Privacy Policy
Last updated 11 October 2026
This policy explains what personal data Eatsli collects, why, who we share it with and the choices you have. We keep it in plain English.
1. Who we are
Eatsli (“we”, “us”) provides restaurant software: the restaurant portal and point of sale at eatsli.com, restaurant ordering websites on eatsli.site and on restaurants’ own domains, and the driver app. You can contact us about privacy at any time at info@eatsli.com.
2. Our role
- Restaurant owners, staff and drivers: we decide how your account data is used, so we are responsible for it (the “controller”).
- Customers ordering from a restaurant: the restaurant decides how your order and booking details are used. We store and process them on the restaurant’s behalf (as its “processor”). For questions about an order, contact the restaurant first; you can also contact us.
3. What we collect
Account information
- Name, email address, phone number and the role you have (for example owner, manager, staff, driver or customer).
- Your password, which is stored only as a secure hash by our authentication provider. We never see it in plain text.
- If you use Sign in with Google: the name, email address and profile picture from your Google account. We do not receive your Google password or access anything else in your Google account.
Restaurant information
- Business details, branches and opening hours, menus and prices, website content and images, team members and their access.
Orders and bookings (on behalf of restaurants)
- Name, email address, phone number, delivery address, the items ordered, notes, and table booking details.
- Delivery addresses are converted into map coordinates so restaurants can check their delivery area.
- Delivery status updates and proof-of-delivery photos added by drivers.
Payments
- Card payments are handled by Stripe. We receive the payment status and a reference, never your full card number.
Domains bought through Eatsli
- The domain owner’s name, business name, email, phone and postal address, which domain registries require. They are sent to the registrar (Vercel) and the registry for the domain ending, and are kept private in public domain lookups where the ending allows it.
- Restaurant owners’ cards for domain payments are saved by Stripe (not by Eatsli) so yearly renewals can be paid.
Technical information
- IP address and browser details, used to keep the service secure: to limit repeated attempts (stored only in a one-way hashed form) and to record who changed what in the restaurant portal.
- Basic, anonymous usage events on our marketing pages (for example which sign-up button was clicked).
4. How we use it
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Creating and running your account, signing you in | Contract |
| Taking, paying for and tracking orders and bookings | Contract (for the restaurant) |
| Account emails such as confirmations, password resets and invitations | Contract |
| Security, fraud prevention and audit records | Legitimate interests |
| Understanding and improving the product | Legitimate interests |
| Meeting legal, tax and accounting obligations | Legal obligation |
We do not sell personal data, and we do not use it for advertising.
5. Cookies and browser storage
- On eatsli.com we use essential cookies to keep you signed in. They are required for the portal to work.
- Restaurant websites (eatsli.site and restaurants’ own domains) do not set Eatsli sign-in cookies. They keep your order bag, and links to your recent orders on that website, in your browser’s storage so they are not lost between pages.
- We do not use advertising or cross-site tracking cookies.
6. Who we share it with
We use trusted service providers to run Eatsli. They may only use the data to provide their service to us:
| Provider | What for |
|---|---|
| Supabase | Database, authentication and file storage (hosted in Tokyo, Japan) |
| Vercel | Website hosting and content delivery, and registering domains bought through Eatsli (with the domain registry) |
| Stripe | Card payments |
| Amazon Web Services (SES) or Resend | Sending order and account emails |
| Your browser’s push service (Google, Apple, Mozilla or Microsoft) | Delivering order alerts to restaurant staff devices that turned them on |
| Sign in with Google, and map embeds on restaurant websites | |
| OpenStreetMap (Nominatim) | Turning delivery addresses into map locations |
Restaurants receive the details of orders and bookings made with them. We may also share data when required by law or to protect the rights and safety of our users and the service.
7. International transfers
Our providers may process data outside the UK and European Economic Area, for example in Japan and the United States. When they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
8. How long we keep it
- Account data: for as long as your account is open, then deleted or anonymised, except where we must keep it for legal reasons.
- Orders and payment records: for as long as the restaurant needs them for its records and tax obligations.
- Security records: kept for a limited period and then deleted.
9. Your rights
You can ask to access, correct, delete or receive a copy of your personal data, or object to or restrict how we use it. Email info@eatsli.com and we will respond within one month. For order data, the restaurant is usually best placed to help, and we will pass on requests we receive. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
10. Security
Connections are encrypted with HTTPS, passwords are hashed, and each restaurant’s data is kept separate by access rules enforced in the database. Restaurant websites run on a separate domain from the Eatsli portal so they cannot access sign-in cookies. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you as the law requires.
11. Children
Eatsli is not intended for children under 16, and we do not knowingly collect their personal data.
12. Changes to this policy
We may update this policy as the service changes. We will change the date at the top, and tell account holders about significant changes.
13. Contact
Questions or requests about privacy: info@eatsli.com.