Privacy Policy
Tom Tasty AG · Last updated: 18 October 2026 (version 3.2)
1. Who is responsible for your data
The controller is Tom Tasty AG, Seestrasse 513, 8038 Zurich, Switzerland. We answer questions about data protection at datenschutz@tomtasty.ch.
This policy applies to the website tomtasty.ch with its checkout, customer account, chat and contact form, and to our emails. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. What data we process
2.1 When you visit the website
For technical reasons our hosting provider logs the IP address, date and time, the address requested, the browser and the previously visited page for every request. We need this information for operation, troubleshooting and security.
To measure how the website is used and which advertising works, we use Google Tag Manager with Google Analytics 4 and Google Ads (Google Ireland Ltd. / Google LLC) as well as the Meta Pixel (Meta Platforms Ireland Ltd.) and the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). Google, Meta and LinkedIn thereby learn your IP address, information about your browser and device, the pages you view and, when you make a purchase, the order number, amount and dishes. When you make a purchase, we additionally pass your email address, phone number, name and address to Google and Meta so they can attribute the purchase to an ad; both services convert these details into a hash value before transmission and do not store them in plain text. LinkedIn does not receive any such details. We do not record your mouse movements.
We also remember in a cookie of our own (tt_herkunft) how you found us: for your first visit and for your most recent visit via a link or an ad, the campaign details in the link (such as utm_source or the click ID of Google, Microsoft or Meta), the domain of the previous page, the landing page without parameters and the date. If you place an order, we store this information with the order to see through which channels new customers reach us. We do not share this cookie with anyone.
You can prevent this measurement by blocking such cookies in your browser or using a tracking blocker; you can still place orders.
2.2 When you order and in your customer account
- First and last name, email address, phone number, language
- Delivery address with company and delivery note (such as floor or drop-off place), separate billing address
- Orders with meals, amounts, discounts, vouchers and delivery week
- For the Autopilot: your selection per week, skipped weeks, pauses, start and end; when ending it, the reason you give and an optional comment
- Gift cards: name and – optionally – email address of the recipient, your message and the delivery date. Please only provide another person's details if they would agree.
With your first order we create a customer account for your email address. There you can view and change your details yourself.
2.3 Payment data
You enter card details directly with our payment service provider Worldline (Saferpay); they never reach us. For the Autopilot and a backup, Worldline stores your payment method as a token ("alias"). We only store this token, the card brand, the masked number (e.g. "•••• 1234"), the expiry date and the status and amount of each payment.
2.4 Login
You log in without a password, using a code or a link sent by email. We only store codes and links as an encrypted check value (hash). To prevent misuse we record login attempts with email address and IP address and limit the number of attempts.
2.5 Food preferences
You can voluntarily describe in your own words, in your account or when putting your box together, what you like and don't like. From this we derive diet, allergies, intolerances, unwanted ingredients and favourites, so that suggestions and the Autopilot choose suitable meals.
We do not store health information. If you mention an illness, a medication or body measurements, we remove it automatically before anything is stored or sent to an AI service – only the rule for your food remains (such as "low in sugar"). Allergies, intolerances and diets such as halal or kosher may nevertheless be sensitive personal data. We only process them because and to the extent that you expressly provide them, and only to select your meals. You can change or delete them in your account at any time.
If you put a box together without an account, your answers (goal, quantity, preferences) stay in your browser. If you order, we transfer the preferences to your account, provided none are stored there yet.
2.6 Started orders
As soon as you enter your email address at checkout, we store it together with your first name, cart and delivery week – even if you do not complete the order. This keeps your order, and if you have agreed to receive news, we can remind you of your cart (section 4).
2.7 "Ask Tom" chat
Questions to "Ask Tom" are answered by an AI service (section 5). We log questions and answers without a customer identifier to improve the chat. If the chat cannot answer and you leave an email address or phone number, we will contact you that way. To prevent misuse we briefly count requests per IP address.
In your customer account the chat receives a short extract of your account: first name, upcoming deliveries with meals, Autopilot status, your preferences, your vouchers and whether a payment method is stored – no address, no email address, no payment data. Please do not enter sensitive data in the chat.
2.8 Contact form
Messages from the contact form (name, email, optionally phone and order number, message) are sent by email to our customer service. They are kept in that mailbox, not in our customer database.
2.9 Email communication
We store which emails you have agreed to and which you have unsubscribed from – with time, channel and wording as proof. Our email service tells us whether an email was delivered, bounced or reported as spam and – where enabled – whether it was opened or a link was clicked. We block addresses that are permanently unreachable or report us as spam.
2.10 Recording how the website is used
To see where our website gets stuck – for example when a button does not respond or an order is abandoned – we record how it is used: the layout of the pages shown, mouse movements, clicks, scrolling, page changes and technical errors. This lets us replay a visit later like a film. We do not record what you type into fields, and your name, contact and address details, payment methods, voucher codes, chat conversations, preferences and health information are made unreadable in the recording. We do not store your IP address and keep only the browser type, main version, screen size and language.
The recording stays with us: it is stored in our database in Zurich (Supabase), is not shared with anyone, is viewed only by a few authorised employees and is deleted after 90 days. A cookie (tt_bid) recognises your browser; as soon as you log in, we link this browser’s visits to your account so that we can help you if you have a question. We do this on the basis of our legitimate interest in a working website. You can switch off recording for your browser at the bottom of this page; if your browser sends the “Global Privacy Control” signal, we do not record at all.
3. Purposes and legal basis
- Contract: order, production, delivery, payment, customer account, Autopilot, gift cards, customer service and complaints.
- Legal obligations: accounting and retention of records, VAT.
- Legitimate interests: security and misuse prevention, improving our offer and website, statistics, analysing reasons for cancellation, advertising similar products to existing customers.
- Consent: newsletter and cart reminders, information on allergies and diet. You can withdraw your consent at any time.
We do not sell your data.
4. Emails we send you
Always, because they belong to your order: login code, order confirmation, charges and refunds, failed payments, expiring payment methods, changes to your menu, details and Autopilot, gift cards.
You can unsubscribe in your account under "Settings" or via the link in each of these emails (also with one click in your email program):
- the reminder on Thursday before the order deadline, as long as your Autopilot is running
- the delivery notice on Tuesday
- the newsletter with news and offers
- the reminder of an abandoned cart (4 and 24 hours later) – only if you have agreed to receive news
At checkout the box "News and offers by email" is pre-ticked; you can untick it before ordering. It only takes effect with a paid order. If you save a discount code from a promotion by email, we send you the code and – after your confirmation – a reminder before it expires.
Emails to you may contain a button that logs you straight into your account. This link works once and for 24 hours, so do not forward such emails. Some emails load a font from Google Fonts when opened; Google thereby learns your IP address.
In your settings you can already choose SMS as a channel. We do not currently send SMS or WhatsApp messages; before we start, we will update this policy.
5. Who receives your data
We only pass on personal data where necessary for the purposes stated, to service providers who process it on our behalf and according to our instructions, and to companies in our group. All are contractually bound to protect your data.
| Recipient | Based in | Purpose | Data and location |
|---|---|---|---|
| Supabase Inc. | USA | Database and file storage | all customer data; stored in Zurich (Switzerland) |
| Vercel Inc. | USA | Website hosting | server logs, data during processing; data centre in Frankfurt (Germany) |
| Worldline Schweiz AG (Saferpay) | Zurich, CH | Payment processing, payment method tokens | payment data, order number, amount |
| TWINT AG | Zurich, CH | Payment with TWINT, if you choose TWINT | payment data |
| Resend Inc. | USA | Sending our emails | email address, content of the emails |
| Anthropic PBC | USA | AI for "Ask Tom" and for structuring preferences | chat history, account extract as in section 2.7, preferences without health information; no training with your data |
| Google Ireland Ltd. / Google LLC | Ireland / USA | Address suggestions at checkout; fonts in emails; audience and advertising measurement (Tag Manager, Analytics, Ads) | the address text you type – via our server, without your IP address; your IP address when you open an email; when you visit the website, IP address, device and usage data; when you make a purchase, email address, phone number, name and address as a hash value (section 2.1) |
| Meta Platforms Ireland Ltd. / Meta Platforms Inc. | Ireland / USA | Measuring our advertising on Facebook and Instagram (Meta Pixel) | IP address, device and usage data; when you make a purchase, email address, phone number, name and address as a hash value (section 2.1) |
| LinkedIn Ireland Unlimited Company | Ireland | Measuring our advertising on LinkedIn (Insight Tag) | IP address, device and usage data, purchases without name and address (section 2.1) |
| Swiss Post Ltd | Bern, CH | Delivery | name, delivery address, delivery note |
| Teleboy AG | Zurich, CH | Management, customer service, software development | group company |
| Food on the Road AG | Zurich, CH | Preparation and packaging | group company |
| Tom Talent Management AG | Zurich, CH | Financial services | group company |
| Teleboy Service GmbH | Berlin, DE | Customer service, software development | group company |
| Prospective Media Services Dooel | Skopje, MK | Software development | standard contractual clauses |
For internal tasks – such as analysing customer feedback, marketing and customer service – we also use AI services from Anthropic, OpenAI and Google. We choose contracts and interfaces that exclude training the models with our data; internal use is governed by a binding policy.
