Privacy Policy
This policy explains how Orderly handles personal data. It has been prepared to reflect the Kenya Data Protection Act, 2019, and should be reviewed by a qualified lawyer before you rely on it.
1. Who we are
Orderly provides restaurant management software, online ordering and delivery coordination in Kenya. For the purposes of the Data Protection Act, Orderly is the data controller for information collected through our website and services. Our office is at Ruha Plaza, Kahawa Sukari, Kiambu. Contact us at [email protected] or 0797049888.
2. Whose data we handle
We handle personal data belonging to three groups:
- Restaurant customers - the owners and staff of restaurants using Orderly
- Diners - people who order food through a restaurant using our system
- Riders - people who apply to deliver, or who deliver, through Orderly
Where a restaurant uses Orderly to serve its own customers, the restaurant is the controller of its customer data and Orderly acts as a processor on its behalf.
3. What we collect
- Contact details - name, phone number, email address, business name and location
- Account information - login credentials and access permissions
- Transaction information - orders, payments and invoices processed through the system
- Rider information - identification, licence and good conduct documents submitted during verification
- Technical information - IP address, device and browser type, and pages visited on our website
4. Why we use it and on what basis
| Purpose | Lawful basis |
|---|---|
| Providing the software and support you have paid for | Performance of a contract |
| Processing payments and issuing invoices | Performance of a contract, and legal obligation |
| Verifying riders before they deliver | Legitimate interest in safety, and consent |
| Tax records and eTIMS invoicing | Legal obligation |
| Improving the product and website | Legitimate interest |
| Marketing communications | Consent, which you may withdraw at any time |
5. Who we share it with
We share personal data only where necessary:
- Payment providers such as Safaricom M-Pesa and Paystack, to process payments
- Riders - a delivery rider receives the customer name, phone number and delivery address needed to complete that delivery, and nothing more
- KRA, where eTIMS invoicing requires it
- Service providers who host or support our systems, under written confidentiality obligations
We do not sell personal data, and we do not share your restaurant's customer list with other restaurants.
6. Where data is stored
Orderly runs in the cloud. Where data is transferred or stored outside Kenya, we take steps to ensure it is protected to a standard consistent with the Data Protection Act.
7. How long we keep it
We keep personal data for as long as you use Orderly, and afterwards only as long as needed for legal, tax and accounting purposes. Rider verification documents are kept only while the rider is active with us, and for a reasonable period afterwards.
8. Your rights
Under the Kenya Data Protection Act you have the right to:
- Be informed how your data is used
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted, where we are not required to keep it
- Object to processing, including for marketing
- Receive your data in a portable format
To exercise any of these, contact us at [email protected]. We respond as quickly as we can and within the period required by law. If you are unhappy with our response you may complain to the Office of the Data Protection Commissioner.
9. Your restaurant's data belongs to you
Your menu, sales history and customer records are yours. You can ask for a full export at any time and we will provide it, including if you decide to stop using Orderly.
10. Security
We use role-based access so staff see only what they need, encrypted connections, and regular backups. No system is completely secure, but we take reasonable technical and organisational measures to protect your information.
11. Cookies
Our website uses cookies to keep the site working, remember your preferences and understand how the site is used through analytics. You can control cookies through your browser settings.
12. Changes
We may update this policy. Where changes are significant we will notify customers by email.
13. Contact
Questions about privacy or your data: [email protected] or 0797049888, or write to us at Ruha Plaza, Kahawa Sukari, Kiambu.