Privacy Policy

1. Who we are

HereEats (“we”, “us”) operates the HereEats website (hereeats.com), the HereEats mobile apps and the HereEats merchant dashboard — a platform for discovering local restaurants and ordering food for delivery or pickup. Restaurants fulfil orders themselves; we are the marketplace between you and them.

Contact for all privacy matters: privacy@hereeats.com.

2. Data we collect

Account data: name, email address, phone number and a hashed password. Email and phone are verified with one-time codes.

Order data: the items you order (including customizations and notes), order history, the delivery address you enter and, for delivery orders, the coordinates of that address so the restaurant can check its delivery radius.

Location: only when you allow it, we use your device location to show restaurants near you. Location is used at request time and stored only on your device; you can always type an address instead.

Reviews: ratings and comments you leave for completed orders, shown together with your first name.

Technical data: basic server logs (IP address, request time) kept for security and troubleshooting, and push notification tokens if you enable notifications in the mobile app.

3. What we use it for

To operate the service: showing nearby restaurants, transmitting your order to the restaurant (they see your name, phone number, order contents and delivery address so they can prepare and deliver it), sending order status notifications, and preventing fraud and abuse.

We do not sell your personal data and we do not use it for third-party advertising.

4. Who processes it

Our hosting providers (servers in the EU), bunny.net (content delivery and image storage), our email and SMS verification providers, and — once online payments launch — our payment processor (Stripe). Each processor only receives what it needs to perform its function.

The restaurant you order from receives your order details as described above. Restaurants are independent businesses and handle that data as separate controllers for fulfilling your order.

5. How long we keep it

Account data: until you delete your account. Order history: kept while your account exists, and afterwards only as long as tax and accounting law requires. Server logs: up to 30 days.

6. Your rights (GDPR)

You can access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent at any time. Most of this is available directly in your profile; for anything else email privacy@hereeats.com and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies and local storage

We use no advertising or third-party analytics cookies. We use browser local storage strictly to keep you signed in, remember your cart and remember your chosen location.

8. Changes

If we make material changes to this policy we will notify you in the app or by email before they take effect.