Privacy Policy
Last updated: April 2026
Tarifoo ("we", "us", "our") operates the tarifoo.com food delivery marketplace. This policy explains what personal data we collect, why we collect it, and how you can exercise your rights under the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).
Information We Collect
Account data: When you create an account, we collect your name, email address, phone number, and password. If you check out as a guest, we store a session identifier linked to your order details. Order data: Delivery address, order contents, payment status, and order history. Location data: Your delivery address and, with your consent, your device location to help estimate delivery times. Device data: Browser type, operating system, IP address, and push notification tokens if you opt in. Communication data: Messages sent through in-app chat during active deliveries.
How We Use Your Data
We process your personal data to: • Process and deliver your food orders • Connect you with restaurants and delivery drivers • Send order status updates via push notification or email • Process payments through our payment provider • Improve our service based on aggregated usage patterns • Prevent fraud and ensure platform security • Comply with legal obligations Our legal bases for processing are: contract performance (ordering and delivery), legitimate interest (service improvement, security), consent (push notifications, analytics cookies), and legal obligation (tax records, fraud prevention).
Third-Party Services
We share data with the following service providers, all of which process data within the EU or under adequate safeguards: • Supabase — Authentication and database hosting (EU region). Stores your account and order data. • Mollie — Payment processing. Receives payment details necessary to complete transactions. Mollie is based in the Netherlands and PCI DSS compliant. • Mapbox — Maps and route calculation. Receives delivery addresses to compute routes and estimated delivery times. We do not sell your personal data to any third party.
Cookies
We use essential cookies to keep you logged in and maintain your session. With your consent, we may also use analytics cookies to understand usage patterns and marketing cookies to show relevant promotions. You can manage your cookie preferences at any time using the cookie settings banner at the bottom of the page. For more information, see our cookie categories in the consent banner.
Data Retention
Account data is retained for as long as your account is active. If you delete your account, we anonymise your personal data within 30 days, except where we are required by law to retain certain records (e.g., invoices for tax purposes, kept for 5 years). Guest session data is automatically deleted after 90 days of inactivity. Order history is retained in anonymised form for business analytics.
Your Rights
Under GDPR, you have the right to: • Access — Request a copy of all personal data we hold about you. • Rectification — Correct inaccurate or incomplete data. • Erasure — Request deletion of your personal data ("right to be forgotten"). • Portability — Receive your data in a machine-readable format (JSON). • Restriction — Limit how we process your data in certain circumstances. • Objection — Object to processing based on legitimate interest. • Withdraw consent — Revoke consent for analytics or marketing cookies at any time. You can exercise your access, portability, and erasure rights directly from your account settings. For other requests, contact us at privacy@tarifoo.com. We will respond within 30 days.
Phone Number Sharing
During an active delivery, your phone number may be shared with the assigned driver so they can contact you about the delivery (e.g., if they cannot find your address). The driver's phone number is also shared with you for the same purpose. This sharing is limited to the duration of the active delivery and is based on contract performance. Phone numbers are not stored beyond the delivery record.
Children's Privacy
Tarifoo is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us at privacy@tarifoo.com and we will promptly delete it.
Changes to This Policy
We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or through a prominent notice on our website. The "last updated" date at the top of this page indicates when the policy was most recently revised.
Contact Us
If you have questions about this privacy policy or wish to exercise your data protection rights, contact us at: Email: privacy@tarifoo.com You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.