Broccoli Privacy Policy
Updated: 30 October 2026
Broccoli uses personal data to provide online ordering, payment, delivery, customer support, fraud prevention, technical diagnostics and masked checkout improvements. Optional advertising measurement follows the configured privacy choices.
Data we collect
Order contact and delivery details; order items, notes, totals and status; payment method, Paymob transaction reference and payment result (not full card data); account or loyalty activity; technical security logs such as IP address and device information; optional location when you choose to share it for delivery; and browsing/cart diagnostics used to improve ordering. Journey replays hide personal field values. Product searches, public choices and area autocomplete queries, suggestions and selected areas can be visible.
How data is used and shared
Data is used to prepare and deliver orders, process payments, provide tracking and support, protect the service, and meet legal/accounting duties. If you choose address search, the search phrase you submit is sent to the configured geocoding provider to return possible map locations; the checkout does not automatically add your separate name, phone, building, or apartment fields to that search. Relevant data may also be shared with the selected branch, delivery staff, hosting and security providers, Paymob/payment providers, and analytics/advertising vendors only when enabled and consented to.
Checkout replay
Broccoli uses first-party recording from menu entry through browsing, cart and checkout, including taps, scrolling, product searches, public choices and validation steps. Branch names and area/address autocomplete searches, suggestions and the selected area can be visible. Names, phone numbers, manually entered building/apartment/full-address fields, order notes and payment details are hidden before replay data is sent. Payment provider pages, camera, microphone and other apps are not recorded. Replays are stored on Broccoli hosting, available only to the owner, and expire after 7 days by default (configurable from 1 to 30 days). You can turn off checkout replay below without affecting ordering. Existing privacy opt-outs remain respected.
Retention and security
Behavior analytics is normally deleted after the configured retention period (default 90 days). Payment callback payloads and temporary payment secrets are minimized and purged by scheduled controls. Order and accounting records may be retained longer where required by law. Access is role-restricted and transport is encrypted.
Your choices and rights
You can turn off masked checkout replay without affecting ordering. This choice does not grant advertising consent. You may request access, correction, or deletion where legally available.
Contact
For privacy or deletion requests, contact Broccoli through the support contact shown in the ordering service. Identity verification may be required before disclosing or deleting order data.