Privacy Policy

Applies to the Eatgo customer mobile application and this website.
Last updated: 10 August 2026

Eatgo Food Delivery Limited ("Eatgo", "we", "us") is the data user responsible for the personal data described in this policy. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

1. Personal Information Collection Statement

You are not obliged to supply the personal data requested in the Eatgo application. However, if you do not supply your phone number, delivery address and recipient contact details, we will not be able to create your account, accept your order, or arrange delivery.

2. What We Collect

2.1 Account information

• Mobile phone number — used to create and sign in to your account, verified by one-time SMS code.
• Display name.
• Email address — optional. If you sign in with Apple and choose to hide your email, we receive only a private relay address.
• Language preference (Chinese or English).

You may sign in with your phone number, with Google, or with Apple. Where you sign in with Google or Apple, we receive your name and email address from that provider as permitted by your settings with them. We never receive your password for those services.

2.2 Delivery information

• Saved delivery addresses — the building selected from our address list, together with the floor and unit you enter.
• Recipient name and recipient phone number for each saved address, so the assigned rider can contact the person receiving the order.
• Delivery instructions you choose to leave for the rider.

2.3 Order information

• Items ordered, options and quantities, notes to the restaurant, prices, fees and discounts.
• Order status and history, and the restaurant concerned.
• A copy of the name and phone number to be used for that specific delivery, recorded at the time you place the order.

2.4 Payment information

Online payments are processed by our third-party payment service provider on their own hosted payment page. We do not collect, receive or store your full card number, card expiry date or card security code. From the payment provider we receive and retain only the transaction reference, the amount, the payment status, and the card or wallet type, so that we can confirm your payment, reconcile it against your order, and process refunds.

2.5 Device, sign-in and security data

• Push notification token — a device identifier issued by Apple or Google, used solely to send you order status notifications. Removed when you sign out.
• Sign-in device identifier — an identifier generated by your installation of the app, used to enforce single-device sign-in (see section 2.6).
• App version and device platform (iOS or Android), used for support and troubleshooting.
• Sign-in and verification records, including the number of one-time verification codes requested from your number, used to prevent abuse of our SMS verification.
• Server activity and error logs generated when the app communicates with our systems.
• Account standing — the number of orders you have completed, and any record of restrictions applied to your account for fraud or abuse.

2.6 Single-device sign-in

Your account can be signed in on one device at a time. When you sign in on a new device, we record that device's identifier and the previous device is signed out automatically. This protects your account and your saved addresses if a device is lost or passed on.

2.7 What we do not collect

• We do not collect your device location. The Eatgo customer application does not request location access. Deliveries are made to the address you enter.
• We do not access your contacts, photos, camera or microphone.
• We do not use advertising networks or third-party advertising trackers, and we do not sell personal data.

3. How We Use Your Data

• To create and administer your account, verify your identity when you sign in, and enforce single-device sign-in.
• To accept, process, deliver and invoice your orders.
• To pass the delivery details to the restaurant preparing your order and to the rider delivering it.
• To process payments, refunds and cancellations.
• To notify you of your order status.
• To provide customer support and to investigate order disputes.
• To detect, investigate and prevent fraudulent, abusive or malicious ordering, and to enforce our Terms of Service.
• To meet our legal, accounting and record-keeping obligations.

We do not use your personal data for direct marketing without first obtaining your consent as required by the PDPO.

4. Who We Share It With

Your personal data may be transferred to the following classes of persons:

• The restaurant preparing your order — order contents, the delivery recipient's name and phone number, and your notes, so the order can be prepared and handed over.
• The rider delivering your order — the delivery address, recipient name, recipient phone number and delivery instructions, for that delivery only.
• Our payment service provider — the order reference and amount, for the purpose of processing your payment and any refund.
• Our cloud infrastructure provider — Google Cloud Platform / Firebase, which hosts our application and database. Our data is stored in a Hong Kong region data centre.
• Regulators, law enforcement or professional advisers — where we are required or permitted to do so by law.

5. Retention

We keep your account data for as long as your account remains open. Order and payment records are retained after an order is completed for as long as is necessary for accounting, tax, dispute resolution and legal compliance purposes. We do not keep personal data longer than is necessary for the purposes for which it was collected.

6. Security

Data in transit is encrypted. Access to personal data is restricted to authorised personnel and to the systems that need it to fulfil your order. Card details are handled by our payment service provider and never reach our systems.

7. Your Rights

Under the PDPO you have the right to request access to, and correction of, the personal data we hold about you, and to ask about our policies and practices in relation to personal data.

Requests should be sent to help@eatgodelivery.com. We may charge a reasonable fee for complying with a data access request, as permitted by the PDPO. We will respond within 40 days.

Some of your data — your display name, email address, saved addresses and recipient contact details — can be viewed and changed directly in the app, under Profile.

8. Deleting Your Account

You can delete your account at any time, either in the app under Profile → Delete account, or by emailing help@eatgodelivery.com. If you ask us by email, we will verify your identity before acting on the request.

If you have an order in progress — not yet delivered, or with a refund still being processed — you will need to wait until it is finished before the account can be deleted.

Deletion cannot be undone. Once your account is deleted you will no longer be able to sign in, and your saved addresses, favourite restaurants and order history will no longer be available to you. Any unused promotional codes held in your account expire immediately and cannot be refunded, reissued or exchanged for cash. If you later register again with the same mobile number, it will be a new account: nothing from the deleted account is restored.

After deletion we delete or anonymise your personal data, except where we are required to keep records for tax, accounting, fraud prevention, legal claims or regulatory purposes. Records kept for those reasons are not used for any other purpose.

9. Children

The Eatgo service is not directed at children under 13, and we do not knowingly collect personal data from them.

10. Changes

We may update this policy from time to time. The current version is always published at eatgodelivery.com/privacy.

11. Contact