PlatesToEat ("we", "us") is a local food-ordering marketplace operated by EasyPointPOS. It lets you order from independent local restaurants on our website and in the PlatesToEat app. This policy explains what we collect, why, and the choices you have.
What we collect
- Account details — your name, email address, mobile phone number and a securely hashed password, if you create an account.
- Order details — what you order, from which restaurant, pickup or delivery choice, delivery address, notes, and the time of your order.
- Payment details — card details you enter at checkout are sent to the restaurant's payment processor to authorize your order. If you choose to save a card, the card number and expiry are stored encrypted; we never store your security code (CVV).
- Zip code — so we can show restaurants that serve your area.
- Device and usage data — basic technical information (such as browser or app version) needed to run and secure the service.
- Notification details — only if you allow notifications in the app: a notification token and an install ID for your device, its platform and app version, your notification choices (order updates, messages, deals) with when you turned deals on or off, and your device's time zone, so deals are never sent at night.
How we use it
- To place your order with the restaurant you chose, and to let it prepare, deliver and contact you about that order.
- To verify your phone number with a one-time text-message code when you sign up or sign in.
- To show your order history and let you reorder.
- To prevent fraud and keep accounts secure.
- To send you marketing messages only if you opted in. You can opt out at any time.
- To send the notifications you allowed: updates on orders you placed, messages from the restaurant about your order, and, only if you turn on deals, offers from restaurants you have ordered from or that serve the zip code you chose. You can turn each kind off in the app or in your phone's settings.
Who we share it with
- The restaurant you order from receives your name, contact details and order so it can fulfil it.
- Payment processors receive card details to authorize payment.
- Delivery couriers receive your name, phone and delivery address when your order is delivered.
- Service providers who send text messages and host our servers, under contract and only to provide the service.
We do not sell your personal information.
Your choices and account deletion
You can update your details at your next checkout, remove a saved card, and delete your account at any time from Account → Delete account in the app, or by following the steps at PlatesToEat account deletion. Deleting your account removes your profile, phone, saved address and saved card from PlatesToEat, and the notification details of devices linked to it. Notification details for a device that has not opened the app in 180 days are deleted automatically. Restaurants keep their own records of orders you placed, as required for accounting, refunds and tax.
Security
Data is sent over encrypted connections (HTTPS). Passwords are hashed and saved cards are encrypted at rest.
Children
PlatesToEat is not directed to children under 13, and we do not knowingly collect their information.
Changes
If we change this policy we will update the date above.
Contact
Questions or requests: [email protected]