Ordivo privacy notice
Last updated 7 October 2026
For restaurant owners and their staff who use Ordivo. People who order food read the privacy notice of their restaurant instead. See also our terms of service.
Who we are
Ordivo.
For the details of the restaurant's own account, staff and settings we decide how the data is used (we are the “controller”). For the details of the restaurant's guests (names, phone numbers, addresses, orders) the restaurant decides, and we only handle them on its instructions (we are its “processor”).
What we collect about you and your restaurant
- Your name, e-mail address and telephone number, and those of the staff you add.
- A password, which we keep only in a scrambled form that nobody, including us, can read back.
- Your restaurant's details: name, address, opening hours, menu, prices, delivery areas, settings and the plan you are on.
- Records of what the service sends on your behalf (order e-mails, offer e-mails, call alerts, push messages) so you can see what was sent and so we can find faults.
- Identifiers of the tablets and phones you sign in on, to send them new orders.
- Login times and technical details such as your IP address, for security.
Payments. When you switch on online payments, Stripe asks for your business and bank details on its own page. We never see your bank details or identity documents; we keep only your Stripe account reference and whether it can take payments. Guests' card numbers never reach us either.
Why we use it, and our legal reason
- To provide the service, keep your account working and support you (contract).
- To bill you and keep accounting records (contract and legal obligation).
- To keep the service secure and prevent misuse (legitimate interests).
- To send service messages such as changes to your plan or this notice (contract and legitimate interests). We do not send you marketing unless you agree to it.
Who helps us run the service
Companies that host the service, deliver e-mail, place telephone calls for call alerts, send push messages to the restaurant app, and process payments (Stripe, PayPal). They may only use the data to provide their service to us. Some process data outside the UK under the safeguards the law requires. We do not sell your data.
How long we keep it
While your account is open, and afterwards for as long as the law requires us to keep billing records (normally 6 years). When you close your account we delete or return your guests' data as you instruct, except what the law requires us to keep.
Security
Passwords are stored scrambled. Payment and service keys are stored encrypted on the server and are never shown again after you save them. Access to restaurant data is limited to the people in that restaurant's account and to the few of us who need it to run the service.
Your rights
You can ask us for a copy of your data, to correct it, delete it, limit its use, move it, or object to it. Write to us and we will answer within one month. If you are unhappy, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).