Who we are
Ordrly Ltd ("Ordrly", "we", "us" or "our") provides software that helps UK restaurants manage orders from delivery platforms such as Uber Eats, Deliveroo and Just Eat, dispatch drivers, and understand their business performance.
This privacy policy explains what personal data we collect from you and your business, why we collect it, how long we keep it, and the rights you have over it. It applies to anyone who uses the Ordrly website, mobile apps, or dashboard.
Ordrly is the data controller for the personal data described in this policy, unless stated otherwise.
What data we collect
We collect the following categories of information:
- Account information — your name, email address and phone number when you sign up or are added to a restaurant's team.
- Restaurant details — restaurant name, address, delivery platform connections, and operational settings such as driver pay rates.
- Order data — orders received from connected delivery platforms, including items, prices, timestamps, status updates, and delivery addresses needed to dispatch drivers.
- Payment data — subscription billing details are collected and processed by Stripe on our behalf. Ordrly does not store full card numbers.
- Usage data — basic technical information such as device type, app version and crash diagnostics, used to keep the service reliable.
Why we collect it
We process personal data on the following lawful bases under UK GDPR:
- Performance of a contract — to create your account, operate the dashboard, process orders, and provide the subscription you've signed up for.
- Legitimate interests — to keep the service secure, prevent fraud, improve features, and communicate important service updates.
- Consent — for optional communications such as product news, which you can withdraw at any time.
- Legal obligation — to meet accounting, tax and regulatory requirements.
How long we keep it
We keep account and restaurant data for as long as your account is active, and for a reasonable period afterwards in case you wish to reactivate it. Order data is retained for as long as needed for your business records and reporting, typically up to 7 years to satisfy UK accounting and tax requirements.
If you ask us to delete your account, we will erase or anonymise personal data that we are not legally required to retain, usually within 30 days.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your personal data, in certain circumstances.
- Portability — receive your data in a structured, commonly used format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us using the details below.
Contact us
If you have any questions about this privacy policy or how we handle your data, email us at privacy@ordrly.xyz.
How to complain to the ICO
If you're unhappy with how we've handled your personal data, we'd appreciate the chance to put things right — please contact us first. You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk.