Effective version 1.0 · Last updated June 2026
1. Who we are
Mohamed Zouaa Group Technology (MZG TECH) is the data controller for platform account data. Restaurants using QR2EAT may act as independent controllers for their customer and order data.
2. Data we collect
Account and authentication data (name, email, phone, password hashes, MFA secrets, session metadata).
Restaurant and business data (profiles, branches, menus, pricing, settings, uploaded media).
Order and customer data processed on behalf of restaurants (orders, delivery addresses, loyalty, communications).
Delivery partner data (identity documents, vehicle information, location during active deliveries, ratings).
Technical data (IP address, device/browser user agent, audit logs, security events, cookies).
3. How we use data
To provide, secure, and improve the platform; authenticate users; process orders; send transactional notifications; comply with law; prevent fraud; and produce analytics in aggregated or pseudonymized form where possible.
4. Legal bases
Contract performance, legitimate interests (security, product improvement), legal obligations, and consent where required (e.g., non-essential cookies, marketing communications).
5. Sharing and processors
We use infrastructure, email, SMS, WhatsApp, payment, and storage providers as subprocessors under appropriate agreements. We do not sell personal data. We may disclose data when required by law or to protect rights and safety.
6. International transfers
Data may be processed in Morocco and other jurisdictions where our providers operate. We implement appropriate safeguards consistent with applicable law.
7. Retention
We retain data while accounts are active and as needed for legal, tax, audit, and dispute purposes. Retention schedules vary by data category and are minimized where possible.
8. Security
We apply encryption in transit, access controls, tenant isolation, role-based permissions, audit logging, and MFA options. No method of transmission or storage is 100% secure.
9. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability, or objection to certain processing, and withdraw consent where processing is consent-based. Contact contact@qr2eat.com or use in-product data request tools.
10. Cookies
See our Cookie Policy for details on cookies and similar technologies.
Operator: Mohamed Zouaa Group Technology (MZG TECH) · Platform: QR2EAT · Contact: contact@qr2eat.com