Privacy Policy
Version 1.0 — effective when published by Yummy Lebanon. This notice describes our handling of personal information.
Who handles your information
Yummy Lebanon Establishment operates the platform. Contact: yummy.Lebanon@gmail.com, Feytroun, Lebanon. Any additional disclosures required by Lebanese Law 81/2018 must be made available through an approved legal-information notice before this policy takes effect.
Information and why it is used
When you create an account we process your email, account identifier, authentication/security metadata, and optional public display name to provide and secure access. When you submit a rating or review, we process visit information, answers, moderation requests and timestamps to publish genuine community contributions and prevent manipulation. When you contact us, we process your message and contact method to answer your enquiry. Technical services may process IP addresses, device/browser information, essential cookies or session tokens and security logs to operate the site, detect abuse and protect accounts.
Restaurant applicants may provide restaurant affiliations, role, contact number, confidential business registration/authorization evidence and signed agreements for verification, access control, disputes and compliance. Private identification documents are not public restaurant media. We aim to request only the documents necessary for each case.
Required, optional and consent-based processing
Account email and security data are necessary to create and protect an account; an optional public display name and any optional contact details are identified as such. Verification evidence is required only where needed to prove authority. If you decline required information we may be unable to provide that feature. We do not treat a general Terms checkbox as consent to unrelated marketing, optional analytics or data sales. Any optional nonessential cookies or marketing requiring consent must have separate, freely chosen controls before activation.
Sharing, service providers and security
Authorized administrators and necessary hosting, authentication, storage and technical service providers may process data to operate the service under appropriate safeguards. A reviewer display name and review content may be public, but account email, private claims and uploaded identity/authority documents should not be public. We do not sell member personal information. Where data transfers occur, applicable safeguards and Lebanese legal requirements must be assessed and disclosed.
Retention
Records are retained only as needed for the identified purposes, applicable legal duties, dispute preservation and approved schedules. The B2 targets include 90 days after final closure for rejected/withdrawn claim evidence, 365 days after representative authorization ends, 730 days for security/moderation records, and a 30-day target for removed restaurant media, subject to legal holds and technical realities. Daily database/Storage backup retention targets 30 days; actual provider coverage must be verified. Signed paper agreements may require retention for the duration of authorization and lawful evidence periods; no unverified automatic purge is promised.
Your privacy rights and requests
Ask about access, correction, completion, updating, deletion or an objection by emailing yummy.Lebanon@gmail.com. Account deletion is also available in supported account settings. We may verify identity first and explain any lawful exceptions or record holds. We aim to address eligible verified deletion requests within 30 days, without overriding any shorter deadline applicable under law; for certain corrections and erasures Lebanese Law 81/2018 Article 101 specifies no more than ten days. We will apply the legally applicable requirement, not an unsupported blanket 30-day delay.
Cookies and changes
Essential session and security mechanisms may be needed for login and fraud prevention. Any optional analytics, advertising or third-party tracking must be inventoried and accurately disclosed, with consent controls where applicable, before enabled. This notice may be updated with a new dated version. The Terms of Use and Content Policy explain user responsibilities and complaints.
