Last updated: 3 October 2026

This policy explains what personal data Food Express Gran Canaria collects when you use our website or our app, why we use it, who we share it with and what your rights are. We only ask for the data we need to take your order and bring it to you.

1. Who is responsible for your data

Food Express Gran Canaria (NIF 42271292-Y)
Avenida de Gran Canaria, 32, 35100 San Bartolomé de Tirajana, Las Palmas, Spain
Email: oficina@foodexpressgc.com
Phone: +34 695 700 370

2. The data we collect

• Account data: your name, email address, phone number and password, and a profile photo if you add one. If you sign in with Google, Facebook or Apple, we receive your name and email address from that provider.
• Delivery data: the addresses you save, the map location you confirm and any instructions for the rider. If you allow it, the app uses your device's location to find your address; you can turn this off in your phone's settings at any time.
• Order data: what you order and from which restaurant, your notes for the kitchen, the amounts, any voucher used and how you paid.
• Payment data: card payments are processed by our payment provider, Stripe. We never see or store your full card number; we only keep a reference to a saved card and its last four digits.
• Messages: what you send us by email, phone or contact form.
• Technical data: the type of device, app version and language, your IP address, the identifier used to send you notifications, and basic records of how the service is used.

3. Why we use your data

• To provide the service you ask for (performance of a contract): creating and managing your account, taking your orders, passing them to the restaurant, delivering them, keeping you informed of their status, and handling payments, refunds and any problem with an order.
• To comply with the law (legal obligation): keeping the accounting and tax records we are required to keep and answering lawful requests from the authorities.
• To keep the service safe and improve it (legitimate interest): preventing fraud and misuse, fixing errors and preparing statistics that do not identify you.
• To send you offers and news by email or notification (your consent, or our legitimate interest when you are already a customer). You can say no at any time, as explained in section 6.

4. Who we share it with

We do not sell your data. We share only what each of these needs to do their part:

• The restaurant that prepares your order: your name, what you ordered and your notes.
• The delivery rider: your name, delivery address, phone number and delivery instructions.
• Service providers that work for us under contract: payment processing (Stripe), maps and address search (Google Maps), notifications and real-time order updates (including Google Firebase), email and text messages, and hosting and technical support.
• Google, Facebook or Apple, only if you choose to sign in with them.
• Public authorities, when the law requires it.

Some of these providers may process data outside the European Economic Area. When that happens, it is done with the safeguards required by data protection law, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

5. How long we keep it

We keep your account data while your account is open. If you delete your account, we delete or anonymise your personal data, except for the order and billing records we must keep for the period required by tax and commercial law, and anything we need to deal with a claim.

6. Your rights

You can ask us at any time to:

• see the data we hold about you and receive a copy (access and portability);
• correct data that is wrong (rectification);
• delete your data (erasure);
• stop or limit a particular use of it (objection and restriction);
• withdraw a consent you gave, without affecting what was done before.

You can do much of this yourself in the app: change your details in Account > Edit profile, delete your account from the same screen, and turn notifications on or off in Account > Notifications. For anything else, write to oficina@foodexpressgc.com and tell us what you need. We may ask you to confirm your identity, and we will reply within one month.

If you think we have not handled your data properly, you can also complain to the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply technical and organisational measures to protect your data against loss, misuse and unauthorised access: connections to our website and app are encrypted, and access to customer data is limited to the people who need it to do their job. No system is completely secure, so please choose a password you do not use anywhere else and tell us straight away if you think someone else has used your account.

8. Cookies

Our website uses only the cookies it needs to work: they keep your session and your basket, protect the forms you send and remember your language. We do not use advertising or tracking cookies; if that ever changes, we will ask for your consent first. The app does not use browser cookies: it keeps the same kind of information on your device.

9. Children

Our service is not directed at children. We do not knowingly collect data from anyone under 14; if you believe a child has given us their data, write to us and we will delete it.

10. Changes to this policy

We may update this policy when the service or the law changes. We will publish the new version here with its date and, if the changes are important, we will let you know in the app or by email.