Last updated: 16 August 2026
Information we process
The service provider processes the information needed to provide the service, including a customer's name, phone number, delivery address, order details, payment references supplied by the payment provider, and an email address if the customer supplies one through a connected sign-in method.
The purpose of processing personal data is to manage customer accounts and orders, collect payment, deliver the goods, and contact the customer about an order. Order and delivery notifications are sent by SMS. EasyEats does not currently use email for order confirmation or customer support.
EasyEats sends product-marketing SMS only where separate permission has been recorded, including the source, basis, evidence, and date of that permission. Marketing messages identify EasyEats and explain how to opt out. A customer can withdraw permission at any time by replying STOP or contacting EasyEats; the withdrawal is recorded and blocks future marketing campaigns. Marketing permission is not required to place an order or receive transactional delivery messages.
Website analytics and Google advertising
EasyEats uses Vercel Web Analytics to understand aggregate use of the public website, such as visited pages, referrers, device types, and ordering funnel events. We configure these events without names, phone numbers, delivery addresses, account identifiers, payment identifiers, or other information that directly identifies a customer. Vercel Web Analytics is separate from the optional Google advertising described below.
When Google advertising is enabled on this website, Google advertising tags are used only with your consent. We do not load Google advertising tags or send Google advertising data before you select Allow Google advertising.
After consent, Google may process information such as the page and referring site, browser and device information, advertising click identifiers, your consent status, and non-personal conversion events. A confirmed-order event can include the order value, currency, order type, selected meal types, and a Stripe Checkout session reference used to prevent duplicate conversion counting. We do not intentionally send Google a customer's name, phone number, delivery address, account identifier, card information, or other payment details.
The purpose is to measure whether advertising leads to orders, understand the paths visitors take through the public website, and improve advertising campaigns. The legal basis for this optional processing is your consent. Refusing Google advertising does not affect your ability to browse the site or place an order.
Your Google advertising choice is stored in your browser's local storage for 180 days so the website can respect it. If you consent, Google tags may set or read cookies for advertising measurement. You can withdraw or change your choice at any time through Google privacy settings in the website footer. When consent is withdrawn, EasyEats stops loading Google advertising tags and attempts to remove first-party Google analytics and advertising cookies from this website.
Google services are provided by Google Ireland Limited for users in the European Economic Area. Google may process data in other countries using the safeguards described in Google's Privacy Policy.
Retention and your rights
The service provider retains personal data for one year after the last order is placed.
Individuals have the right to access, correct, delete, or restrict the use of their data by contacting EasyEats by SMS at +372 82156121. Where processing is based on consent, individuals may withdraw that consent at any time without affecting processing that occurred before withdrawal.
Data controller and service partners
The processing of personal data is carried out for the purpose of fulfilling the contract with the customer. The responsible data controller is EasyEats (Tomberg Invest OÜ), reachable by SMS at +372 82156121.
We may disclose your personal data in good faith to trustworthy partners for the purpose of providing courier services, information technology-related services, or other services necessary for the transaction. We do not sell, trade, or rent your personal information to third parties.
Complaints
Individuals have the right to file a complaint with Data Protection Inspectorate (Andmekaitse Inspektsioon) at info@aki.ee if their rights as data subjects have been violated during the processing of data.