Privacy Policy

Last updated: 2026-10-15

Prime Digital Solutions ("Take Away", "the Company", "we") is committed to protecting the privacy of users of its platform. This Privacy Policy describes how we collect, use, share, and protect your personal data, in accordance with applicable data protection regulations.

1. Data we collect

1.1 Account data

Name, email, phone number, and password (encrypted).
Login provider (Google, Microsoft, Facebook, Apple) when applicable.
Profile photo.

1.2 Customer data

Saved delivery addresses with GPS coordinates.
Payment methods (masked card number, brand, last 4 digits, expiry date).
Order history, carts, favorites, and loyalty points.
Reviews and ratings.
Anonymous browsing data (traffic source, approximate location, session) when visiting restaurant pages.

1.3 Restaurant data

Establishment information (name, address, coordinates, phone, email, hours).
Verification documents (licenses, health permits, tax ID).
Financial data (bank account, payment provider, statements, commissions, cash debts).
Employee information (name, email, phone, role, permissions, assigned branches, PIN code, schedules).
Catalog content (menus, prices, images, allergens, nutritional info).
Delivery zone configuration (radius, fee, schedule, 24-hour availability, assignment method).

1.4 Courier data

Identity documents (personal ID, driver's license, vehicle insurance, work permit).
Biometric facial data (capture for identity verification).
Vehicle data (type, make, model, license plate, photo).
Real-time GPS location during deliveries.
Financial data (earnings, withdrawals, debts, payment provider).
Delivery history, incidents, and contact attempts.

1.5 Financial and fraud prevention data

Financial statements, commission settlements, cash debts and deposits for restaurants and couriers.
Payment transaction data (status, amount, method, provider).
Withdrawal history and Platform payouts to couriers or restaurants.
Cash fraud detection data (risk level, fraud flags, administrative reviews, suspensions).
Audit logs (administrative actions, configuration changes, sensitive access).
Per-country pricing configuration and immutable record of prices applied to each order.

1.6 Operational and device data

For couriers: location while availability is active or a delivery is in progress, in order to assign, track, and confirm deliveries; device data; and delivery evidence such as delivery PIN confirmation and, where enabled, a signature or photograph.
For all users: device and connection data, such as operating system, app version, language, and notification token, required to deliver notifications and keep the service working.
Where identity or vehicle verification applies, the evidence submitted and the result of the verification, including automated validation steps, are processed.

1.7 Documents and evidence

Documents uploaded by establishments or couriers, such as licenses, permits, insurance, identity, or vehicle documents, together with the review decisions and notes associated with them.
Retention: verification evidence is kept while the account is active and for the period necessary to demonstrate compliance and to handle disputes.

1.8 Marketing and campaign data

Promotional initiative data (type, audience, budget, dates, status, metrics).
Campaign payment data (method, amount, status, transfer proof, payment session).
Campaign metrics (impressions, clicks, redemptions, attributed orders and revenue).

2. How we use your data

2.1 Service provision

Process and manage orders, payments, and deliveries.
Verify courier identity through biometric facial validation.
Confirm courier presence at the delivery point via GPS.
Manage the loyalty program and rewards.
Send multichannel notifications (push, WhatsApp, SMS, email) about order status.

2.2 Communication

Notify about order status, assignments, platform updates, and reminders.
Abandoned cart recovery with automatic reminders.
Customer support through tickets and chat.

2.3 Service improvement

Analyze aggregated and anonymous data to improve the platform, develop new features, and conduct market analysis.
Assist with operational queries and analytics through the integrated intelligent assistant.
Optimize courier assignment and dispatch escalation.

2.4 Security and fraud prevention

Detect and prevent cash handling fraud through courier behavior analysis.
Generate auditable financial statements and accurately reconcile commissions, fees, and payouts.
Maintain audit logs to ensure traceability of administrative actions and configuration changes.
Apply configurable debt limits and block operations when exceeded.

2.5 Artificial intelligence features

The platform offers optional AI-powered features, such as an in-app assistant, marketing content generation, and operational recommendations.
To answer a request, limited context about the account and about the subject of the request may be processed, for example a product, an order, or a report. Information submitted to an AI feature is used to produce the requested result and to operate the feature; it is not used to advertise third-party products.
Automated signals, such as risk or anomaly indicators, support human decisions. They do not by themselves impose a penalty; escalations and restrictions are applied through the platform's review processes, and users may contact support to contest a decision.
AI-generated marketing content is the responsibility of the establishment that approves and publishes it.

2.6 Notifications and consent

Transactional messages, such as order status, payment, delivery, and security messages, are part of the service and are delivered through the channels available for the account, which may include push, in-app, email, SMS, or WhatsApp.
Promotional messages and cart or promotion reminders are sent only when consent has been given. Consent may be withdrawn at any time from the notification settings in the app or by opting out on the channel used.
Withdrawing consent for promotional messages does not affect service or security messages.

3. Legal basis for processing

We process your personal data based on:

The performance of a contract or pre-contractual steps at your request.
Compliance with legal obligations.
The Company's legitimate interest in providing and improving the service.
Your consent, where required (e.g., marketing notifications).

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal.

4. Data sharing

We may share your data with:

Payment providers: to process electronic transactions, subject to their own privacy policies.
Messaging providers: to send push, SMS, WhatsApp, and email notifications.
Competent authorities: when required by law or court order.
Map providers: for geolocation and navigation services.

We do not sell or transfer your personal data to third parties for commercial purposes.

5. Data retention periods

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:

Account data: while the account is active and up to 30 days after deletion.
Order and transaction history: up to 5 years for audit and claims purposes.
Courier biometric data: up to 3 years after the relationship ends, or until definitive verification.
Audit logs: up to 7 years.
Anonymous browsing data: up to 12 months.

6. Your rights

As a data subject, you have the right to:

Access: request information about the data we process about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data, unless a legal retention obligation applies.
Restriction: request restriction of processing in certain circumstances.
Portability: receive your data in a structured format and transfer it to another controller.
Objection: object to processing based on legitimate interests.
Withdrawal of consent: at any time, without retroactive effect.

To exercise these rights, contact the Company through the Platform's support center. We will respond to your request within a maximum of 30 days.

7. Security

We apply appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, role-based access control, and periodic audits. Biometric facial verification uses capture exclusively for identity validation, without storing reversible biometric templates.

8. International transfers

When your data is transferred to providers located outside your jurisdiction, the Company will adopt adequate safeguards to ensure an equivalent level of protection, in accordance with applicable regulations.

9. Minors

The Platform is not directed at minors under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us for immediate deletion.

10. Changes to this policy

The Company may update this Privacy Policy, communicating substantive changes with reasonable notice. We recommend reviewing it periodically.

11. Cookies and similar technologies

The Platform uses cookies and similar technologies to maintain the session, remember preferences (such as language and dark mode), and analyze service usage. You can manage cookies from your browser settings. Essential cookies for the service to function cannot be disabled.

12. Contact

For any inquiry regarding this policy or the processing of your data, you may contact the Company through the Platform's support center.