Privacy Policy

Food Order Lane provides a digital ordering and restaurant management platform for restaurants, cafes and other hospitality businesses.

The platform allows Restaurants to manage digital menus, QR code ordering, tables, customer orders, kitchen workflows, restaurant analytics and other restaurant operations.

In this Privacy Policy:

"Food Order Lane", "we", "us" and "our" mean the operator of Food Order Lane.

"Restaurant" means a restaurant, cafe or other hospitality business using Food Order Lane.

"Customer" means a person accessing a Restaurant's menu or placing an order through Food Order Lane.

"User" means any person who accesses or uses Food Order Lane, including Restaurant owners, Restaurant staff and Customers.

The information we collect depends on how you use Food Order Lane.

Restaurant account information

When a Restaurant owner or staff member creates or uses an account, we may collect:

• name
• email address
• phone number
• login and authentication information
• Restaurant name
• Restaurant address
• business contact information
• account role and permissions
• subscription information
• billing information
• account preferences

Restaurant information

Restaurants may provide information such as:

• Restaurant name and description
• addresses and locations
• opening hours
• contact information
• logos and images
• menu information
• categories and menu items
• menu item variants
• table information
• QR code and table identifiers
• pricing
• tax settings
• operational information

Some Restaurant information is business information rather than personal information, although it may contain personal information in some circumstances.

Customer ordering information

When a Customer accesses a Restaurant menu or places an order using Food Order Lane, we may process information such as:

• name
• phone number
• email address, where requested
• Restaurant and Restaurant location
• table information
• QR or table identifier
• order details
• menu items ordered
• item quantities
• selected options or variants
• order notes
• order time
• order status
• estimated preparation time
• transaction or payment status information where applicable

The exact information collected may depend on how the Restaurant has configured its Food Order Lane service.

Order notes and dietary information

Customers may choose to provide information in an order note, such as preparation instructions, allergy information or dietary requirements.

Order notes are provided to the relevant Restaurant so that it can manage the order.

Customers should only include information that is reasonably necessary for their order.

Information relating to allergies, health conditions or dietary requirements may be sensitive in nature. Restaurants are responsible for handling that information appropriately and only using it for the purpose of managing the Customer's order.

Communications

If you contact us, we may collect:

• your name
• email address
• phone number
• the content of your communication
• support requests
• correspondence and related records

Technical and usage information

When you use Food Order Lane, certain technical information may be collected automatically, including:

• IP address
• browser type
• device type
• operating system
• pages or features used
• date and time of access
• referring pages
• session information
• diagnostic and error information
• security logs

We may use cookies, browser local storage and similar technologies for these purposes.

We may collect personal information:

• directly from you
• when you create or manage an account
• when you access a Restaurant menu
• when you place an order
• when you contact us
• when you use our website or platform
• from a Restaurant using Food Order Lane
• from authentication providers you choose to use
• from payment providers
• from service providers involved in operating the platform
• automatically through cookies, browser storage and technical logs

Sometimes Food Order Lane may receive personal information about an individual from another source rather than directly from that individual.

For example, a Restaurant may enter, manage or otherwise provide information relating to a Customer through Food Order Lane.

Where required by New Zealand privacy law, we will take reasonable steps to ensure that individuals are informed about the collection, purpose, intended recipients and handling of personal information collected indirectly.

There are circumstances under applicable law where notification may not be required.

We collect and process personal information where reasonably necessary to operate, secure and improve Food Order Lane.

This may include using information to:

• create and manage accounts
• authenticate users
• provide Restaurant management features
• display Restaurant menus
• identify the Restaurant, location or table associated with an order
• process and manage Customer orders
• display order status and estimated preparation times
• connect Customer orders with the appropriate Restaurant
• provide Restaurant analytics and reporting
• provide customer support
• manage subscriptions and billing
• process payments where payment functionality is available
• send important account and service notifications
• improve platform reliability and performance
• diagnose technical problems
• prevent fraud, abuse or misuse
• maintain platform and account security
• understand how Food Order Lane is used
• develop and improve features
• comply with legal obligations
• enforce our Terms of Use

We aim to collect only personal information that is reasonably necessary for these purposes.