We only disclose data to authorities and courts if we are obliged to do so.
6. Processing abroad
Our customer database is located in Switzerland, the website runs in the EU. Some service providers are based in the USA (see section 5) and may access or process data there. We safeguard this with the EU Commission's standard contractual clauses, recognised by the Swiss FDPIC, or – for certified companies – with the Swiss-U.S. Data Privacy Framework.
7. Cookies and browser storage
We use cookies and browser storage that are necessary for the website or enable a function you use, as well as cookies with which we measure reach and advertising (section 2.1). We do not show a cookie banner; you can delete or block these cookies in your browser at any time.
| Name | Purpose | Duration |
|---|---|---|
| tt_konto | Login to the customer account (signed) | 1 year, extended on every visit |
| tt_angemeldet | "Logged in" flag so the site can show account notices | 1 year, extended on every visit |
| tt_korb | Contents of your cart | until the order deadline, with gift cards 30 days |
| tt_code, tt_karte | Voucher code or gift card entered | 30 days |
| tt_gutschein | Welcome discount deselected | 1 year |
| tt_aktion | Discount code from a promotion | 1 year |
| tt_onboarding | Result of "Build my box" (signed; cookie and local storage) | 7 days or until you delete it |
| tt_aktion_gezeigt | When the promotion window last appeared (local storage) | until you delete it |
| tt-faq-chat, tt-konto-chat | Chat history (session storage) | until you close the tab |
| tt_herkunft | How you found us: first and most recent visit via a link or an ad (section 2.1) | 90 days |
| _ga, _ga_* | Google Analytics: recognising and counting visits | up to 2 years |
| _gcl_au, _gcl_aw | Google Ads: measuring the effect of ads | 90 days |
| _fbp, _fbc | Meta Pixel: measuring the effect of ads on Facebook and Instagram | 90 days |
| li_fat_id | LinkedIn Insight Tag: measuring the effect of ads on LinkedIn | 30 days |
| tt_bid | Recognises your browser for recording how the website is used (section 2.10) | 1 year |
| tt_rec | Remembers that you switched off recording (section 2.10) | 1 year |
| tt_sid, tt_sid_n, tt_sid_rest | Ongoing recording: ID and order of the parts (session or local storage) | until you close the tab or until your next visit |
You can delete or block cookies in your browser; the cart and login will then no longer work.
We load Google reviews and Instagram images on our website via our own server; your browser does not connect to Google or Instagram for this. At checkout your browser loads Worldline's payment window (saferpay.com). Links to Google Maps, Instagram or TikTok only transmit something when you click them.
8. How long we keep data
- Recordings of how the website is used (section 2.10): 90 days; earlier if you delete your account.
- Orders, payments and receipts: 10 years, as required by the Swiss Code of Obligations.
- Customer account with details, preferences and Autopilot: as long as the account exists. On request we delete it; data subject to retention obligations remains blocked until the period expires.
- Login codes 15 minutes, login links 24 hours, login on a device one year from the last visit.
- Records of consents and unsubscribes: as long as we need them as proof, so that an unsubscribe remains effective.
- Started orders, chat logs, login attempts and server logs: only as long as the respective purpose requires.
9. Security
The connection to the website is always encrypted (TLS). We only store codes and links as hashes, sessions are signed, database access is restricted by role, and card details are never stored with us. No one can guarantee complete protection; if you notice anything unusual, please let us know.
10. Automated suggestions
The Autopilot automatically suggests meals to you – based on your last selection and your preferences – and an AI service structures your preferences. These are not decisions with legal effect for you: you can see every suggestion in your account and change it until the order deadline.
11. Your rights
You have the right to information about your data, to its release or transfer, to rectification and erasure, to restriction and objection, and to withdraw your consent. You can do much of this directly in your account: details under "My details", preferences under "My preferences", emails under "Settings".
Please send anything else to datenschutz@tomtasty.ch or to Tom Tasty AG, Datenschutz, Seestrasse 513, 8038 Zurich. We may ask for proof of your identity. If you believe we are not processing your data correctly, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch); if you live in the EU, the supervisory authority in your country.
12. Changes
We update this policy when our website, our service providers or the law change. The version published here applies; we will inform you of material changes by email. The German version is authoritative.