This policy explains how Ordrova ("we") handles personal data on this website and in the Ordrova platform.
Two roles
For restaurants that use Ordrova, we process their customers' data (such as names, phone numbers, addresses and orders) on the restaurant's behalf and on its instructions. The restaurant decides how that data is used. For our own customers and website visitors, we decide how we use the data described below.
A restaurant can also add its own analytics and advertising tools to its ordering website (such as Google Analytics, Google Ads, Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity or Hotjar). These load only after a visitor accepts them in the site's cookie banner, and the restaurant and those providers are responsible for the data they collect.
What we collect
- Contact requests: your name, email, phone, company, city and message.
- Account data for restaurant staff: name, email, role, branch access and sign-in activity.
- Order and payment records needed to run the service. Card and wallet details are entered with the payment gateway; we do not receive them.
- Basic technical data such as IP address and browser type, used for security and to keep the service running.
In the Ordrova mobile app
When you order through the Ordrova app on iPhone, iPad or Android, the restaurant you order from receives and uses the details you enter, as described under "Two roles". The app adds the following:
- Order details: your name, phone number and, for delivery, your address, sent with each order. If you sign in, your email or phone number is used to send you a sign-in code.
- Location: only if you tap "Use my location" at checkout. We use it once to pick your delivery area and save it with the order so the rider can find you. The app does not read your location in the background.
- Notifications: if you allow them after placing an order, the app sends a notification token for your phone to us so we can tell you when the order's status changes. Delivering the notification involves Expo's push service and Apple (or Google) notification services, which receive the token and the message. The token is removed when the order is finished.
- On your phone: recent restaurants, your saved checkout details and, if you sign in, your sign-in token, which is kept in the phone's secure storage. Signing out or deleting your account clears them.
The app has no advertising, does not track you across other companies' apps or websites, and does not use third-party analytics. You can turn off location and notifications at any time in your phone's Settings, and the app still works for ordering. To delete your account and its data, see Delete your account.
How we use it
- To provide, secure and support the Ordrova service.
- To reply to your requests and, with your agreement, tell you about Ordrova.
- To meet legal duties, such as tax invoicing and record keeping.
We do not sell personal data.
Sharing
We share data only with service providers that help us run Ordrova (such as hosting, email, SMS and WhatsApp messaging, payment gateways and push notification delivery), with tax authorities where the law requires it, or where required by law. Providers are bound to protect it.
Security and retention
We protect data with the measures described on our Security page. We keep data while an account is active and for the period the law requires afterwards, then delete or anonymise it.
Your choices
You can ask to see, correct or delete your personal data. Customers of a restaurant can delete their account themselves on the restaurant's ordering site, under My orders, or in the app (see Delete your account); this removes their contact details, saved addresses, favourites and loyalty points, while the restaurant keeps its records of past orders without those details, as tax law requires. For anything else, customers should contact the restaurant first. To reach us, email [email protected].
Changes
We will post any changes here and update the date above.