms
• Limited Service Providers: We only share data with essential service providers (payment processors, hosting) for the sole purpose of providing our services

Guest Users: Since we don't collect personal data from guest users, there's nothing to share. All guest data remains on your device.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and regular security assessments.

7. Data Retention

We follow a minimal data retention policy:

• User Accounts: Account data is retained as long as your account is active. You can delete your account at any time.
• Order History: Order records are kept for legal and accounting purposes (typically 7 years as required by law)
• Guest Data: No guest data is stored on our servers, so there's nothing to retain
• Logs: Server logs are automatically deleted after 30 days

Note: When you delete your account, all your personal data is permanently removed from our systems within 30 days.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request information about your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

9. Cookies, Local Storage, and Tracking

We use cookies and local storage to enhance your browsing experience:

• Cookies: Essential cookies for website functionality and optional cookies for analytics (with your consent)
• Local Storage: For guest users to store cart items and order history locally on your device
• No Tracking: We do not use tracking pixels, social media tracking, or behavioral advertising

For detailed information about our use of cookies, please see our Cookie Policy.

Local Storage for Guest Users

What We Store Locally:

• Cart items during your current session
• Previous order details for convenience
• Basic preferences (language, currency)

Important: This data is stored only on your device and is never transmitted to our servers. It's automatically cleared when you clear your browser data or can be manually cleared through your browser settings.

10. International Data Transfers

Your personal data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

11. Children's Privacy

Our food ordering service is intended for adults (18+ years) who can legally enter into contracts. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

Note: Since we only collect email addresses for account creation and don't collect age information, we rely on users to provide accurate information about their eligibility to use our services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority in your country of residence.