Food Order Lane provides technology used by Restaurants to manage orders and interact with their Customers.

When Food Order Lane processes Customer personal information in connection with a Restaurant order, that information may be processed on behalf of the relevant Restaurant as part of providing the Food Order Lane platform.

The Restaurant determines many aspects of why Customer information is collected and how it is used in connection with the Restaurant's food, services and Customer relationship.

The Restaurant may therefore have its own obligations under applicable privacy laws.

Restaurants must only access and use Customer information available through Food Order Lane for legitimate purposes such as:

• processing and preparing orders
• providing Restaurant services
• resolving order issues
• providing appropriate customer service
• maintaining legitimate Restaurant records
• complying with applicable law

Restaurants must not sell, misuse or access Customer personal information for unrelated purposes.

Food Order Lane may restrict access where we reasonably believe Customer information is being used unlawfully or in breach of our Terms.

We may use personal information for the purpose for which it was collected and for related purposes that are reasonably necessary to provide, secure and improve Food Order Lane.

For example, Customer information may be made available to the Restaurant receiving the Customer's order so that the Restaurant can prepare, manage, provide and resolve issues relating to that order.

Restaurant account information may be used to administer the Restaurant's account, subscription, billing, support requests, permissions and security.

Technical information may be used to diagnose problems, improve performance, prevent abuse and maintain platform security.

We will not use personal information for a materially different purpose unless permitted by law or appropriate consent has been obtained.

We do not sell personal information.

We may disclose or make personal information available where reasonably necessary to operate Food Order Lane.

Restaurants

Customer information relating to an order may be provided to the Restaurant receiving that order.

This may include information necessary for the Restaurant to:

• identify and manage the order
• prepare the requested items
• understand Customer instructions
• communicate with the Customer where necessary
• resolve order issues

Service providers

Food Order Lane uses trusted service providers to help operate the platform.

These may include:

• Supabase for database, authentication, storage and realtime platform functionality
• Vercel for application hosting, infrastructure and delivery of the Food Order Lane application
• Stripe for subscription billing, payment processing and billing-related services
• Google for Google sign-in, authentication and related Google services
• infrastructure, monitoring and security providers
• other technology providers required to operate Food Order Lane

These providers may process personal information where necessary to provide their services to Food Order Lane.

Our service providers may have their own privacy policies and security practices.

Legal and regulatory authorities

We may disclose information where reasonably necessary to:

• comply with applicable law
• respond to a lawful request or legal process
• enforce our legal rights
• investigate suspected fraud or unlawful activity
• protect Food Order Lane, Restaurants, Customers or others from harm
• respond to security or privacy incidents

Business transactions

If Food Order Lane or the business operating it is sold, reorganised, merged, financed or transferred, information may be transferred as part of that transaction, subject to applicable privacy law.

Food Order Lane uses technology and service providers that may store, process or access information outside New Zealand.

This may include providers of hosting, cloud infrastructure, authentication, database, payment and related technology services.

This means personal information may be processed in countries with privacy laws that differ from those in New Zealand.

Where New Zealand privacy law applies to an overseas disclosure, we will take reasonable steps to ensure that the disclosure complies with applicable requirements and that appropriate privacy safeguards are in place.

Different legal rules may apply where an overseas provider is processing or storing information on our behalf rather than receiving the information for its own purposes.

Food Order Lane uses Stripe to provide subscription billing and payment-related services.

When a Restaurant purchases a Food Order Lane subscription, Stripe may collect and process payment information.

Food Order Lane may receive information such as:

• payment status
• subscription status
• billing period
• transaction reference
• Stripe customer or subscription identifiers
• limited payment method information
• payment failure or cancellation information

Complete payment card information is generally collected and processed directly by Stripe rather than stored by Food Order Lane.

Stripe processes information in accordance with its own privacy practices.

If Food Order Lane introduces online Customer payments for Restaurant orders, additional transaction information may also be processed through the relevant payment provider.

Food Order Lane may allow Restaurant users to sign in using email authentication or third-party authentication services such as Google.

If you choose to sign in using Google, we may receive information that you authorise Google to provide to us.

