Last updated: July 2026
When you place an order or make a reservation, we collect only what is needed to fulfil it: your name, phone number, address and map delivery location (for delivery orders), and the order/reservation details. When you send a complaint or suggestion we collect your name, phone number, branch, message, and an optional photo if you attach one. This data is stored securely in our own database on our server. We also keep a simple summary of your past orders (linked to your phone number, including order counts and loyalty points) so we can serve you faster next time.
We use Google Maps to show branch locations and suggest the nearest one, subject to Google's own privacy policy. Nearest-branch suggestions use your location only with your permission. For delivery orders, setting your location pin on the map is required: your coordinates are sent to our server to compute the real driving distance and delivery fee and to confirm you are inside the delivery area, and they are stored with the order so the driver can reach you accurately. We never track your location at any other time.
We use your data to process orders, reservations and complaints and to contact you about them, and to improve our service through aggregate statistics that don't identify you personally. WhatsApp order-status messages are delivered through Meta's WhatsApp Cloud service, which means your phone number, name and order number are processed by Meta solely for delivery, under Meta's privacy policy. We do not sell your personal data to any third party, and we never use it for advertising.
You can track an order by its order number or by your phone number; a phone-number search only ever shows the single most recent active order for that number — never older order history. Once your order is out for delivery we show you the driver's name and phone number so you can reach them directly if needed.
If you allow notifications in your browser, we store your device's push subscription address and preferred language on our server to send you order-status updates and restaurant announcements. Delivery passes through your browser vendor's push service (such as Google, Apple, Mozilla or Microsoft) without including your other personal data. You can turn notifications off at any time in your browser settings, and we automatically remove subscriptions that are no longer valid.
Only authorized staff, scoped to their role and branch: branch staff only see their own branch's orders, while general management has broader visibility as needed. All admin accounts are protected by an encrypted password (never stored as plain text) and a digitally signed login session.
We use a single essential (HttpOnly) cookie for the admin team's login session — it is never used for tracking. We also use local storage in your browser to remember your cart contents, preferred language, consent choice, your latest order number for tracking, and local visit counters that never leave your device. If you accept the consent banner we enable visit statistics via Google's Firebase Analytics (aggregate numbers about the most-visited pages, under Google's privacy policy); if you decline, it stays off. No advertising trackers are used.
You may request access to, correction of, or deletion of your data, and you can stop any notifications at any time. To do so, email us at [email protected].