Privacy
iOrdly is designed for restaurants that take orders at the table. This notice describes the personal data the product stores, why it is stored, and the rights people have under the EU General Data Protection Regulation (GDPR) and similar laws.
Who decides
The restaurant that runs the shop decides why guest order details are collected. That restaurant is the controller for those orders. The operator of this iOrdly deployment decides why accounts exist, and processes shop data on the restaurant's instructions. Sign-in is provided by Google or Facebook. Browser notifications, if you allow them, are delivered by your browser vendor.
What is stored
Account: name, email, phone, and profile photo returned by Google or Facebook, plus the language you choose. Shop: name, address, contact details, menu, and the shop code you set. Order: name, phone, note, table, items, amounts, and the order code. Optional: a push subscription if you tap Allow, a bearer token you paste for a partner system, a staff call (table and time), and a shop rating (stars, optional comment, table, and time). Shop managers and staff can read those ratings. Security logs record sign-in and important shop actions.
Why, and the legal basis
Orders are stored to take, prepare, and settle the meal (contract, or steps you ask for before a contract). Shop tools are stored so the restaurant can run service (contract with the restaurant, and legitimate interest in operating the platform securely). Notifications are sent only after you tap Allow (consent). You can withdraw that consent in the browser or in notification settings. We do not sell personal data and we do not use it for advertising.
How long
Order and account data stay while the shop account is active and as long as the restaurant needs them for service, accounts, or legal claims. Staff invitations expire after 7 days. A push subscription stays until you revoke it or the browser expires it. Language choice stays in a cookie for up to one year after you select it.
Who can see an order
Guest details on an order are shown to people with a role at that shop: owner, manager, staff, and kitchen, only so they can serve the table. A platform admin can see shop and account records to operate the service. Partner systems receive an order only if the shop turns on an outbound webhook and pastes that partner's token.
Your rights
You can ask to access, correct, delete, or export your personal data, to restrict or object to some processing, and to withdraw consent for notifications. You can also complain to a data protection authority in your country. Use the Account page for the profile we hold, ask the restaurant that took your order about that order, or write to the site owner at the address on this page. We will not ask you to trade these rights for access to the service.
Children
iOrdly is a restaurant tool. It is not directed at children under 16, and it does not knowingly create accounts for them.
Other countries
Google, Facebook, and browser push services may process data outside your country. Where the GDPR requires a transfer tool, the operator should use an appropriate safeguard such as the provider's standard contractual clauses. The product itself does not add a separate advertising network.
How data is protected
Traffic between the browser and iOrdly is protected with HTTPS (TLS), the usual international standard for web traffic. iOrdly does not store a password. Refresh tokens, invitation links, table sessions, and inbound webhook tokens are stored only as SHA-256 hashes, so those secrets cannot be read back. Names, emails, phones, and orders stay in the database in a form the restaurant can use to serve the table. Those fields are not encrypted one by one inside the app. The site owner does not claim a certificate such as ISO 27001. Write to the address on this page if you need the hosting details.
Price
iOrdly is free from 4 October 2026 through 4 April 2027. No fee is collected in that window. After 4 April 2027 the site owner will decide whether to keep the service free or to set a price, and will write to shops before any charge starts.
Contact the site owner
The site owner is the author of this iOrdly site. Write about the app, your account, or this notice. The restaurant that took an order remains the contact for that order.