This may include:

• your name
• email address
• profile information made available through the authentication process
• an account identifier

We use this information to authenticate you and provide access to your Food Order Lane account.

Google's handling of information through its services is also subject to Google's own privacy practices.

Food Order Lane and services used to operate the platform may send communications relating to your account or use of Food Order Lane.

These communications may include:

• account verification messages
• authentication messages
• password-related communications
• security alerts
• account notices
• billing and subscription messages
• payment confirmations
• payment failure notices
• Restaurant or order-related communications
• important platform updates

Depending on the type of communication, messages may be generated or delivered through Food Order Lane's Vercel-hosted application or through providers such as Stripe or Google.

These operational communications are necessary in some circumstances to provide, administer or protect Food Order Lane and are separate from marketing communications.

Food Order Lane may use cookies, browser local storage and similar technologies.

These technologies may be used to:

• keep Restaurant users signed in
• maintain secure user sessions
• remember settings
• maintain Customer shopping cart information
• remember Restaurant or table context
• support platform functionality
• improve performance
• understand how the website and platform are used
• detect fraud, abuse and security issues

For example, Food Order Lane may use browser local storage to maintain a Customer's shopping cart while the Customer browses a Restaurant menu.

Some cookies and browser storage are necessary for Food Order Lane to operate correctly.

Where required, you may be given choices regarding optional technologies.

You can control certain cookies and stored information through your browser settings.

Removing or disabling necessary cookies or browser storage may affect how Food Order Lane functions.

Food Order Lane uses information generated through the platform to provide Restaurants with analytics, reporting and operational insights through the Food Order Lane dashboard.

Depending on the features available to a Restaurant, this may include information such as:

• sales totals
• order volumes
• average order value
• popular menu items
• menu performance
• order status information
• preparation and service performance
• Restaurant performance
• location performance
• ordering patterns
• other operational insights

These analytics are features of the Food Order Lane platform rather than a separate third-party analytics service.

Restaurants may use these reports to understand and improve their operations.

Food Order Lane may also use aggregated or de-identified information to understand platform usage, improve Food Order Lane and develop new features.

Where information has been properly anonymised so that it no longer identifies an individual, it may no longer be treated as personal information.

We may send information about Food Order Lane where you have consented to receive marketing communications or where otherwise permitted by applicable law.

Marketing communications may include information about:

• Food Order Lane features
• product updates
• offers or promotions
• Restaurant technology information
• other Food Order Lane products or services

Where required, commercial electronic messages will identify the sender and include an appropriate way to unsubscribe.

You can unsubscribe from marketing communications at any time.

Unsubscribing from marketing communications will not prevent us from sending necessary service communications such as:

• authentication messages
• security alerts
• subscription notices
• billing information
• payment messages
• important account notices
• operational communications

We use reasonable technical and organisational safeguards designed to protect personal information against:

• unauthorised access
• loss
• misuse
• inappropriate disclosure
• alteration
• destruction

These measures may include:

• authentication controls
• access controls
• account permissions
• secure cloud infrastructure
• database security controls
• encrypted network connections
• monitoring and logging
• restrictions on access to information
• security measures provided by our technology providers

No internet-based service can guarantee absolute security.

Restaurants also have a responsibility to protect their Food Order Lane accounts, passwords, devices and staff access.

If we become aware of a privacy breach, we will assess and respond to it in accordance with applicable law.

Where a privacy breach meets the legal threshold for notification, we will notify the New Zealand Office of the Privacy Commissioner and affected individuals as required.

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required for legitimate business or legal purposes.

The amount of time information is retained may depend on:

• the type of information
• whether a Restaurant account remains active
• whether a Restaurant is using a free trial or paid subscription
• the nature of Customer order information
• subscription and billing requirements
• legal and tax obligations
• security requirements
• fraud prevention
• dispute resolution
• operational requirements
• backup and recovery processes

When information is no longer reasonably required, we may securely delete or anonymise it.

Information may remain in secure backups for a limited period after deletion from active systems.

We will not keep personal information for longer than reasonably necessary simply because storage is available.

Under New Zealand privacy law, you may have the right to request access to personal information we hold about you.

