Privacy Policy

1. Who is responsible for what

For the data a restaurant puts into ServeMore — its menu, orders, staff and guests — the restaurant decides what happens to it. We process that data on the restaurant’s instructions, to deliver the service.

For our own records — who our customers are, invoices, support conversations — we are responsible ourselves.

Are you a guest with a question about an order you placed? Contact the restaurant first; they hold that record.

2. What we handle

Depending on who you are, this can include:

• Restaurant and staff: name, email address, role, login details (passwords are stored hashed, never in readable form), and a log of important actions such as logging in, voiding a line or closing a cash shift.
• Guests: what was ordered, at which table, any note you added, and — if you provided it — a name or phone number for the order. You do not need an account to order.
• Technical: IP address, browser type and timestamps, kept in server logs so we can keep the service secure and working.

3. Payment details

We do not store card numbers. When online payment becomes available it is handled by a specialised payment provider; the card data goes to them, not to us. We only receive whether a payment succeeded and for what amount.

4. Why we handle it

To show the menu, take and deliver orders, produce bills and reports, and let staff do their work. To invoice the restaurant. To keep the service secure, investigate misuse and restore from backup when something goes wrong. To support you when you contact us.

We do not use this data for advertising and we do not sell it to anyone.

5. Cookies and local storage

We use only what the product needs: a cookie that keeps you signed in, and local storage for your language choice and your open order. There are no advertising or tracking cookies, and no third-party analytics on the guest ordering pages.

6. Who else sees it

Only the parties needed to deliver the service:

• our hosting provider, which runs the servers;
• our email provider, for account emails such as invitations and password resets;
• a payment provider, once online payment is enabled;
• authorities, if we are legally obliged to provide something.

7. How long we keep it

Orders and reports are kept while the restaurant’s account is active, because they are its own business records. Security and action logs are kept for 12 months. Backups are kept for 30 days.

After an account ends we remove the data after 90 days, except records we are legally required to keep.

8. How we protect it

All traffic runs over an encrypted connection. Passwords are hashed. Access is limited by role, and sensitive actions are logged. The database is not reachable from the internet. We take daily verified backups and we update the software regularly.

9. Your rights

You can ask what data we hold about you, have it corrected, or have it removed where we are not required to keep it. Staff should ask their restaurant; restaurants can ask us directly.

Write to privacy@serve-more.com. We respond within 30 days.

10. Children

ServeMore is not aimed at children. We do not knowingly collect data from children and we ask no personal details from guests beyond what the order needs.

11. Changes

If this policy changes we update the date above and inform account holders of any substantial change.