Privacy Policy

Easytaker is operated by Cerebrum Technology Software Industry and Trade Inc. ("we", "us"), which is the data controller for the personal data described in this policy.

Privacy contact: info@cerebrumtechnologies.com

Restaurants using our platform act as separate controllers for the order information they receive from us in order to prepare and deliver your order.

What we hold depends on how you reach us.

All ordering channels

• Your name and phone number
• Your delivery address and any delivery notes you provide
• The items you order, the options you choose, prices and order history
• Allergen and dietary information, where you choose to give it, so that we can warn you about items that conflict with it

Website accounts

• Your email address and a protected (hashed) form of your password
• Delivery addresses you choose to save

WhatsApp ordering

• Your WhatsApp phone number, and your WhatsApp profile name where it is made available to us
• The content of the messages you send to the restaurant's WhatsApp number
• Any voice messages you send, which are converted to text so that your order can be understood

You do not need to create an account to order over WhatsApp. We keep a limited profile linked to your phone number so that your saved address and any allergen information are available on later orders.

Voice ordering

• Your caller phone number
• The audio of your call, which is processed so that the assistant can understand and respond to your order

Abuse prevention

Where a restaurant blocks a phone number, we record that number and the reason given so that further orders from it can be refused.

Allergen information concerns your health. Both UK and Turkish data protection law treat this as a special category of personal data that requires additional protection.

We record it only where you choose to provide it, and we use it for a single purpose: to check the items in your order against it and warn you before the order is placed. We do not use it for marketing or profiling, we do not use it to make automated decisions about you, and we do not share it with anyone other than the restaurant preparing your order.

You may ask us to delete this information at any time, and you can continue to use the service without providing it.

• Performance of a contract — to take, confirm and pass on your order and to keep you informed about it.
• Explicit consent — for allergen and dietary information, which you provide voluntarily and may withdraw at any time.
• Legitimate interests — to prevent abusive or fraudulent orders and to keep the service secure and functioning correctly.
• Legal obligation — where we are required to retain records, for example for tax and accounting purposes.

We do not sell your personal data and we do not use it for advertising. We share it only with the following categories of recipient.

• The restaurant you order from — your name, phone number, delivery address, order contents and any allergen warnings, so that it can prepare and deliver your order.
• OpenAI, L.L.C. — our artificial intelligence provider. The content of your messages, the text of your voice messages, and the audio of your phone calls are processed by OpenAI, together with the relevant restaurant's menu, so that the assistant can understand your order and reply to you. Account passwords and payment details are never sent.
• Meta Platforms Ireland Ltd. — where you order over WhatsApp, your messages are carried over the WhatsApp Business Platform. Meta's own privacy policy also applies to that carriage.
• Twilio Inc. — carries voice calls to and from the restaurant's telephone number.
• Our hosting and infrastructure providers — which store and process the data on our behalf and under our instructions.

Some of the recipients above are established outside the UK and Türkiye, including in the United States. Where personal data is transferred internationally, we rely on the transfer safeguards required by applicable law, including standard contractual clauses with the recipient. You may request further details of these safeguards using the contact details above.

We keep personal data only for as long as it is needed for the purposes described in this policy, and then delete it or render it anonymous.

• The working record of an ongoing WhatsApp or voice conversation is kept only while that conversation is active and is discarded shortly afterwards.
• Order records are kept so that you and the restaurant have a record of the order and so that we can meet our accounting and tax obligations.
• Accounts and saved profiles are kept until you ask us to delete them or close your account.
• Records of blocked numbers are kept for as long as needed to prevent repeat abuse.

Subject to the conditions set out in applicable law, you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it.

To exercise any of these rights, please contact us using the details above. If you are not satisfied with our response, you may complain to the UK Information Commissioner's Office (ico.org.uk) or, in Türkiye, to the Personal Data Protection Authority (kvkk.gov.tr).

Passwords are stored only in a protected, non-reversible form. Traffic between your device and our servers is encrypted in transit, and access to production systems is limited to personnel who require it.

Our service is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

If we change how we use personal data we will update this page and revise the date shown at the top. Where changes are significant we will communicate them through the service.