Privacy Policy

This Policy applies to information handled through Ordavya's own website and through Ordavya-powered services provided to restaurants.

Depending on the service, the restaurant and Ordavya may have different legal responsibilities for customer data. A restaurant will generally remain responsible for its direct relationship with its customers and the purposes for which it requests customer information.

The categories of information depend on the features enabled for a restaurant.

Information may be provided directly by users, entered by restaurants, generated through use of the service or received from integrated third-party providers.

A restaurant may receive customer information needed to process orders, communicate with customers, provide delivery or pickup services and manage its customer relationship.

Restaurants are responsible for using customer information lawfully and in accordance with their own obligations under applicable privacy and consumer-protection laws.

Where location features are enabled, users may provide an address, choose a location on a map or permit location access through their device.

Ordavya may use Google Maps Platform or another mapping provider to convert addresses into map locations, display maps, calculate or validate service areas or support delivery functionality.

Mapping providers may process technical or location-related information according to their own privacy policies and terms.

Users can control device-level location permissions through their operating-system settings.

Ordavya-powered applications may collect device information necessary to operate, secure and troubleshoot the application.

This can include operating system, app version, device identifiers generated by the service, crash information and push-notification tokens.

If a user enables notifications, the application may use Apple, Google, Firebase or another notification service to deliver push notifications.

Users can normally disable notifications through their device settings.

Push-notification providers process technical identifiers necessary to deliver messages.

Where online payments are available, payment information may be processed directly by an independent payment gateway or financial institution.

Ordavya should not be assumed to store full payment-card details unless specifically stated for a particular implementation.

Payment providers process information according to their own legal terms and privacy policies.

Ordavya services may use Firebase, Google Cloud or other infrastructure providers for hosting, databases, authentication, storage, logs, application services or security.

Those providers may process technical and service data as necessary to provide their infrastructure.

Ordavya may use third-party providers where reasonably necessary to operate or support a service.

Some technology providers operate infrastructure in multiple countries. Information may therefore be processed or stored outside the user's country where permitted by applicable law.

Where legally required, appropriate measures should be used for international transfers.

Information is retained only for as long as reasonably necessary for the purposes for which it is processed, including service operation, account management, security, dispute handling and legal obligations.

Different categories of information may have different retention periods depending on the restaurant's service configuration, applicable law and technical requirements.

Ordavya uses reasonable technical and organizational measures intended to protect supported services and information.

These measures may include access controls, authentication, encrypted transport, provider security controls, monitoring and restricted administrative access.

No internet-connected service can guarantee absolute security.

Users and restaurants should use secure credentials and restrict account access to authorized persons.

Suspected unauthorized access should be reported promptly.

Depending on applicable law, individuals may have rights relating to access, correction, deletion, objection, restriction or another form of control over their personal information.

A request relating to information controlled by a particular restaurant may need to be directed to that restaurant.

Requests relating directly to Ordavya can be submitted through the contact page.

Ordavya services are not intended to knowingly collect personal information from children in circumstances where parental or guardian consent is legally required unless an appropriate process has been implemented.

Ordavya websites may use cookies, local storage and similar technologies for necessary functionality, preferences, security, analytics and performance.

Further information is provided in the Cookie Policy.

If Ordavya becomes aware of a security incident affecting personal information, it will take reasonable steps appropriate to the circumstances and applicable legal obligations.

This Privacy Policy may be updated when Ordavya services, technologies, providers or legal obligations change.

The latest published version will show its updated date.

Privacy questions and requests can be submitted through the Ordavya contact page.