Privacy policy

01Two kinds of people

Restro holds personal data about two groups, and the roles are different for each.

For your staff and for you, we decide how and why the data is used, so we are the controller. For your diners, you decide — we hold and process their data on your instructions, so you are the controller and we are your processor.

02What we collect about restaurants

To run your account we hold:

• Names, email addresses, phone numbers and roles of the people you invite
• Sign-in records, including time, and the surface used
• Billing details and invoice history, held by our payment provider
• Support conversations
• Technical logs used to diagnose faults and detect abuse

03What we hold about diners, for you

On your behalf we hold names, contact details, delivery addresses, order history, store credit balances, reviews and marketing preferences of the people who order from you. Where they order without an account, we hold a device identifier instead of a named record.

We do not contact your diners for our own purposes, ever. Emails they receive from Restro — order updates, review requests, cart reminders — are sent as you, because you asked for them.

04Card details

Card numbers never reach our systems. They go directly to the payment provider you connect. We store their reference so a refund can be pushed back to the right payment, and nothing more.

05Who else is involved

We use a small number of providers to run the service: hosting, email delivery, text messaging, error monitoring, and the payment providers you choose to connect. Each is bound to process data only on our instructions.

Where you switch on tracking pixels or an integration of your own, data goes to that provider under their terms, and turning it on is your decision.

06How long things are kept

Order and financial records are kept while your account is open and afterwards for as long as tax law requires.

Abandoned carts, including any contact details captured at checkout, are deleted after the window you choose.

Technical logs are kept for a short period and then discarded. Deleting a diner’s data anonymizes their record rather than removing it, so order totals survive for your tax records.

07Rights

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by writing to us.

A diner exercising the same rights should ask the restaurant they ordered from. If they ask us, we will pass the request on to you rather than answer it ourselves, because it is your data to answer for.

08Where data is held

Data is stored in the region we agree with you at signup. Where it has to move outside that region — for example to a support provider — we use the legal safeguards required for that transfer.