1. Who we are

This policy explains how African Restaurant Estonia processes information through its website. The owner should add the full legal entity name and a dedicated privacy contact before relying on this as a formal legal notice.

2. Information we process

Depending on how you use the website, we may process your name and email address; food-order contact, fulfilment, delivery, item, total and status information; and catering or Gift Box enquiry details.

3. Accounts and guest orders

You may create a customer account or continue as a guest where available. Guest order details are needed to process and communicate about the order. Guest sessions use an HTTP-only browser cookie and are not used for analytics.

4. Google Analytics

If you choose “Accept analytics”, the website uses Google Analytics 4 to measure anonymous website visits and page views, including the page path and page title. Analytics is not loaded before consent, is disabled on local and preview environments, and is excluded from the admin area. We do not send customer names, email addresses, phone numbers, delivery addresses, payment information or order contents to Google Analytics.

Your analytics choice is stored in this browser’s local storage under an analytics-consent setting. Select “Privacy settings” on the website to change or withdraw your choice. Rejecting analytics does not affect authentication, the cart, guest sessions or ordering.

5. Why we use information

• to process and manage food orders;
• to contact you about an order or enquiry;
• to manage customer accounts;
• to protect the service against fraud and abuse;
• to administer and improve the restaurant service; and
• to understand ordering activity and service needs.

6. GDPR and legal bases

For people in Estonia and the European Economic Area, processing may be based on taking steps requested before an order, performing that arrangement, legitimate interests, legal obligations, or consent where consent is requested. The applicable basis depends on the processing activity.

7. Sharing and retention

We do not sell customer information. Information may be shared only as needed to provide requested services or where lawful disclosure is required. We retain information only for as long as reasonably necessary for order and service administration, customer support, applicable legal or accounting obligations, and dispute or security purposes. Specific retention periods and any automated deletion schedule should be confirmed by the owner.

8. Your rights

Subject to applicable law, you may have rights to access, rectify, erase or restrict processing, object to certain processing, receive portable data where applicable, and withdraw consent. You may also lodge a complaint with the competent supervisory authority. Contact us to exercise a right or ask a question.

9. Security

We take reasonable care to protect the information we hold. No online service can be guaranteed completely secure, so please use care when submitting information online.

10. Updates and contact

We may update this policy when the website or processing changes. The updated date is shown at the top of this page. The owner should provide the final legal entity, privacy contact and supervisory-authority details before production legal review.