Privacy policy

Last updated: October 23, 2026

Who we are

MaxiResto is responsible for the processing of your personal data on this website. You can reach us at:

MaxiResto
Rue du Marché 1 1204 Geneva Switzerland
Contact form

Data we collect

When you order, we collect your email address and, for a pickup, your name and the phone number you may give us. We keep the content of your order: the dishes, their quantities, your note, the table it was served at and the amount paid.

You enter your payment details directly with our payment provider Stripe. We never see or store your full card number.

If you have an account, we store your email address and the data needed to sign you in securely.

To protect the website, our server records technical data such as your IP address, your browser and the time of your requests.

Why we use it

We use this data to prepare your order and hand it over, tell you when it's ready, send you a receipt, answer your questions, keep our accounting records and protect the website against abuse. This is based on the performance of our contract with you, our legal obligations and our legitimate interest in a secure website.

We do not sell your data and do not use it for advertising.

Cookies and local storage

Your order, and for a few hours the table whose QR code you scanned, are kept in your browser's local storage and only sent to us when you pay. Cookies remember your language and, if you sign in, keep your session. When you pay, our payment provider Stripe sets its own cookies to prevent fraud. We use no advertising or analytics cookies.

Who we share it with

We only share your data with the providers that help us run the restaurant's website: Stripe for payments, and the platform that hosts this website with its hosting and email providers. They may process data outside your country, including in the United States, in which case appropriate safeguards such as standard contractual clauses apply. We also disclose data when the law requires it.

How long we keep it

Orders are kept as long as accounting and tax law requires, usually 10 years. Technical logs and backups are deleted after a few months at most. Other data is deleted once it is no longer needed.

Your rights

Within the limits of the law, you can ask to access, correct or delete your data, to receive it in a common format, or object to its processing. Write to us using the contact details above.

You can also lodge a complaint with a data protection authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the European Union the authority of your country of residence.

Changes

We may update this policy. The current version is always published on this page, with the date of its last update.