Privacy Policy
Last updated: May 2025
Tarifoo is operated by Hamgley S.L. (CIF: B21863774), Calle del Peso, 6, Tarifa, 11380, Cádiz, España. Hamgley S.L. is the data controller for all personal data collected through this platform. Questions about this policy? Email us at privacidad@tarifoo.es.
What we collect and why
We collect only what we need to process and deliver your order. Delivery information — Your delivery location (address, pin drop, or GPS coordinates). Used to route your order to the correct driver and calculate your delivery fee. Retained for the duration of your order, then anonymised. Contact details — Your phone number, collected at checkout. Shared with your assigned driver for delivery coordination only. Not used for marketing. If you create an account, we also hold your email address. Order details — Items ordered, restaurant, timestamps, and payment status. Used to process your order, handle refunds, and resolve disputes. Payment data — Card payments are processed entirely by Mollie B.V. We do not store your card details. Mollie's privacy policy applies to payment data: mollie.com/privacy Usage data — Basic analytics to understand how the site is used (pages visited, errors encountered). No advertising or tracking profiles are built.
Your rights (GDPR)
You have the right to access, correct, or delete your personal data at any time. You can also request a copy of your data in a portable format, or object to certain types of processing. To exercise any of these rights, email privacidad@tarifoo.es. We'll respond within 30 days. If you have an account, you can also export or delete your data directly from your account settings. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Cookies
We use only necessary cookies to keep the site working (session management, language preference, cart state). We'll ask for your consent before setting any non-essential cookies.
Third-party services
We use the following services to operate the platform. Each has its own privacy policy. Supabase — database and authentication supabase.com/privacy Mollie B.V. — payment processing mollie.com/privacy Mapbox — maps and delivery routing mapbox.com/legal/privacy
Data retention
Guest order data is retained for 90 days after delivery, then anonymised. Registered account data is retained until you request deletion. Payment records are retained as required by Spanish tax law (4 years).
Changes to this policy
We'll update this page if our practices change and note the date above. For significant changes, we'll notify registered users by email.