Privacy Policy
Last updated: August 22, 2026
Who we are
This platform provides online ordering, reservations and restaurant management services. For orders you place with a restaurant, the restaurant is the data controller and we process your data on its behalf. For restaurant staff and owner accounts, we are the data controller.
What we collect
When you place an order: your name, email address, phone number, delivery address where applicable, and your order contents. When you join a dine-in table: the details the restaurant asks for at the table, such as a display name and any dietary or allergy notes you choose to share. For staff accounts: your name, email address and sign-in activity.
How we use it
To take, prepare and deliver your order, to send you order status emails, and — only if you tick the marketing checkbox at checkout — to send you offers from that restaurant. We do not sell personal data, and we use no third-party advertising trackers.
How long we keep it
Order records are kept for as long as tax and accounting law requires. Personal details attached to orders are kept only as long as needed to provide the service, then removed. Dine-in dietary and allergy notes are deleted shortly after your table session ends.
Your rights
You can ask for a copy of your data, ask for it to be deleted, or withdraw marketing consent at any time. Every marketing email we send contains an unsubscribe link. To exercise access or deletion rights, contact the restaurant you ordered from, or reach us via the contact details in any email we have sent you. Where data must be retained under tax law, we delete everything that identifies you and keep only the transaction record.
Sharing
Payment is handled by the payment provider the restaurant has connected (such as Stripe or PayPal) — we never see or store full card details. Emails are delivered through our email service provider. We share data with no one else except where the law requires it.