Privacy policy

Med Naim, publisher of RestoNet, Zarzis (Medenine, Tunisia). For any question about your data: contact@restonet.tn — WhatsApp +216 52 124 384.

• Customer account: name, phone number (your login), password (stored with irreversible hashing, never in clear text) and preferred language.
• Orders (with or without an account): name, phone number, items, notes, amounts, order type, table, and for delivery: address, neighbourhood, note for the courier and, only if you tap “Use my location”, your GPS position.
• Addresses saved in your account.
• Reviews: rating, comment, and first name + last-name initial shown publicly.
• Sign-in: to keep and secure your session, IP address, device or browser type and sign-in dates.
• Notifications (app): a technical identifier of your phone to update you on your orders.
• Restaurant staff and couriers: name, phone or e-mail and, depending on the role: menus, photos, deliveries made and cash collected.

RestoNet has no advertising, no audience-measurement tool and no advertising tracker. No data is sold.

• send your order to the restaurant and, for delivery, to the courier;
• let you track, find, reorder your orders and rate restaurants;
• compute delivery fees (neighbourhood or distance);
• secure accounts and prevent abuse (fake orders, fake reviews);
• keep restaurants’ till records and delivery accounting.

This processing is necessary to provide the service you request. Location, camera and notifications are only used with your consent.

• Camera: only to scan a table QR code. No image is stored or sent.
• Location: only when you tap “Use my location” for a delivery. No background tracking.
• Notifications: about your orders. You can turn them off in your phone settings.

The site only uses cookies needed for it to work:

• “rn_refresh”: keeps you signed in (30 days at most), unreadable by page scripts;
• “rn_house”: a few hours, to show the menu of a restaurant opened from its QR code or direct link.

Your cart (6 hours) and, to save you retyping them, your name, number and last address are kept in your browser or phone storage. You can erase them by clearing the site or app data.

• the restaurant you order from: name, phone, order content and, for delivery, address and note;
• the RestoNet courier who takes your delivery: name, phone, address, note, location if given and amount to collect;
• our technical providers, only to run the service: OVHcloud (server hosting, France) and Expo (app notifications, then delivered by Apple on iPhone and Google on Android);
• authorities, only when required by law.

As servers are hosted in France and notifications are sent by providers based in the United States, some data is processed outside Tunisia, only for these purposes.

• account and addresses: until you delete your account;
• sign-in sessions: 30 days at most;
• orders: kept for restaurants’ till records and delivery accounting; detached from your account if you delete it;
• reviews: while published; they become anonymous (“RestoNet customer”) if you delete your account;
• backups: 14 days.

Encrypted connections (HTTPS), irreversibly hashed passwords, rotating and revocable sessions, role-based access (a restaurant only sees its own orders).

Under Organic Law No. 2004-63 of 27 July 2004 on personal data protection, you may access your data, have it corrected, object to its processing on legitimate grounds and request its deletion. Write to contact@restonet.tn; we reply within one month at most. You may also contact the Tunisian data protection authority (INPDP).

Your name and addresses can be edited directly in your account; account deletion is described on the “Account deletion” page.

RestoNet is intended for people aged 16 or over. We do not knowingly collect data about younger children.

This policy may change with the service; the update date is shown at the top.