You may contact us using the details below to make a request.

We may need to verify your identity before providing personal information.

We will respond to privacy requests in accordance with applicable legal requirements.

There may be limited situations where the law permits or requires us to withhold information.

If personal information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct it.

Some Restaurant account and business information can also be updated directly through Food Order Lane.

If we do not make a requested correction, you may have the right under New Zealand privacy law to ask us to attach or record a statement of the correction requested.

You may contact us to request deletion of personal information.

We will consider the request in accordance with applicable law and the nature of the information involved.

We may need to retain certain information where reasonably necessary for:

• legal obligations
• tax and accounting records
• subscription and transaction records
• fraud prevention
• security
• disputes
• enforcement of legal rights
• legitimate business records

Information may also remain temporarily within secure backup systems after deletion from active systems.

Where information cannot immediately be deleted, we may restrict its use where appropriate.

A Customer may contact either Food Order Lane or the relevant Restaurant about personal information connected with an order.

If your request primarily relates to information that the Restaurant controls or uses for its own purposes, we may direct you to the Restaurant.

Where Food Order Lane itself holds or controls the relevant information, we will handle the request in accordance with applicable privacy law.

Where appropriate, Food Order Lane may assist a Restaurant with responding to a Customer privacy request relating to information stored through the platform.

Food Order Lane is designed primarily for Restaurants and Customers ordering food and is not intended to collect unnecessary personal information from children.

Restaurants should take appropriate care when collecting or using personal information relating to children or young people.

A child or young person should not provide personal information that is unnecessary for an order.

If you believe personal information about a child has been collected or used inappropriately through Food Order Lane, please contact us.

Food Order Lane may contain links to, integrate with or use services operated by third parties.

These may include authentication providers, payment providers or other Restaurant technology services.

Independent third parties may have their own terms and privacy policies.

Food Order Lane is not responsible for the privacy practices of independent third-party services where those services determine their own collection and use of personal information.

You should review the relevant provider's privacy information where appropriate.

Restaurants using Food Order Lane are responsible for complying with privacy laws that apply to their own business and use of Customer information.

Restaurants must:

• only collect Customer information they reasonably need
• tell Customers about their collection of personal information where required
• use Customer information for legitimate Restaurant purposes
• protect access to Customer information
• ensure staff only access information where required for their role
• remove staff access where it is no longer required
• not sell or misuse Customer personal information
• not use Customer information for unrelated purposes without an appropriate legal basis
• respond appropriately to privacy requests
• comply with applicable privacy and marketing laws
• notify Food Order Lane where they become aware of a security or privacy issue affecting information held through the platform

Restaurants should not export or copy Customer information from Food Order Lane unless there is a legitimate business reason to do so.

Food Order Lane may restrict access where Customer information is being used unlawfully or in breach of our Terms.

A privacy breach may include accidental or unauthorised access to, disclosure, alteration, loss or destruction of personal information.

If Food Order Lane becomes aware of a privacy breach affecting information we hold, we will:

• investigate the incident
• take reasonable steps to contain or reduce potential harm
• assess the nature and impact of the breach
• take appropriate steps to prevent similar incidents where reasonably possible
• comply with applicable notification requirements

Where a privacy breach is likely to cause serious harm and notification is required by New Zealand privacy law, we will notify the Office of the Privacy Commissioner and affected individuals as required.

Restaurants must promptly notify Food Order Lane if they become aware of a suspected privacy or security breach involving Food Order Lane data.

We may update this Privacy Policy from time to time to reflect:

• changes to Food Order Lane
• new platform features
• changes to our service providers
• changes to our privacy practices
• changes to legal requirements
• changes to the types of information we process

The latest version will be available on the Food Order Lane website and will show the date it was last updated.

Where changes are significant, we may take additional steps to notify affected users where appropriate.

If you have a concern about how Food Order Lane has collected, used, stored or disclosed your personal information, please contact us first so that we can investigate the issue.

We will take privacy complaints seriously and will respond in accordance with applicable legal requirements.

You may also make a complaint to the New Zealand Office of the Privacy Commissioner.

For questions, requests to access or correct personal information, privacy concerns or complaints, please contact us.