Privacy Notice
How Ordery looks after your data
This notice explains how I, operating Ordery as a UK-based sole trader, collect, use, and protect personal information for our restaurant partners, their teams, and the customers ordering through their storefronts.
The information I collect
Ordery stores only the information needed to run the service. Two main groups of people use the platform and the data we hold differs for each:
- Restaurant owners and team members: name, email address, job role, and authentication details so we can create workspaces, invite staff, and send service updates.
- Storefront customers: name, contact details, delivery address, order selections, and delivery instructions so restaurants can fulfil their orders.
Ordery does not store card numbers or bank account details. All payments are securely processed by Stripe, and Ordery only receives confirmation of a successful charge.
How the data is used
I use personal data to:
- Authenticate users, administer restaurant workspaces, and provide onboarding support.
- Display customer orders, delivery details, and messages so restaurants can prepare food and organise couriers.
- Send essential service emails such as password resets, order confirmations, or urgent platform notices.
- Improve reliability and security, including logging activity to monitor for fraud or abuse.
Legal bases for processing
I process restaurant data to perform the contract we have in place and to take steps at your request before entering a contract. Customer order information is processed on the basis of the restaurant's legitimate interests to accept and fulfil orders placed through their storefront.
Sharing and transfers
Personal data is shared only when necessary to deliver the service. This includes Stripe for payments, email providers for transactional messages, and hosting partners located in the UK or EEA. If I ever need to transfer data outside the UK or EEA, it will be protected by appropriate safeguards such as Standard Contractual Clauses.
How long data is kept
Restaurant account data is retained while your workspace remains active and for up to 24 months after closure so I can resolve billing queries. Order records are kept for 12 months to help restaurants handle queries, refunds, or food safety investigations, after which they are anonymised or securely deleted.
Your rights
UK data protection law gives you rights over your information, including access, rectification, erasure, objection, restriction, and data portability. If you are a customer of a restaurant using Ordery, please contact the restaurant directly first as they control your order data, but I can help coordinate any request.
Contact
To exercise your rights or ask a question about this notice, email [email protected]. If you are unhappy with how your data is handled you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated: 18th October 2025