Privacy policy
Updated: 17.10.2026
Who we are
The controller of your personal data is Hiiu Resto OÜ (reg. code 17569193), Pärnu mnt 325, 11620 Tallinn, Estonia. Questions and requests: [email protected], +372 652 5290. This policy covers the hiiuresto.eu website, the Hiiu Resto app (hiiuresto.eu/app, App Store and Google Play), the loyalty card, Wallet passes, bookings, tickets, gift cards and the point-of-sale system used in the restaurant.
What data we process and why
- Table bookings and parties: name, phone, e-mail, date, time, number of guests, requests and pre-ordered dishes — to fulfil the booking and contact you (contract).
- Loyalty card: name, e-mail, phone, birthday (if given), visits, total spend, stamps, gift cards and customer tier — to provide loyalty benefits (contract you enter by joining).
- Tickets, gift cards and online payments: name, e-mail, phone, purchase and payment status. Payments are processed by AS LHV Pank (EveryPay); we never see or store card details.
- Newsletter and e-mail offers: e-mail and name — only with your consent. Every e-mail has an unsubscribe link.
- App notifications: if you turn notifications on, we store the notification address (technical subscription or device token), your language and, optionally, your loyalty card code — to send offers and event news. You can turn notifications off at any time in the app or in your phone settings.
- Apple Wallet and Google Wallet: the pass shows your card code, name and benefits; Apple/Google provide a technical device identifier so the pass can update.
- QR ordering at the table: order contents, table and optionally your loyalty card code.
- Website and app statistics: we only count visits and actions (e.g. "booking started") as daily totals, without cookies and without storing IP addresses or identities.
Cookies and advertising on the website
We measure website visits with Google Analytics (Google tag) and advertising results with Meta Pixel, Google Ads and ChatGPT ads measurement. Cookies and ad pixels are switched on only if you accept; without consent the Google tag sends only an anonymous, cookieless signal (Google Consent Mode) that cannot identify you. This helps us understand what visitors look at and whether ads bring bookings. You can withdraw consent by clearing hiiuresto.eu data in your browser. With a booking we store where you came from (e.g. Google or Instagram) to know which channel works. The app does not use advertising cookies.
Who we share data with
We use trusted service providers that process data on our behalf: web hosting (Zone Media OÜ, Estonia), security and performance (Cloudflare), payments (AS LHV Pank / EveryPay), e-mail, notifications and Wallet passes (Apple, Google). We do not sell your data or share it with third parties for their marketing.
How long we keep data
Booking data is kept as long as needed to fulfil the booking and handle any questions. Loyalty card data is kept while you are a member. Accounting records (invoices, payments) are kept for the period required by law (7 years). You can withdraw marketing consent at any time.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing and to data portability. Write to [email protected]. You may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
Data deletion
To delete your loyalty card and other data, e-mail [email protected] (include your card code or e-mail). We delete the data within 30 days, except what we must keep by law (e.g. invoices). Your notification subscription is removed when you turn notifications off or delete the app.
Children
Our services are not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes, we update the date at the top of this page.