This Privacy Policy explains how Histone Solutions Pvt Limited, operator of GoToEat ("GoToEat", "we", "us", or "our"), collects, uses, discloses, and safeguards your information when you use our restaurant management platform, including our point-of-sale system, online ordering, dashboards, and related websites and services (collectively, the "Services"). This policy applies to the GoToEat platform itself and not to the independent policies of restaurants that use our Services.
1. Information We Collect
Information you provide
- Account information: name, email address, phone number, business name, and billing details when you register or subscribe.
- Order information: when you order from a restaurant that uses the Services, your name, phone number, email address, delivery address, order details and payment status.
- Payment information: card and wallet details are entered with and held by our licensed payment service providers. We receive only a payment reference, the amount and the payment method used, never the full card number, CVV code or wallet PIN.
- Content: menus, products, branch details, and other information you add while operating your account.
- Support communications: messages you send to our support team.
Information collected automatically
- Usage data: pages visited, features used, and actions taken within the Services.
- Device and log data: IP address, browser type, operating system, and timestamps.
- Cookies and similar technologies: used to keep you signed in and to understand how the Services are used.
Restaurants' customers
When you order from a restaurant through the Services, we process your order information on behalf of that restaurant so it can prepare, deliver and support your order. The restaurant is responsible for how it uses your information for its own purposes, such as marketing; contact the restaurant directly about its own privacy practices.
2. How We Use Your Information
- To provide, operate, and maintain the Services.
- To process subscriptions, orders, payments, refunds, and transactions.
- To communicate with you about your account, updates, and support requests.
- To improve and personalize the Services and develop new features.
- To detect, prevent, and address security issues, fraud, and abuse.
- To comply with legal obligations.
3. How We Share Information
We do not sell your personal information. We may share information with:
- Service providers who help us operate the platform, under appropriate confidentiality obligations (see “Third-Party Processors” below).
- Legal and safety authorities when required by law or to protect rights, property, or safety.
- Successors in connection with a merger, acquisition, or sale of assets.
Third-Party Processors
The Services currently rely on the following third parties to process information on our behalf:
- Payment service providers and banks: Processing card, bank transfer and mobile wallet payments (such as Raast, JazzCash and Easypaisa) for subscriptions and online orders. Card details are entered with and held by the licensed payment provider; we never store full card numbers, CVV codes or wallet PINs.
- Google Gemini: AI-assisted generation of menu, website and image content when you use AI features. The prompts and content you submit are sent to Google.
- Google Maps: Displaying restaurant locations on maps when a restaurant enables a map.
- Google and Facebook sign-in: Optional social login for customers when a restaurant enables it; we receive your name, email address and profile identifier.
- Email delivery provider: Sending transactional emails such as account, order and password-reset messages.
4. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.
5. Data Security
We implement administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing. To exercise these rights, contact us using the details below.
7. Children's Privacy
The Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy, contact us at info@histone.com.pk or write to Histone Solutions Pvt Limited, Office #305, 3rd Floor, Talha Heights, 6th Road, Rawalpindi, Pakistan.