Privacy Policy

Application & onboarding data: business name, contact name, email, phone, city, country, cuisine, current delivery platforms, kitchen photos and uploaded documents (licences, ID where required).

Account data: email, hashed password, role, authentication tokens.

Operational data: orders, payouts, ratings and other performance metrics linked to the partnership.

Technical data: IP address, browser, device, pages viewed, referrer, cookies and similar identifiers.

Marketing data: pages you visit, calculator inputs and form submissions tracked via Google Analytics 4 and Meta Pixel where these are enabled.

Performance of the partner agreement (Art. 6(1)(b) GDPR) — to evaluate applications, onboard partners, run the service, calculate and pay out earnings.

Legitimate interests (Art. 6(1)(f) GDPR) — to secure our systems, prevent fraud, improve the product and measure conversion. We have balanced these interests against your rights.

Consent (Art. 6(1)(a) GDPR) — for non-essential analytics and marketing cookies, and for marketing communications. You can withdraw consent at any time.

Legal obligation (Art. 6(1)(c) GDPR) — to keep accounting and tax records and respond to lawful requests.

Processors acting on our instructions: cloud hosting (Cloudflare, EU/EEA regions where available), database & auth provider, transactional email provider, document storage, analytics (Google Analytics 4, Meta Pixel).

Delivery marketplaces where the Partner has chosen to be listed (e.g. Wolt, Bolt Food, Foodora, Uber Eats, Deliveroo, Talabat, Glovo) — strictly to operate the Partner's listings.

Professional advisors, auditors and authorities where required by law.

We do not sell personal data.

Some processors are located outside the EEA. Where this is the case we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (2021/914) together with appropriate supplementary measures.

Application data of unsuccessful applicants: up to 12 months from the last interaction, then deleted.

Partner account & operational data: for the term of the agreement and up to 10 years after termination, where required by Czech accounting and tax law.

Marketing analytics: up to 26 months (Google Analytics 4 default), or until consent is withdrawn, whichever is shorter.

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, the right to data portability and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, email sales@foodies-only.com. We respond within one month.

You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, www.uoou.cz) or your local supervisory authority.

We use strictly necessary cookies to keep you signed in and to remember your language. Analytics and marketing cookies (Google Analytics 4, Meta Pixel) are only loaded where applicable consent has been given. You can clear cookies in your browser at any time.

We apply industry-standard technical and organisational measures: TLS in transit, encryption at rest, role-based access, row-level security on our database, audit logs, least-privilege admin accounts and regular review.

Our services are intended for businesses. We do not knowingly collect personal data from children under 16.

We may update this Policy. Material changes will be notified by email or via the partner portal at least 14 days before they take effect.

Foodies Only Holding s.r.o., IČO 23523387, Prague, Czech Republic. Data protection requests: sales@foodies-only.com.