Privacy Policy — Food Orders

1. Controller

GOMO CAPITAL MANAGEMENT LTD, registered in England and Wales under number 16395341, is the controller of the personal data processed across every brand of this platform. The corporate details are on the public Companies House register.

2. Privacy contact / DPO

Where required, we will appoint a DPO. Privacy contact: privacy@ifoodlocal.com. If you are outside the United Kingdom, we operate under the UK GDPR representative rules.

3. Data we process in this activity

• Account and profile: name or nickname, telephone, email, city and language
• Orders: items, amounts, method, chosen payment method, statuses, conversation with the store and ratings
• Delivery: address, additional address details, landmark and the verified WhatsApp number
• Stores: business registration or applicable tax identifier, registered or trading name, name and role of the responsible person, the responsible person's face badge, address, opening hours, menu and photos
• Partner couriers: the driver data described in the Privacy Policy for Ride-sharing and Parcels and the progress of deliveries
• Technical and security: access logs, reports and fraud signals

4. Delivery address and telephone

To prepare and deliver the order, the store sees your name, the delivery address and your verified WhatsApp number, because the courier may need to call. The partner courier sees only the street before accepting the delivery; name, house number and telephone appear after they accept, and only for that order.

The addresses you type are looked up in a mapping service to complete and locate the address and to calculate the store's delivery fee.

5. Store approval

To approve a store, we check its business registration or corresponding tax identification: where available, against an official public register of the store's country; otherwise, the review team checks it against the documents and records provided. We also record the name and role of the responsible person, whose identity is evidenced by the verified face badge on their own account. We neither request nor store the responsible person's confidential personal identity number. A member of our team reviews and approves or rejects, giving the reason.

6. Documents sent to build the menu

The store may send photos or PDFs of price lists, invoices, purchase notes or supplier receipts and printed menus. These documents may contain third-party data, such as a supplier's name or identification. The file is deleted as soon as the text has been read; we keep only the extracted product lines, and the batch is automatically deleted after a short period (30 days by default).

7. Artificial intelligence

The menu assistant, document reading and the generation of dish photos use the artificial intelligence of the group's central infrastructure. We send it only what is necessary (type of food, items, extracted text), never customer data. Generated photos go through public photo moderation and are kept in the platform's photo library, and may illustrate the same dish in other stores.

8. Who sees what

• Anyone: the store's page (name, menu, photos, opening hours, delivery area, average rating)
• The store: the name, delivery address, WhatsApp number and order of whoever ordered from it
• The partner courier: the street before accepting; after accepting, the name, full address and telephone for that order
• The customer: the progress of the order and the conversation with the store
• No one outside the review team: the checked business registration, the responsible person and the documents sent for the menu

9. Legal bases

• Performance of the contract: placing, preparing, delivering and tracking orders, and publishing stores
• Compliance with a legal obligation: retention of records, responding to authorities and consumer duties
• Legitimate interest: store approval, fraud prevention, security and service improvement
• Consent: WhatsApp notices and marketing, which may be withdrawn at any time

10. Sharing

We do not sell your data. We share only with essential processors (hosting, authentication, anti-fraud, moderation, support) under contract, and with authorities where required by law. See Sub-processors.

We use Google reCAPTCHA Enterprise to protect account access against abuse and automated login attempts. It runs invisibly at that step and sends usage data to Google — IP address, device and browser information, and on-page interactions — to compute a risk score; we do not use it for advertising. That processing is governed by Google's Privacy Policy and Terms of Service (policies.google.com/privacy and policies.google.com/terms).

11. The HZION group and centralised identity

iFOODLocal is a white-label brand served by HZION, the group's core platform. Your account, your identity and your profile data are created and held ONCE on HZION's central infrastructure — there is no per-brand copy — even though you registered and sign in on ifoodlocal.com.

HZION is operated by the SAME controller, GOMO CAPITAL MANAGEMENT LTD: this centralisation is not disclosure to a third party, which is why it does not appear in the processor list in the previous section. The infrastructure is globally distributed, so processing may take place in more than one country — see the international transfers section.

In practice: an account created on any brand in the group is the same account before HZION; a data-subject right you exercise applies to all of them at once; and deleting your account deletes the central record, not just the brand you signed up on. Questions: privacy@ifoodlocal.com.

Each brand may process data specific to its own activity — for example, the route and location of a trip, the delivery address of an order or the account of a legal case. That data is also held on HZION's central infrastructure, under the same controller, and is described, with purpose, legal basis and retention period, in the Privacy Policy of the brand on which you use that activity.

12. International transfers

Restricted transfers rely on UK GDPR safeguards: adequacy decisions, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the SCCs, or another valid mechanism.

13. How long we keep it

• Orders, conversations and ratings: for as long as the accounts exist and for the period for consumer claims (for the period set by the law of the user's country)
• If the customer deletes their account, name, telephone and address are erased from the orders; the store keeps only the items, the total and the payment method
• If the store owner leaves, the store and its orders are deleted
• Documents sent for the menu: deleted after reading; the extracted lines, within the short period stated above
• Access logs: for the period required by the law of the user's country

14. Your rights (Art. 15-22)

• Access a copy of your data
• Correct incomplete or out-of-date data
• Request erasure
• Restrict or object to processing
• Portability
• Withdraw consent
• Complain to the ICO at ico.org.uk

15. Security and breaches

We use encryption in transit and at rest, access control and continuous moderation. In the event of a breach with material risk, we will notify the ICO within 72 hours and inform you where required. Contact: privacy@ifoodlocal.com.

Private conversations and moderation. Private messages are end-to-end encrypted and the server that carries them cannot read them. To investigate reports and enforce the Terms and the Guidelines — for example grooming, scams or harassment —, your devices also keep a copy of your history key encrypted for the platform's moderation. With it, the support team can read, in a support session recorded in an audit trail, the account's kept history (up to 72 hours, according to the retention period chosen) and decide a block or a ban. Outside that session, nobody at the platform opens these messages.