Privacy Policy – Gustoor

Last updated: 12/09/2025
Publisher: SAS Veggie Lille – Gustoor
Registered office: 34 place du Général De Gaulle, Bureau 3, 59000 Lille – RCS Lille 812083897

 

1. Purpose

This Privacy Policy informs you about how Gustoor collects, uses, stores, and protects your personal data when you use our website, application, and services, whether you are a customer or a partner restaurant.

 

2. Data Collected

2.1 For Customers

• Identification: name, surname, email, phone number, delivery address.
• Orders: purchase history, food preferences, selected restaurants.
• Payment: banking details (processed by PCI-DSS certified providers, never stored by Gustoor).
• Browsing: IP address, cookies, login data.

2.2 For Partner Restaurants

• Identification and business details: name, surname, email, phone, company name, Kbis, licenses, health registration.
• Bank details: for payment transfers.
• Platform usage: processed orders, performance metrics, satisfaction indicators.
• Contractual data: documents provided during onboarding and partnership management.

 

3. Purposes of Processing

For Customers

• Manage your account and orders.
• Ensure meal preparation and delivery.
• Handle customer service and disputes.
• Personalize your experience and send offers (if consent is given).

For Partner Restaurants

• Manage contractual and commercial relations.
• Process billing and payment transfers.
• Monitor performance, quality audits, and training.
• Marketing communication and business support.

 

4. Legal Bases

• Contract performance (orders, billing, partnership).
• Legal obligations (tax, health, accounting).
• Gustoor’s legitimate interests (security, service improvement, fraud prevention).
• Consent (marketing communications, non-essential cookies).

 

5. Data Recipients

Your data is accessible only to:

• Gustoor’s internal teams and technical providers.
• Partner restaurants (for customer orders).
• Delivery personnel (for meal delivery).
• Secure payment providers.
• Competent authorities, if required by law.

We never sell your data.

 

6. Data Retention

• Customers: account and order data retained for 5 years (legal obligations).
• Partner restaurants: contractual and billing data retained for 10 years (accounting obligations).
• Payments: retained only for the duration of the transaction (by the provider).
• Marketing data: 3 years after the last contact.

 

7. Security

We implement strict technical and organizational measures (encryption, secure servers, restricted access).
In the event of a data breach, users and competent authorities will be notified within 72 hours.

 

8. Your Rights (GDPR)

You have the following rights:

• Access your data.
• Correct your information.
• Request deletion (“right to be forgotten”).
• Restrict processing.
• Object to certain uses (e.g., marketing).
• Request data portability.

To exercise your rights: support@gustoor.com
Postal address: SAS Veggie Lille – Gustoor, 34 place du Général De Gaulle, Bureau 3, 59000 Lille, France

You may also lodge a complaint with the CNIL (www.cnil.fr).

 

9. Cookies

Our platform uses cookies for:

• Proper functioning of the website and application.
• Traffic and analytics.
• Personalization of the experience (if accepted).

A cookie banner allows you to manage your preferences upon your first visit.

 

10. Changes

This Privacy Policy may be updated at any time.
Any significant changes will be communicated via the application, website, or email.