Privacy Policy

Welcome to Touran Eats ("we," "our," "us," or the "Platform"). Touran Eats is an on-demand logistics, food, and beverage delivery platform developed, hosted, and operated by Touran Eats Logistics Ltd. (the "Company"). We are highly committed to protecting your personal information and respecting your privacy rights.

This Privacy Policy establishes a legally binding framework detailing how we collect, store, process, transfer, and protect your personal data when you use our services. This includes our mobile applications (for customers, merchants, and delivery partners), our websites, support tools, portals, and any matching courier services (collectively, the "Services").

By accessing, registering, or using any part of the Touran Eats Services, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy.

To the maximum extent permitted under applicable consumer protection and digital commerce laws, Touran Eats operates strictly as a three-sided technology intermediary matchmaking service. Users must carefully review the following liability limitations:

To provide, maintain, and secure our on-demand services, we collect various types of personal data when you interact with the Platform:

• Personal Identification Data: Full name, verified mobile phone number, email address, physical delivery address (building, floor, apartment details), profile picture, and support ticket chat histories.
• Financial and Payment Data: Financial transactions are securely handled using encrypted third-party payment gateways (e.g., Stripe, PayPal, or authorized local clearing systems). Touran Eats never stores raw credit card details, CVVs, or full PAN numbers on its physical servers. We only store encrypted tokenized transaction records to facilitate refunds and maintain billing accounts.
• Order & Transaction History: Specific item lists, purchase subtotals, merchant details, delivery tips, order dates and times, and promotional code redemptions.
• Device & Technical Telemetry: IP address, unique hardware identifiers (UUID, MAC address, advertising IDs), device brand/model, operating system type/version, cellular network carrier, push notification tokens, and system telemetry crash logs.

We process collected personal data strictly under valid legal bases, including the fulfillment of contracts, legitimate business operations, and compliance with statutory obligations. Primary uses include:

1. Order Fulfillment: Communicating order specifications to Merchants, calculating pricing, and coordinating physical delivery routes.
2. Real-time Dispatching: Allocating optimal routes using active GPS telemetry vectors, and updating real-time mapping for both Captains and Customers.
3. Communication and Alerts: Sending automated transaction receipts, critical push notifications regarding order stages, security verification PINs, and operational SMS alerts.
4. Fraud Prevention & Security Auditing: Detecting anomalous logins, auditing velocity abuses, blocking malicious credit cards, and checking for device spoofing to protect our platform integrity.
5. System Optimization: Resolving application performance bottlenecks, fixing software bugs, refining UX designs, and developing personalized recommendation models.

We do not sell, rent, or lease your personal information to third-party marketing companies. To deliver our services, we share necessary data with trusted partners and integrations:

• Independent Merchants (Restaurants): We share your name, delivery notes, and specific food orders so they can properly prepare and package your items.
• Independent Captains (Couriers): We share your name, phone number, precise delivery address, and coordinate locations to facilitate physical delivery and contact.
• Payment Processors: Transaction parameters are securely transmitted using encrypted connections to PCI-DSS compliant credit card and bank clearers (e.g., Stripe).
• Geographical & Map APIs: We integrate Google Maps API, Mapbox, or similar geocoding frameworks to translate text addresses into spatial GPS nodes and project active transit vectors.
• SMS and Push Notification Gateways: We share phone numbers with automated communication APIs to issue verification PINs and real-time delivery progress updates.
• Hosting & Cloud Servers: All databases, application logs, and telemetry are stored on encrypted, access-restricted cloud hosting facilities (such as AWS, Google Cloud, or equivalent) protected by firewalls, intrusion detection, and multi-factor authentication.

We adhere to modern privacy laws, including the Israeli Privacy Protection Law (5741-1981) and international frameworks (such as GDPR and CCPA) where applicable. Regardless of your physical location, we grant our users robust privacy controls:

• Right to Access: You have the right to request a digital report of the personal information we hold about you.
• Right to Rectification: You can request immediate corrections of inaccurate, outdated, or incomplete profiles.
• Right to Restriction: You may request a pause in processing while disputes are reviewed.
• Right to Erasure (Deletion): You have the absolute right to request the permanent deletion of your account and all associated personal data.

We implement robust, state-of-the-art administrative, physical, and technical security measures to safeguard your personal data from unauthorized access, alteration, disclosure, loss, or destruction.

Our security architecture includes HTTPS/TLS transit encryption for all web and mobile API endpoints, cryptographic salted hashing of passwords, database encryption at rest, secure firewalls, active intrusion detection systems, and strict internal access control policies (limiting database visibility to authenticated security staff).

However, please be aware that no transmission method over the internet or computerized server hosting system is 100% immune to security breaches. Consequently, while we strive to apply the highest commercial standards, we cannot guarantee absolute security of your information.

We retain your personal data only for as long as your account remains active or as required to fulfill the operational services outlined in this Privacy Policy.

Following an account deletion request, your data will be permanently removed or anonymized within 30 days. Exceptions apply where longer retention periods are legally required under the laws of the State of Israel, including tax records retention, commercial bookkeeping mandates, statutory accounting audits, and the preservation of evidence for legal defense.

This Privacy Policy, our platform services, and any disputes arising out of or relating to them shall be governed exclusively by, and construed in accordance with, the laws of the State of Israel, without giving effect to any conflict of law principles.

Any legal action, suit, claim, or judicial proceeding arising out of or in connection with this Privacy Policy or your use of the platform shall be submitted to the sole and exclusive jurisdiction of the competent courts in the Nazareth or Haifa region, Israel. All parties explicitly waive any objections to venue or jurisdiction in these courts.

If you have any questions, compliance inquiries, data clarification requests, or feedback regarding this Privacy Policy, please reach out to us at:

Touran Eats Logistics Ltd.
Nazareth / Galilee Region, Israel
Email Liaison: support@touran.store