Privacy Policy
What we collect when you order, why we keep it, and how to get rid of it.
What we collect
If you order as a guest: your email address and the order itself. If you have an account: your name, email, password (stored only as a hash we cannot reverse), an optional profile picture, and your order history. Every order records what you bought, whether it was dine-in or takeaway, and the PayNow amount reported and confirmed.
Why we hold it
To cook and hand over your order, to match your PayNow transfer to it, to show you your own order history, and to keep the accounting records a business has to keep. We do not sell your data, and we do not send marketing unless you ask for it.
Cookies
We set a session cookie when you sign in, so the site knows it is still you. Your cart lives in your own browser's storage, not on our servers. There are no advertising or tracking cookies.
Guest order links
A guest order email contains a single-use link that expires after 24 hours. It is the only way to reach that order without an account, so treat it like a password.
Who else sees it
Our own staff, to prepare and settle your order. Beyond that, only the services that run the site — our hosting and database — and only because the data sits there. We do not pass it to anyone else unless the law requires it.
Your choices
You can change your name, email and picture from your account page at any time, and ask us to delete your account. Order records tied to payments are kept for as long as business records require, then removed.
This is a plain-language draft describing the data the service handles today. It has not been reviewed by a lawyer, and a contact address for privacy requests still needs to be added by the business.