Last updated: August 9, 2026
Hestaurant values the privacy, security, and protection of its users’ personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the Hestaurant Customer App and related services.
By using the application or Hestaurant services, you acknowledge the practices described in this Privacy Policy.
1. About Hestaurant
Hestaurant is a technology platform that allows customers to digitally interact with partner establishments, view menus, place and track orders, use table-related features, and, when available, make payments through the application.
Hestaurant acts as an intermediary platform between users and establishments. Certain services, orders, payments, and interactions may directly involve the establishment selected by the user.
2. Information We Collect
Depending on how you use Hestaurant, different categories of information may be collected.
2.1. Registration and Identification Information
We may collect information necessary to create, maintain, and secure your account, including:
- Name;
- Email address;
- Phone number;
- Profile photo, when provided;
- CPF or CNPJ, when required for certain features or payments;
- Information necessary for authentication;
- Technical identifiers associated with the account.
Account access may use phone verification or other authentication mechanisms made available by Hestaurant.
2.2. Order and Establishment Usage Information
When you use Hestaurant to place orders or interact with an establishment, we may record information such as:
- Selected or visited establishment;
- Products and items requested;
- Quantities;
- Order amounts;
- Notes added to the order;
- Date and time of the request;
- Table associated with the order, when applicable;
- Order status;
- Order history;
- Information necessary for customer service and issue resolution;
- Information related to your use of the services at that establishment.
2.3. Payment and Transaction Information
When payments are made through the platform, certain information may be processed by specialized payment-processing companies.
Depending on the payment method used, information may include:
- Transaction identification;
- Payment status;
- Transaction history;
- Information necessary to process the transaction;
- Card information, when applicable;
- Pix keys or information related to the payment method used;
- CPF or CNPJ, when required for certain transactions.
Complete card information and other sensitive financial information may be processed directly by the applicable payment provider, such as Stripe, in accordance with its own privacy and security policies.
Hestaurant does not request that users provide complete card information through unauthorized channels.
2.4. Usage and Device Information
We may collect technical information necessary for the operation, security, maintenance, and improvement of the application, including:
- Device type and model;
- Operating system;
- Application version;
- IP address;
- Technical identifiers;
- Connection data;
- Error and failure logs;
- Information about the use of and interaction with features;
- Records related to access to and use of the platform.
2.5. Location Information
Certain features may use location information when permission has been granted by the user.
Location information may be used, for example, to:
- Display nearby establishments;
- Improve establishment discovery features;
- Present options relevant to the user’s location.
The use of location information may depend on the permissions configured directly on the device. Users can control or revoke this permission through their device settings.
3. How We Use Your Information
The information collected may be used to:
- Create and manage your account;
- Enable secure login and authentication;
- Verify identity and protect accounts;
- Enable and track orders;
- Associate orders with tables and establishments;
- Allow establishments to receive and process orders;
- Facilitate payments and transactions;
- Display relevant information to users;
- Personalize certain experiences and recommendations;
- Send notifications related to account functionality and order status;
- Send promotional communications, offers, or information about services when permitted and, when required, with the user’s authorization;
- Provide customer service and support;
- Resolve issues related to orders, payments, or use of the platform;
- Prevent fraud, abuse, and misuse of the service;
- Detect suspicious activity;
- Protect users, establishments, and Hestaurant;
- Monitor and improve application stability, security, and performance;
- Develop and improve features and services;
- Analyze usage metrics and patterns;
- Comply with legal, tax, and regulatory obligations;
- Respond to requests from competent authorities;
- Exercise or defend legal rights in administrative or judicial proceedings;
- Fulfill other legitimate purposes described in this Policy and applicable law.
4. Sharing Information with Establishments
In order for certain Hestaurant features to function properly, some user information may be made available to the establishment with which the user is interacting.
For operational, customer service, and security purposes, the establishment may be able to view certain basic customer information, which may include:
- Name;
- Profile photo, when available;
- Email address;
- Phone number;
- Information related to orders;
- Information related to use of the service at that establishment.
This sharing is intended to enable proper service delivery, assist in customer identification, facilitate customer service, process orders, and help prevent fraud, abuse, or malicious use of the platform.
Establishments should not use this information for purposes incompatible with the service provided or with applicable law.
5. Order-Related Information
When you place an order at an establishment through Hestaurant, the information necessary to fulfill that order may be made available to the establishment.
This may include:
- Order contents;
- Items and quantities;
- Amounts;
- Associated table;
- Time;
- Notes;
- Request status;
- Basic information necessary to identify and serve the customer.
The establishment is responsible for the processing of information it receives directly for its own commercial and operational purposes, subject to applicable law.
6. Service Providers and Technology Partners
Hestaurant may use third-party companies and technology partners to provide services necessary for operating the platform, including:
- Payment processing;
- Data hosting and storage;
- Authentication;
- Technology infrastructure;
- Communication services;
- Security analysis and monitoring;
- Error and performance monitoring;
- Support services.
These providers may process information on behalf of Hestaurant to the extent necessary to provide the contracted services or as otherwise permitted by applicable law.
6.1. Payment Processors
Payments may be processed by specialized companies, such as Stripe or other providers made available through the platform.
These providers may collect and process data necessary to complete and validate financial transactions and are subject to their own privacy and security policies.
