Privacy Policy - undefined

At Orde.ro, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. By using our Services, you consent to the practices described herein.

1. Information We Collect

We collect different types of information depending on how you interact with our platform:

1.1 Information Provided by Administrators (Restaurant Owners)

Account Information: Email address, password (encrypted), username.
Business Information: Restaurant/business name, address, phone number, logo, business description.
Billing Information: Billing name, billing address, Tax Identification Number (TIN), registration number for invoicing purposes.
Menu Content: Product names, descriptions, prices, images, categories, allergen information.
Social Media Links: Facebook, Instagram, Twitter, TikTok, YouTube, WhatsApp business numbers (if provided).
Notification Preferences: Email addresses and phone numbers for order alerts and notifications.

1.2 Information Provided by End Clients (Customers)

Account Information: Email address, password (encrypted), username.
Delivery Addresses: Street address, city, region, country, postal code, phone number, additional delivery instructions.
Order Information: Order details, order history, preferences, special instructions.
Loyalty Program Data: Points accumulated, redemption history (if loyalty features are used).

1.3 Information Collected Automatically

Device Information: Browser type, operating system, device type, screen resolution.
Usage Data: Pages visited, time spent on pages, click patterns, menu views, feature usage statistics.
IP Address: Used for security purposes, rate limiting, and approximate geolocation.
Cookies and Session Data: Session identifiers for authentication, preferences, and platform functionality.
Location Data: When delivery services are used, we may access location data to facilitate delivery zone verification (with your permission).

2. How We Use Your Information

We use the collected information for the following purposes:

Provide Services: To operate the platform, process orders, manage subscriptions, and deliver the features you request.
Account Management: To create and manage your account, authenticate your identity, and maintain account security.
Order Processing: To facilitate orders between End Clients and Administrators, including order notifications and status updates.
Payment Processing: To process subscription payments and manage billing through our payment processor (Stripe).
Communications: To send transactional emails, order confirmations, subscription updates, and important service announcements.
Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
Analytics and Improvements: To analyze usage patterns, generate statistics for Administrators, and improve our platform.
Security: To detect and prevent fraud, abuse, and security threats, including rate limiting and suspicious activity monitoring.
Legal Compliance: To comply with legal obligations, respond to legal requests, and enforce our terms.

3. Cookies and Similar Technologies

Orde.ro uses cookies and similar technologies to enhance your experience:

Essential Cookies: Required for authentication, session management, and platform security. These cannot be disabled.
Functional Cookies: Remember your preferences, language settings, and cart contents.
Analytics Cookies: Help us understand how users interact with the platform to improve functionality and user experience.

Most web browsers allow you to control cookies through their settings. However, blocking essential cookies may affect platform functionality.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

With Administrators: When End Clients place orders, their order information (including delivery address and phone number) is shared with the respective restaurant to fulfill the order.
Payment Processor (Stripe): Payment information is processed by Stripe. We do not store complete credit card numbers on our servers.
Authentication Provider (Google): If you use Google Sign-In, we receive basic profile information (email, name) from Google.
Communication Services (Twilio): Phone numbers and message content are shared with Twilio for SMS and WhatsApp notifications (where enabled by Administrators).
AI Services (OpenAI, Anthropic): Menu images and text may be processed by AI services for menu transcription features. This data is not stored permanently by these providers.
Maps Services (Google Maps): Address information may be sent to Google Maps API for geocoding and delivery zone verification.
Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the business transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption: Passwords are hashed using bcrypt. Data in transit is protected using HTTPS/TLS encryption.
Secure Sessions: Session tokens are cryptographically generated and expire after periods of inactivity.
Rate Limiting: Protection against brute force attacks and abuse.
Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
Regular Updates: We regularly update our security practices and dependencies to address known vulnerabilities.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Account Data: Retained while your account is active and for a reasonable period after account deletion for legal and business purposes.
Order Data: Order history is retained for the duration required for business operations, accounting, and legal compliance (typically 5-7 years for financial records).
Session Data: Session cookies expire after periods of inactivity or when you log out.
Analytics Data: Aggregated usage statistics may be retained indefinitely but are anonymized over time.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Object: Object to certain types of processing, such as direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, please contact us using the information provided below. We will respond to requests within the timeframes required by applicable law.

8. European Union Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland:

Legal Basis: We process your data based on: (a) contract performance (providing our Services), (b) legitimate interests (improving our platform, security), (c) legal obligations, and (d) consent (where specifically requested).
Data Controller: Orde.ro, based in Romania, is the data controller for your personal data.
International Transfers: Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place for such transfers, such as Standard Contractual Clauses.
Complaints: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

9. Children's Privacy

Orde.ro is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us.

10. Third-Party Links

Our platform may contain links to third-party websites or services (e.g., restaurant social media pages, payment processors). We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this page with a new "Last Updated" date. We encourage you to review this policy periodically. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Orde.ro

Email: stefan.stefanica@ymail.com

Address: Romania, Brașov (BV)

For data protection inquiries or to exercise your privacy rights, please include "Privacy Request" in the subject line of your email.