Privacy Policy
Last updated: June 4, 2026
This Privacy Policy explains how Q-Orders ("we", "us", "our") collects, uses, shares, and protects personal information when you use our online ordering and store-management platform at q-orders.com ("the Service"). We are committed to handling personal information responsibly and transparently. This document is intended to help explain our practices and is designed to support good privacy practice; it should be reviewed by qualified legal counsel for your specific obligations.
-
Who we are
Q-Orders (q-orders.com) provides a software platform that lets restaurants, cafés, and food businesses publish digital menus, accept orders and reservations, manage customers, and run their storefronts. For information collected about you when you use the Service directly (for example as an account holder), we are responsible for that information as described here.
-
Scope of this policy
This Policy applies to personal information processed through the Service, including our website, dashboards, and the storefronts we host for businesses. Where a business uses the Service to collect data from its own customers, that business is responsible for its own use of that data; please also refer to "Business customer responsibility" below.
-
Information we collect
We collect information you provide and information generated as you use the Service, including:
- Account information — name, email, phone number, password, and preferences.
- Business information — store name, branches, business details, tax/VAT settings, and team members.
- Storefront, menu, and order information — products, prices, orders, reservations, and related records.
- Customer / order-recipient information — names, contact details, delivery addresses, and order details submitted through storefronts.
- Payment and billing information — subscription and billing records; full card details are handled by our payment providers, not stored by us.
- Technical and device information — IP address, browser and device type, operating system, and identifiers.
- Usage information — pages visited, features used, and interaction activity.
- Cookies and similar technologies — used for sessions, security, and preferences.
- Security logs — records used to detect, prevent, and investigate fraud, spam, and abuse.
- Communications and support messages — enquiries, support requests, and feedback you send us.
- Uploaded files — images, logos, menu content, and other files you upload.
-
How we use information
We use personal information to:
- Provide, operate, and maintain the Service and your account.
- Process orders, reservations, and subscriptions, and facilitate payments through our providers.
- Provide customer support and respond to your enquiries.
- Secure the Service and prevent fraud, spam, and automated abuse.
- Send transactional messages and important notices about the Service.
- Analyze and improve the Service and develop new features.
- Comply with legal, tax, and regulatory obligations.
-
Google reCAPTCHA and anti-abuse protection
We use Google reCAPTCHA to help protect our platform from spam, abuse, and automated access. reCAPTCHA runs on pages that carry a submission form and scores each request rather than challenging you, so Google may process technical information such as IP address, browser and device information, and interaction signals to judge whether a request comes from a real user.
This processing is carried out for security, fraud prevention, and abuse prevention. Google's handling of this information is governed by the Google Privacy Policy and Terms of Service, which are linked next to every protected form.
-
Reasons for processing
We process personal information where it is necessary for one or more of the following reasons:
- To perform our contract with you and provide the Service you request.
- For our legitimate business and security interests, such as protecting and improving the Service.
- To comply with legal, tax, and regulatory obligations.
- With your consent, where consent is required for a particular use.
-
How we share information
We do not sell your personal information. We share it only as needed to run the Service, including with:
- Hosting, storage, and infrastructure providers.
- Cloudflare, for security, content delivery, and anti-abuse protection.
- Payment providers, to process subscription and order payments.
- Email and messaging providers, to deliver notifications and communications.
- Analytics, monitoring, and logging providers that help us operate and secure the Service.
- Legal authorities or other parties where required by law or to protect rights, safety, and the integrity of the Service.
- A successor entity in connection with a merger, acquisition, or business transfer, subject to this Policy.
-
Payment data
Payments may be processed by third-party payment providers. We do not store full payment-card numbers; card data is collected and processed by the payment provider under its own terms and privacy policy. We retain limited billing records, such as transaction references and amounts, needed to manage subscriptions and accounting.
-
Cookies and tracking
We use cookies and similar technologies that are essential to operate the Service, including:
- Authentication and session cookies that keep you signed in.
- Security cookies that help protect against abuse and fraud.
- Preference cookies that remember settings such as your language.
Where we use any analytics or marketing technologies, they operate only where the relevant feature is enabled. You can control cookies through your browser settings, though some features may not work without them.
-
Data retention
We keep personal information for as long as your account is active or as needed to provide the Service. We may retain certain information for longer where required to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. Security logs and backups are kept for a limited period under our standard retention practices. When information is no longer needed, we delete or anonymize it, and you may request deletion as described under "Your rights".
-
Data security
We apply reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or misuse, including access controls and encryption in transit where applicable. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to safeguard your data.
-
International transfers
Because we and our service providers operate global infrastructure, your information may be processed in countries other than your own. Where we transfer data internationally, we take steps intended to keep it protected in line with this Policy and applicable law.
-
Your rights
Subject to applicable law, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, to withdraw consent where processing is based on consent, and to close your account. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.
-
Children's privacy
The Service is intended for businesses and adults and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will take appropriate steps to remove it.
-
Business customer responsibility
When a restaurant or store owner uses the Service to collect personal data from its own customers (for example through orders, reservations, reviews, or complaints), that business is responsible for that data and its own privacy compliance. Such businesses must have the right to collect, use, and upload that data, must provide their customers with any required notices, and must obtain any required consents. Q-Orders processes that data to provide the Service on the business's behalf.
-
Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect means you accept the updated Policy.
-
Contact us
If you have questions about this Privacy Policy or how we handle your information, please contact us using the details at the bottom of this page.
Questions about this document? Email us at [email protected] or contact us through the Contact page.