Privacy Policy

What we collect

• Account information you provide directly (name, email, phone where applicable).
• Order and transaction information for orders you place or a business you work for processes - including, where relevant, the delivery address and phone number you give for a delivery, and the time and party size of a reservation.
• For an order placed without an account, the email address you give at checkout - required, because it is where we send the confirmation and your tracking link.
• Your browser's timezone, sent with an order so the times in emails about that order are shown in your own timezone. It is stored with the order.
• For business accounts: the business's locations (address and timezone), and which locations each member of staff is assigned to.
• Device and login information (IP address, approximate location, browser/device details) used specifically to detect suspicious logins and protect your account - never sold or used for advertising.
• A random identifier, kept in a cookie on your device, that lets us recognise a browser you have signed in from before (see the Cookie Policy). On our side only a one-way hash of it is stored.

Cookies and local storage

See our Cookie Policy for the full list. In short: we use one essential cookie to keep you signed in (an httpOnly cookie that JavaScript cannot read), and your device may store a theme preference (light/dark/system) and the contents of your shopping cart locally.

Third parties

• Payment providers: Stripe, Square, Moneris and Helcim process payments on behalf of the business you're ordering from or that you run (only the ones a business has connected). Interac e-Transfers go through your own bank to the business.
• Google Cloud Storage stores product images and business logos.
• Email delivery provider (SMTP or Resend, as set up by the platform) sends the emails we send you - order updates, password resets, confirmations - so it handles your email address and the content of those emails.
• Address lookup: when a delivery address or a business location is entered, the address (or a map pin) is sent to a mapping service (OpenStreetMap Nominatim or Google Maps Geocoding, as set up by the platform) to find its coordinates, for delivery-distance checks.
• Exchange rates: the platform fetches daily published exchange rates from ExchangeRate-API so businesses can see reports in their own currency. No personal data is sent.
• Error monitoring (Sentry, if enabled by the platform) receives technical error details so problems can be fixed; it is configured not to collect personal information by default.
• MaxMind GeoLite2 (optional, set up by the platform) resolves approximate location from IP address for suspicious-login detection only.

We do not sell personal data, and we do not use it for advertising.

How we protect it

Payment-provider credentials and access tokens that a business stores with us, and two-factor authentication secrets, are encrypted at rest.

The tracking link in an order email is a secret address: anyone who has it can see that order's status, items and totals - never your email, phone number or delivery address. Treat it like a ticket. If you delete your customer account, the tracking links for your orders stop working.

Data retention

When a business closes its account, its data (and every co-user account tied to it) is retained for a limited period in case of reactivation, then permanently deleted. Platform security audit logs are retained independently of any one business's data, with the specific business reference cleared if that business's data is later deleted.

Sign-in records (IP address, browser details and approximate location) are kept for a limited period and then deleted. For each account we keep only the approximate country and city of its first sign-in - no IP address or browser details - so the platform can see in aggregate where people sign up from.

Orders, including the details given when they were placed, are the business's own records. When a customer deletes their account, the businesses they ordered from keep those details for a limited period - chosen by each business within limits set by the platform, and counted from the later of the deletion and the customer's last order being completed - so they can finish open orders and answer for past ones. Then the personal details (name, email, phone number, delivery address) are erased and the order's items, totals and dates remain. Payment processors keep their own records under their own policies.

Each business's own data policy

A business that sells through the platform may publish its own data policy describing what it collects about its customers, why, how long it keeps it, and who to contact. You can read it from that business's storefront, checkout and order pages - whether or not you have an account.

Your rights

Customers can change the name, email and phone number they've given a business at any time - a business can see them but cannot edit them - and can delete their own account at any time (see the Terms of Use for exactly what that removes and what the businesses you ordered from keep, and for how long). Business accounts are managed by their business - see Terms of Use for how business account closure and co-user removal work.