Privacy policy
PRIVACY POLICY
Last Updated: 8 August 2026
This Privacy Policy explains how efood UK ("efood UK", "we", "us" or "our") collects, uses, stores and protects personal information when you use our website, mobile applications, online ordering platform and related services (collectively, the "Platform").
We are committed to protecting your privacy and handling personal information responsibly and transparently.
This Privacy Policy applies to:
Customers who use efood to browse restaurants or place orders;
Restaurants and their authorised representatives who use the Platform;
Visitors to our website; and
Individuals who communicate with us or use our support services.
1. Who We Are
For the purposes of applicable data protection legislation, efood is the data controller for the personal information we process in connection with the operation of the Platform, except where we act as a processor on behalf of a Restaurant.
Legal Company Name: [INSERT LEGAL COMPANY NAME]
Registered Office: [INSERT REGISTERED OFFICE ADDRESS]
Company Number: [INSERT COMPANY NUMBER]
Website: [INSERT WEBSITE]
Privacy Contact Email: [INSERT PRIVACY EMAIL]
For the purposes of this Privacy Policy, "UK Data Protection Legislation" means applicable UK data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
2. Information We Collect
Depending on how you use the Platform, we may collect the following information.
2.1 Customer Information
When you create an account or place an Order, we may collect:
Full name;
Email address;
Telephone number;
Delivery address;
Billing information;
Order history;
Restaurant and menu selections;
Delivery instructions;
Account login information;
Customer support communications;
Reviews and ratings;
Information relating to refunds or complaints; and
Other information you voluntarily provide.
2.2 Restaurant Information
If you register a restaurant with efood, we may collect:
Restaurant name;
Business address;
Contact details;
Owner or authorised representative details;
Email address;
Telephone number;
Company information;
Payment and bank account information;
VAT information where applicable;
Menu and pricing information;
Restaurant opening hours;
Delivery information;
Account login information;
Communications with efood; and
Other information required to operate the Restaurant account.
2.3 Payment Information
When you make a payment through the Platform, payment information may be processed by our third-party payment service providers.
Depending on the payment method used, we may receive limited information such as:
Payment status;
Transaction reference;
Last four digits of a payment card, where provided by the payment processor;
Payment amount;
Currency; and
Information relating to refunds or chargebacks.
We do not generally store complete payment card numbers or security codes on our own systems where payment processing is handled by a third-party payment provider.
3. Information Collected Automatically
When you access the Platform, certain technical information may be collected automatically, including:
IP address;
Browser type;
Device type;
Operating system;
Device identifiers;
Approximate location derived from IP address;
Pages or screens viewed;
Date and time of access;
Referral information;
Platform usage information; and
Error and diagnostic information.
This information may be collected through cookies, analytics technologies, server logs and similar technologies.
4. Cookies
We use cookies and similar technologies to operate and improve the Platform.
Cookies may be used for purposes including:
Essential website functionality;
Login and account functionality;
Remembering preferences;
Security and fraud prevention;
Analytics;
Understanding how users interact with the Platform; and
Marketing, where applicable and where appropriate consent has been obtained.
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can manage or withdraw certain cookie preferences through our cookie settings or your browser settings.
For further information, please see our Cookie Policy.
5. How We Use Personal Information
We may use personal information for the following purposes:
Providing the Platform
We use information to:
Create and manage accounts;
Allow Customers to browse Restaurants;
Process Orders;
Send Orders to Restaurants;
Facilitate payments;
Provide delivery information to Restaurants;
Provide customer support;
Process refunds;
Manage Restaurant accounts; and
Provide other services requested by you.
Communications
We may use your contact details to:
Confirm Orders;
Provide Order updates;
Contact you about delivery issues;
Respond to support requests;
Send important account or service notifications; and
Communicate with Restaurants regarding Orders.
Security and Fraud Prevention
We may process information to:
Detect and prevent fraudulent transactions;
Protect accounts;
Investigate suspicious activity;
Prevent misuse of the Platform;
Protect our systems; and
Maintain Platform security.
Improving the Platform
We may analyse usage information to:
Improve functionality;
Identify technical problems;
Develop new features;
Understand customer behaviour; and
Improve Restaurant and Customer experiences.
Legal and Regulatory Requirements
We may process information where necessary to:
Comply with legal obligations;
Respond to lawful requests from authorities;
Establish, exercise or defend legal claims;
Maintain financial and accounting records; and
Prevent or investigate unlawful activity.
6. Legal Bases for Processing
Under UK GDPR, we rely on one or more of the following lawful bases when processing personal information.
Contract
We process information where it is necessary to provide services you have requested, including processing Orders and managing accounts.
Legal Obligation
We may process information where necessary to comply with a legal or regulatory obligation.
Legitimate Interests
We may process information where necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms.
Examples may include:
Platform security;
Fraud prevention;
Service improvement;
Customer support;
Business administration; and
Protecting our legal rights.
Consent
Where required, we will rely on your consent.
For example, certain marketing communications or non-essential cookies may require consent.
Where processing is based on consent, you may withdraw your consent at any time.
7. Sharing Personal Information
We may share personal information with third parties where necessary to operate the Platform.
