Privacy Policy

1. Introduction

OrderMadd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform, website, and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

OrderMadd is the data controller for the personal data we process. You can contact us at hello@ordermadd.com for any data protection queries.

3. What Data We Collect

From Business Accounts

Name, email address, and phone number
Business name, address, and type
Payment and billing information (processed by Stripe)
Menu content and pricing
Account usage and login activity

From Customers Placing Orders

Name and email address (if provided)
Order details and preferences
Payment information (processed by Stripe — we do not store card details)
Device and browser information

From Website Visitors

Information submitted via contact or signup forms
Cookies and usage analytics (see Section 8)

4. How We Use Your Data

We use your personal data to:

Provide, maintain, and improve the OrderMadd platform
Process orders and payments
Send transactional emails (order confirmations, receipts)
Respond to enquiries and provide customer support
Send service updates and product announcements (you can opt out at any time)
Detect fraud and ensure platform security
Generate anonymised analytics to improve our service

5. Legal Basis for Processing

We process your data under the following legal bases:

Contract: To fulfil our obligations under your subscription or order.
Legitimate interest: To improve our services, prevent fraud, and send relevant service communications.
Consent: For marketing communications and non-essential cookies.
Legal obligation: To comply with tax, accounting, and regulatory requirements.

6. Data Sharing

We do not sell your personal data. We share data only with:

Stripe: For payment processing.
Amazon Web Services (AWS): For hosting and infrastructure.
Email service providers: For transactional and support emails.

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

7. Data Retention

Business accounts: Data is retained for the duration of your account plus 12 months after closure.
Customer order data: Retained for 24 months for analytics and dispute resolution, then anonymised.
Contact form submissions: Retained for 12 months.
Financial records: Retained for 7 years as required by UK tax law.

8. Cookies

We use cookies for:

Essential cookies: Required for the platform to function (e.g. session management).
Analytics cookies: To understand how visitors use our website and improve the experience.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS/HTTPS), encryption at rest, and access controls. Payment data is handled entirely by Stripe and never stored on our servers.

10. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict processing of your data
Data portability — receive your data in a structured, machine-readable format
Object to processing based on legitimate interest
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@ordermadd.com. We will respond within 30 days.

11. International Transfers

Your data is primarily stored and processed within the UK and European Economic Area. Where data is transferred outside these regions (e.g. for certain AWS services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

12. Children's Privacy

Our Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Contact & Complaints

For any privacy-related questions or to exercise your rights, contact us at hello@ordermadd.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.