Privacy Policy
What data Pizzy uses, why, and how you stay in control of it.
Last updated: 30 September 2026
1. Who are we?
The data controller is EXIGENT BV, 42 Rue du Tilleul, 1640 Rhode-Saint-Genèse, Belgium (BE 0723.470.144), which operates Pizzy and Fritzy. Both brands share the same platform and the same accounts. Contact: contact@pizzy.be.
This policy covers our apps, our website, the web app, ordering kiosks and our connector for AI assistants.
2. The data we use
- Account: mobile number, name, email (optional), language and communication preferences.
- Orders: restaurant, products, comments, service type, delivery address, amounts and history.
- Location: your device's location if you allow it, or the address you choose.
- Payment: the payment status and the card type and last 4 digits. Full card details are processed only by our payment providers.
- Usage and device: device type, app version, IP address, pages and features used, error reports, and how you found us (for example through an ad).
- Communications with us: complaints (including a photo if you attach one) and messages to support.
- Requests from restaurant owners: restaurant name, name, phone, email, postcode, town, type of business and message entered in the “Call me back” form on our page for restaurant owners. What you type is saved as you go: if you don't send the form, we may use the phone number or email you entered to contact you once.
- Kiosks: only the order and, if the restaurant asks for it, a first name.
3. Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Managing your account, taking and tracking your orders, handling payment, refunds and complaints | Performance of the contract |
| Calling back restaurant owners who ask us to and, once, those who started the “Call me back” form without sending it | Pre-contractual steps taken at your request; legitimate interest for a form that was not sent |
| Showing you nearby restaurants using your device's location | Your consent (device permission) |
| Keeping accounts and responding to authorities | Legal obligation |
| Securing the service, preventing fraud and abuse | Legitimate interest |
| Improving the service and measuring where our customers come from | Legitimate interest or, where required by law, your consent |
| Sending you offers about your usual restaurants and similar offers (notifications, SMS) | Legitimate interest (similar offers to our customers); you can object at any time, free of charge |
| Measuring the effectiveness of our advertising | Your consent |
We do not make any decision with legal effects concerning you based solely on automated processing.
4. Who receives your data
We do not sell your data. We share it only with:
- the restaurant you order from: your name, your phone number, your order and, for delivery, your address;
- our service providers, who act on our instructions: hosting and database, payment service providers, SMS and message delivery, push notification services, maps and address search, audience measurement, advertising and customer support tools (including AI-based tools);
- the authorities, where required by law.
Where a provider processes data outside the European Economic Area, we rely on an adequacy decision of the European Commission or on its standard contractual clauses.
5. How long we keep it
- Account data: as long as your account is active, then erased or anonymised within a reasonable period.
- Orders and payments: 7 years, for our accounting and tax obligations.
- Technical logs: 90 days maximum. Usage statistics: 12 months maximum.
- Complaints and support: as long as needed to handle them and any resulting dispute.
We may keep some data longer in the event of a dispute or where required by law.
6. Your rights
You can request access to your data, its rectification, erasure, restriction of processing or portability, and object to processing based on our legitimate interest. You can withdraw your consent at any time.
Write to contact@pizzy.be stating your account's phone number. We may verify your identity and will reply within one month.
Delete your account: on request, in the app (My account › My information › Delete my account) or by email. We delete or anonymise your data within a reasonable time, except what the law requires us to keep (for example orders and invoices, for accounting).
Offers: you can object at any time, free of charge, by unticking "Receive our offers and reminders" in My account › My information or by following the opt-out instructions in the message itself. Location and push notifications can be turned off in your device settings.
7. Cookies and local storage
Necessary storage does not require your consent: login, cart, preferences, security and fraud prevention, and our own first-party usage statistics. Advertising cookies and embedded videos only load once you accept them. You can change your choices at any time through the "Cookies" link at the bottom of the page.
8. AI assistants
You can use Pizzy from ChatGPT, Claude or other AI assistants connected to Pizzy.
- Without an account: the assistant can search for restaurants and view their menus. Only public information is shared.
- With your account: if you wish, you link your account to an assistant on our sign-in page, with your explicit consent, and choose what it may do: see your orders and/or prepare pickup orders. It then has access to your first name, your order history and your order status, never to your payment details. We only share with it what is needed to answer you.
- Payment: the assistant never pays. It gives you a secure payment link and you pay yourself on our website. The restaurant only receives paid orders.
- Disconnecting: you can remove this access at any time in the app (My account › Connected apps). It is cut off immediately.
What you write to an assistant is processed by its provider, under its own privacy policy.
9. Minors and changes
Pizzy is reserved for people aged 16 or over. We may change this policy; the date of the last update appears at the top of the page, and we will notify you of any significant change.
10. Complaints
If you believe we are not respecting your rights, please contact us first. You can also lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.