1. Contact details

If you have any questions or requests regarding this Privacy Policy or how we generally handle your data, you can contact us at ciao@i-eat.it.

2. How we collect your data

We collect your information when you interact with us or use our services, for example when you use our Website to place an order. We also observe how visitors use our Website to help us improve our services and optimise the customer experience.

We collect information:

• when you create an account with us or change your account settings;
• when you place an order with us and during the ordering process (including for payment and delivery of the order);
• through your interactions with us or our services, for example when you request information or receive marketing, information about I-Eat initiatives or other communications from us via email, phone, post, SMS, push notification or through our chat feature;
• when you browse or use our Website (before and after creating an account with us).

We also collect information from third-party websites, such as advertising and social media platforms, and our fraud detection provider.

3. Information collected from you

As part of our commitment to the privacy of our customers and Website visitors in general, we want to be clear about the types of information we collect from you.

When you visit the Website or place an I-Eat order through the Website, including any partner websites we work with to provide delivery services, you are asked for information including your name, contact details, delivery address, order details, and payment information such as credit or debit card details.

We collect information about your use of the Website and information from any messages you post on the Website or when you contact us or provide feedback, including via email, post, telephone, or chat. In the event of a complaint, we may request a photograph of the order showing the issue, if this is visible upon inspection of the items.

We collect information from your mobile device or computer, such as operating system, device type, connection type, and IP address from which you access our Website. We also collect technical information about your use of our mobile services, such as carrier, location data, and performance data, including mobile payment methods.

We process your health information only if you voluntarily provide consent, for example if you report specific food allergies after placing an order.

Where we are required to collect information by law or under the terms of a contract with you and you fail to provide such information, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide our services). In such cases, we may have to cancel the service provided to you, but you will be notified.

4. Use of your data

We will process your data only if there is a reason to do so and if that reason is permitted by law.

Where we need to provide you with the service you requested or enter into a contract with you, we use your information to:

• allow you access to relevant parts of the Website (we collect necessary cookies from your device);
• provide the requested services (we collect your name, contact details, delivery address and order details);
• collect payment from you (we collect your credit or debit card details);
• contact you where necessary regarding our services, for example to resolve issues with your order.

We also process your information where we have a legitimate interest, which includes:

• personalising our services, including making ordering easier and faster;
• improving the effectiveness and quality of our services;
• tailoring content shown to you, including advertising relevance;
• enabling our customer service team and partners to respond efficiently to your requests or complaints;
• contacting you for feedback;
• notifying you of important changes or developments;
• informing you if our services become available in a new area (if requested);
• analysing your activity on the Website for administrative, statistical, analytical, and fraud prevention purposes;
• producing anonymised aggregated reports;
• detecting, investigating, and preventing fraud or crime.

We also process your data to enforce our contractual terms, comply with internal policies, and for legal claims or defence, as well as to protect I-Eat’s rights.

When you place an order, we may ask you to leave a review.

When you respond to surveys, we may use your comments in our marketing or advertising materials, identifying you only by first name and city unless you opt out. We also use survey feedback to improve our services and share aggregated insights with partners.

We may profile your activity on the Website to make assumptions about your interests and send you personalised communications. This is known as “profiling”.

We also use your information where you give consent, for example regarding allergies or delivery incidents, and to comply with legal or regulatory obligations.

6. Cookies

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable cookies, some parts of the Website may not function properly.

7. Marketing

Where you have given consent or where we have a legitimate interest, we may use your data to inform you about our products, services, or initiatives that may be of interest to you via email, post, phone, or push notifications.

We use online advertising to inform you about our activities and help you discover our products.

We use your data to ensure ads are relevant to you. You may see I-Eat banners on our Website or third-party websites and apps (including social media), or third-party ads on our Website. These are based on your information, previous activity, or interactions with our ads.

We use your data to deliver relevant communications. You have rights regarding this processing (see “Your rights”).

8. Retention of information

We keep your information only as long as necessary for the purposes it was collected, including legal, tax, accounting, or reporting requirements.

We may retain it longer in case of complaints or disputes.

We consider legal obligations, limitation periods, legitimate interests, disputes, and regulatory guidelines when determining retention periods.

We securely delete data when no longer needed.

9. Sharing information

Your data is stored on our servers. We only share it when necessary for the purposes described above.

We share data with I-Eat partners to fulfil orders or handle complaints.

We share data with third-party service providers, including:

• payment providers and fraud detection services;
• IT and cloud providers;
• marketing and research providers;
• delivery companies;
• customer support providers.

We may share feedback and comments with partners.

We may share data with advertising partners to serve and measure ads. We may act as joint controllers with these partners under applicable agreements.

We may also share data to comply with legal obligations, enforce contracts, protect rights, prevent fraud, or support law enforcement.

We take steps to ensure data is handled securely when transferred.

10. Security

We use strong security technologies and procedures to protect your data.

We have procedures in place for data breaches and will notify you and regulators where legally required.

Internet transmission is not fully secure, and any transmission is at your own risk. Once received, we apply strict security measures.

You are responsible for keeping your password confidential.

11. Your rights

You have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to object (including marketing and profiling)
• Right not to be subject to automated decision-making

12. Security

We use strong security technologies and procedures to protect your data.

We have procedures in place for data breaches and will notify you and regulators where legally required.

Internet transmission is not fully secure, and any transmission is at your own risk. Once received, we apply strict security measures.

You are responsible for keeping your password confidential.