Privacy policy

Intra Order (“we”, “us”) is based in Edmonton, Alberta. We provide online ordering software to restaurants. This policy explains what personal information we collect, why, and the choices you have. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Alberta's Personal Information Protection Act (PIPA).

Who this policy covers

• Restaurant clients and their staff who use Intra Order.
• Diners who place orders on a restaurant's ordering page powered by Intra Order.
• Visitors to our website, including people who book a demo.

Restaurants control their diners' information

When you order from a restaurant, that restaurant is responsible for your information and decides how it is used. We process it on the restaurant's behalf, only to provide our service to them, and we never sell it or use it to promote other restaurants. Questions about how a restaurant uses your information should go to that restaurant first; we will help them respond.

What we collect

From diners

• Name, phone number and email address, to fill and update you about your order.
• Order details, pickup time, delivery address and notes.
• Marketing consent, if you choose to give it, and when you gave it.

Card details are entered directly with our payment processor, Stripe. We do not see or store full card numbers.

From restaurants and demo requests

• Contact details, restaurant name, city, the delivery apps and POS you use, and anything you tell us in a message.
• Account and configuration details needed to run your ordering page.

Automatically

• Basic technical information such as IP address and browser type, used for security, spam prevention and keeping the service running. For demo requests we store only a one-way hash of your IP address, used for rate limiting.

How we use it

• To take, pay for, prepare and deliver orders, and send order updates by text or email.
• To provide, support, secure and improve our service.
• To respond to demo requests and communicate with restaurant clients.
• To meet legal, tax and accounting obligations.

Commercial electronic messages (CASL)

Order confirmations and status updates are transactional messages. We, or restaurants using Intra Order, send promotional texts or emails only with your consent as required by Canada's Anti-Spam Legislation (CASL). Every promotional message identifies the sender and includes a working way to unsubscribe, for example replying STOP to a text. Unsubscribe requests are honoured within 10 business days.

Who we share it with

We share personal information only with service providers who help us run the service, under contracts that protect it:

• Stripe (payment processing)
• Uber Direct (delivery, for delivery orders only: name, phone and address)
• The restaurant's point-of-sale provider, such as Square or Clover, when the restaurant connects one
• Text message and email delivery providers, and our hosting and database providers

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information where required by law.

How long we keep it

We keep personal information only as long as needed for the purposes above, or as required by law (for example tax records). Restaurants may ask us to delete their diners' information when they leave Intra Order.

How we protect it

We use reasonable physical, organizational and technical safeguards, including encryption in transit and access controls. If a breach of security safeguards creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

Your rights

You can ask to access or correct your personal information, or withdraw consent (subject to legal or contractual limits). Contact us at intraorderinc@gmail.com. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Contact

Privacy questions: intraorderinc@gmail.com, Intra Order, Edmonton, Alberta, Canada.