Privacy Policy

Information we collect

• Account information — name, email address, phone number and role for restaurant owners and staff accounts created on the platform.
• Restaurant data — menus, prices, branch details, table layouts, staff rosters and settings that you enter to run your restaurant.
• Order and transaction data — orders, payments recorded against them, delivery assignments and settlement records generated through normal use of the platform.
• Customer details — names, phone numbers and delivery addresses that restaurants record for their own customers, for example on delivery orders.
• Device and technical data — device pairing identifiers for tills and kitchen displays, log data, and basic technical information needed to keep the service running and secure.
• Enquiry details — information you submit through the enquiry form on this website, used only to respond to you.

How we use it

• To provide and operate the platform — processing orders, syncing devices, generating reports.
• To keep the service secure — authenticating users, scoping access by role, detecting misuse.
• To support you — responding to enquiries and support requests.
• To improve the product — using aggregate, de-identified usage patterns. We do not sell personal data.

Sharing

We share data only with service providers needed to run the platform (such as hosting and email delivery providers), under agreements that limit how they may use it; and where required by law. Each restaurant's data is visible only to that restaurant's authorised users, scoped by their role.

Customer data belongs to the restaurant

Data that a restaurant records about its own customers (for example delivery addresses) is controlled by that restaurant. BiteGrid processes it on the restaurant's behalf to provide the service. Customers with questions about their data held by a restaurant should contact that restaurant directly.

Retention

We keep account and operational data for as long as the account is active, and for a reasonable period afterwards to meet legal, accounting and dispute-resolution obligations, after which it is deleted or anonymised.

Security

Data is encrypted in transit, access is protected by authentication and role-based permissions, and paired devices can be revoked at any time from the admin panel. No system is perfectly secure, but we design for least-privilege access throughout.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete personal data we hold about you. Send requests through the enquiry form and we will respond within a reasonable timeframe.

Cookies

This marketing website stores only a theme preference (light or dark mode) in your browser. It does not use advertising or cross-site tracking cookies. The platform itself uses strictly necessary session storage to keep users signed in.

Children

The platform and this website are intended for business use and not directed at children.

Changes

If this policy changes, the date at the top of this page will be updated. Material changes affecting platform customers will be communicated directly.

Contact

Questions about this policy can be sent through the enquiry form.