7. Sharing with Authorities
Hestaurant may share personal information when necessary to:
- Comply with a legal or regulatory obligation;
- Respond to a court order or request from a competent authority;
- Prevent or investigate fraud;
- Protect the rights, safety, and property of Hestaurant, users, or third parties;
- Exercise or defend legal rights in administrative or judicial proceedings.
Hestaurant does not sell or rent users’ personal data to third parties.
8. Cookies and Similar Technologies
The application and related services may use cookies, identifiers, local storage, and similar technologies to:
- Maintain user sessions;
- Keep users signed in;
- Preserve preferences;
- Remember certain ordering preferences;
- Ensure functionality operates properly;
- Improve performance;
- Identify failures;
- Increase security;
- Analyze usage metrics and patterns;
- Understand how the services are used.
Where required by applicable law, certain technologies may require user consent.
For services accessed through a browser, users may control certain cookie settings through their browser settings.
9. Information Security
Hestaurant adopts reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or improper destruction.
Security measures used or that may be used include:
- Storage on servers with security measures;
- Encryption where applicable;
- Secure communication protocols such as SSL/TLS;
- Restricted access to personal information by authorized personnel;
- Authentication and access-control mechanisms;
- Two-factor authentication, when available;
- Monitoring of errors and suspicious activities;
- Measures designed to prevent fraud and misuse.
However, no system connected to the Internet can guarantee absolute security. Therefore, although protective measures are implemented, we cannot guarantee that all information will remain permanently protected against every possible risk.
Users are also responsible for keeping their devices, credentials, authentication codes, and access methods secure.
10. Data Retention
Personal information may be retained for as long as necessary to:
- Provide services;
- Maintain user accounts;
- Process orders and transactions;
- Comply with legal, tax, or regulatory obligations;
- Maintain transaction records;
- Resolve disputes;
- Prevent fraud and abuse;
- Ensure platform security;
- Exercise or defend legal rights;
- Fulfill other legitimate purposes described in this Policy or applicable law.
When information is no longer necessary and there is no legal obligation or other legitimate justification for retaining it, it may be deleted, anonymized, or securely stored for the period permitted by applicable law.
11. User Rights
Depending on the laws applicable to your place of residence, you may have rights regarding your personal data.
Where applicable, these rights may include:
- Confirming the existence of data processing;
- Requesting access to your personal data;
- Requesting correction of inaccurate or outdated information;
- Requesting updates to certain information;
- Requesting deletion of personal data, where legally permitted;
- Requesting anonymization or blocking of data in certain circumstances;
- Requesting information about the sharing of your data;
- Withdrawing certain consents;
- Requesting data portability, where applicable;
- Objecting to certain forms of processing, where permitted;
- Requesting information about data-processing practices;
- Filing a complaint with the competent data protection authority.
These rights may be subject to limitations and exceptions provided by applicable law.
Where applicable, Hestaurant will seek to comply with rights established under laws such as the Brazilian General Data Protection Law (LGPD) and the General Data Protection Regulation (GDPR).
To exercise your rights or obtain information about the processing of your data, contact us through the official channels listed in this Policy.
12. Account Deletion
Users may request deletion of their account and personal data when this option is available through the application or through Hestaurant’s official support channels.
Account deletion does not necessarily mean that all information will be immediately deleted.
Certain data may be retained when necessary for:
- Compliance with legal obligations;
- Compliance with tax or regulatory obligations;
- Fraud prevention and investigation;
- Platform security;
- Dispute resolution;
- Maintenance of transaction records;
- Exercise or defense of legal rights.
When retention is no longer necessary, data may be deleted or anonymized in accordance with applicable law.
13. Children’s and Adolescents’ Privacy
Hestaurant does not intend to knowingly collect personal information from children in violation of applicable law.
Depending on the jurisdiction, certain features or services may have age requirements or require authorization from a legal guardian.
If you believe that a child has provided personal information improperly, please contact us so that we can assess the situation and take appropriate measures.
14. International Data Transfers
Hestaurant may use providers, servers, platforms, and technology services located in different countries.
As a result, personal information may be stored or processed outside the user’s country of residence.
Where applicable, Hestaurant will seek to implement appropriate mechanisms and safeguards to enable international data transfers in accordance with applicable law.
15. No Sale or Rental of Personal Data
Hestaurant does not sell or rent users’ personal data.
Information may only be shared in the circumstances described in this Policy, including those necessary for platform operation, order fulfillment, payment processing, technology services, security, compliance with legal obligations, or the exercise of legal rights.
16. Changes to This Privacy Policy
Hestaurant may periodically update this Privacy Policy to reflect changes to its services, technologies, business practices, or legal requirements.
When material changes are made, we may notify users through the application, website, or other appropriate channels.
The “Last updated” date at the beginning of this document will be changed whenever a new version of this Privacy Policy is published.
The most recent version will always be available through Hestaurant’s official channels.
17. Applicable Law
This Privacy Policy shall be interpreted in accordance with the laws and regulations applicable to the processing of personal data and use of the services, taking into account, where applicable, the laws of the jurisdiction in which the user is located.
Hestaurant may adapt its procedures and practices to comply with applicable data protection requirements in different countries and regions.
18. Contact
If you have questions about this Privacy Policy, wish to exercise your rights regarding personal data, or require information about how your information is processed, please contact Hestaurant through the official channels below.
Hestaurant
Privacy: privacy@hestaurant.com
Website: https://hestaurant.com/
By using the Hestaurant Customer App, you acknowledge that you have read and understood this Privacy Policy and that your information may be processed as described herein, subject to applicable laws and regulations.