Privacy policy

The data controller is SRL “Mellang&Compani”, IDNO 1017611001837, registered address: MD-3801, Republica Moldova, ATO Găgăuz Yeri, or. Comrat, str. Cozeriuca, 34. The Unotoro chain operates under this entity.

Questions and requests about your data — at info@efood.md or by phone at 079 20 25 30 · 078 21 22 23.

When ordering. Name, phone, delivery address (or table number in the dining room), the order comment, the contents and total of the order, and the chosen payment method. All of it is needed to cook the order, bring it and call you back if something needs clarifying.

When signing in with Telegram. Your Telegram identifier, name and the phone number confirmed by the messenger, plus saved addresses and order history — so you do not have to type your number and street again.

The point on the map. If you mark your building on the delivery map, we receive the coordinates of that point — the zone and the delivery price are calculated from them.

Dish rating. If you rate a dish after delivery, we store the rating next to the order: on the storefront it appears as an average score, without your name.

We measure behaviour on the storefront anonymously and only with your consent, through Google Analytics: which pages and dishes are opened, what goes into the cart and at which step checkout breaks off. Your name, phone and address are not sent into these statistics, and there are no advertising pixels and no profiling on the storefront.

An order is a contract: you ask us to cook and deliver food, and we do it. Data is processed to perform it. Signing in and saving addresses rely on your consent, given when you sign in through Telegram; it can be withdrawn by signing out and asking us to delete the account. Certain order records we keep because the law requires it — tax and accounting rules.

Offers by message. If you ticked the box at checkout or told our operator on the phone, we send messages about our offers to the number you gave us. This is separate consent: an order is accepted just the same without it, and you can withdraw it at any time — by replying to a message, telling the operator, or writing to info@efood.md. We keep the date and the way you gave it, as there would otherwise be nothing to confirm the consent with.

We work under the legislation of the Republic of Moldova on personal data protection and, for visitors from the European Union, under Regulation (EU) 2016/679 (GDPR).

There are no advertising cookies on the site. Besides the necessary ones, there are Google Analytics cookies — thanks to them one person’s visits do not fall apart into a dozen different ones. They appear only after you press “Accept”; choose “Only essential” and none of them is set, and the decision can be changed at the bottom of this page:

The session cookie is not accessible to page scripts (httpOnly) and is sent only to our site. You can clear all of it in your browser settings — the site keeps working, it will simply ask for your city again and ask you to sign in.

Inside the chain. The operator, the kitchen and the courier see the whole order — otherwise it cannot be cooked or delivered. Orders go into the chain’s accounting system.

Telegram. At sign-in the messenger tells us your name and number. What Telegram does with its own data is described in its own policy.

Google Maps. The delivery map on the checkout screen loads from Google servers, so Google sees your IP address and the fact that the map is open. We pass the marked point to Google only to display the map and search the address.

Google Analytics. Anonymous visit statistics are collected through Google Tag Manager: which pages and dishes are opened, what goes into the cart and how checkout ends. Google sees your IP address and details about your device. The order contents, its total and its number go into the statistics — they cannot be linked to your name, phone or address.

Hosting and database. The site runs on Vercel; orders and accounts are stored in a Neon database. Both act as processors on our instructions and do not use the data for their own purposes.

We do not sell data and do not share it for advertising.

The order and its contents — for the period set by accounting and tax legislation. The account and saved addresses — while you use them; after a deletion request we erase them together with the history, except what we are obliged to keep by law.

Vercel and Neon servers, as well as the Google servers the map loads from, are located outside the Republic of Moldova — in European Union countries and the USA. Transfer goes over a secure connection, and the services work on the chain’s instructions under standard contractual clauses on data protection.

The site works over HTTPS only. The session cookie is signed and inaccessible to page scripts. Access to orders and accounts is held by operators and the kitchen to the extent needed for work, and by system administrators. We store no passwords: sign-in goes through Telegram and you never give us a password.

The site is not intended for children and we do not knowingly collect their data. An adult places the order; alcohol is not sold to persons under 18 — the courier may ask for proof.

You have the right to:

• learn what data we hold about you and receive a copy;
• correct inaccurate data;
• request deletion;
• restrict processing;
• object to processing;
• receive your data in a portable form;
• withdraw consent — where processing relies on consent.

Write to info@efood.md — we reply within the term set by law. Withdrawing consent does not undo processing carried out before it and does not prevent us from keeping records of orders already fulfilled where the law requires it.

If our answer does not satisfy you, you may apply to the National Centre for Personal Data Protection of the Republic of Moldova.

The terms of the order itself — price, delivery, cancellation, claims — are described in the terms and conditions.

If the policy changes, we update the text and the date at the top of the page. You can always find it through the link in the site footer.