Restaurants
When a Customer places an Order, we may provide the Restaurant with information necessary to prepare and deliver that Order.
This may include:
Customer name;
Delivery address;
Telephone number;
Order details;
Delivery instructions; and
Relevant information needed to complete the Order.
Restaurants must handle Customer information in accordance with applicable data protection laws.
Payment Providers
Payment information may be shared with payment service providers to process transactions, refunds and chargebacks.
Technology Providers
We may use third-party providers for:
Hosting;
Cloud storage;
Database services;
Email;
SMS;
Customer support;
Analytics;
Security;
Fraud prevention;
Software development; and
Platform infrastructure.
These providers may process personal information on our behalf and are required to comply with appropriate contractual and security requirements.
Professional Advisers
We may share information with professional advisers such as lawyers, accountants, auditors and insurers where reasonably necessary.
Authorities and Law Enforcement
We may disclose information where required by law or where reasonably necessary to:
Comply with legal obligations;
Prevent fraud or crime;
Protect our rights;
Protect the safety of individuals; or
Respond to lawful requests from authorities.
8. Restaurant Data Protection Responsibilities
Restaurants using efood may receive Customer personal information in order to fulfil Orders.
Restaurants must:
Use Customer information only for legitimate purposes connected with fulfilling Orders and providing related services;
Keep Customer information secure;
Not sell Customer information;
Not use Customer information for unrelated marketing unless they have a lawful basis to do so;
Not retain Customer information longer than necessary;
Comply with applicable UK data protection legislation; and
Notify efood promptly of relevant personal data breaches where required under their agreement with efood.
Where appropriate, efood may enter into separate data processing or data sharing arrangements with Restaurants.
9. Marketing
We may send marketing communications where permitted by applicable law.
Marketing communications may include:
Email;
SMS;
Push notifications; and
Other electronic communications.
You may unsubscribe from marketing communications at any time by:
Using the unsubscribe link included in an email;
Adjusting your account preferences; or
Contacting us.
Service-related communications, such as Order confirmations, delivery updates, security notifications and important account information, are not marketing communications and may continue even if you opt out of marketing.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Retention periods may depend on:
The type of information;
The purpose for which it was collected;
Legal and regulatory requirements;
Accounting and tax requirements;
Fraud prevention requirements;
The existence of an ongoing relationship with you; and
Potential or actual legal claims.
When information is no longer required, we will securely delete it or anonymise it where appropriate.
11. International Data Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place as required by UK data protection legislation.
These safeguards may include:
UK adequacy regulations;
International Data Transfer Agreements;
UK Addendums to approved standard contractual clauses; or
Other lawful transfer mechanisms.
12. Data Security
We take reasonable technical and organisational measures to protect personal information against:
Unauthorised access;
Accidental loss;
Destruction;
Misuse;
Alteration; and
Unauthorised disclosure.
Security measures may include encryption, access controls, authentication, monitoring, backups and other appropriate safeguards.
However, no internet-based system can be guaranteed to be completely secure.
13. Your Data Protection Rights
Subject to applicable law, you may have the right to:
Access
Request a copy of the personal information we hold about you.
Correction
Ask us to correct inaccurate or incomplete information.
Erasure
Ask us to delete your personal information in certain circumstances.
Restriction
Ask us to restrict the processing of your information in certain circumstances.
Data Portability
Request certain personal information in a structured, commonly used and machine-readable format.
Object
Object to certain types of processing, including processing based on legitimate interests and certain forms of direct marketing.
Withdraw Consent
Where we rely on consent, you may withdraw your consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
14. How to Exercise Your Rights
To exercise your data protection rights, please contact us using the details below:
Privacy Email: [INSERT PRIVACY EMAIL]
We may need to verify your identity before completing a request.
We will normally respond to valid requests within the time period required by applicable data protection legislation.
In some circumstances, we may be legally permitted to refuse a request or charge a reasonable fee.
15. Children's Privacy
The Platform is not intended for children under the age of 18 to create accounts or place Orders.
We do not knowingly collect personal information from children for the purpose of creating customer accounts.
If you believe that a child has provided personal information to us, please contact us.
16. Third-Party Websites
The Platform may contain links to websites, applications or services operated by third parties.
We are not responsible for the privacy practices of third-party websites.
We recommend reviewing the privacy policies of third-party services before providing them with personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make significant changes, we may provide notice through the Platform or by other appropriate means.
The updated Privacy Policy will be published on this page with a revised "Last Updated" date.
18. Complaints
If you have concerns about how we process your personal information, please contact us first so that we can investigate the matter.
You also have the right to complain to the UK's data protection regulator.
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
The ICO regulates data protection and privacy in the United Kingdom.
19. Contact Us
If you have questions about this Privacy Policy or how we process personal information, please contact us:
efood
Legal Company Name: DOMAINTUBE LIMITED
Registered Office: 93 BROAD LANE LONDON N15 4DW
Company Number: 12832644
Website: www.efood.uk.com
Privacy Email: admin@efood.uk.com
By using the efood UK Platform, you acknowledge that you have read and understood this Privacy Policy.