Privacy Policy

1. Who We Are

gettakeaway.net is a UK-based technology platform providing online food ordering services for restaurants and an iPad point-of-sale application called TouchPOS.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Our Products

This Privacy Policy covers both of our products:

3. What Data We Collect

gettakeaway.net — Customers (people placing food orders)

• Account information: name, email address, phone number
• Delivery information: delivery address
• Order history: items ordered, order amounts, timestamps
• Payment information: processed via Stripe; we do not store full card numbers
• Device/technical data: IP address, browser type, pages visited (for security and performance)

gettakeaway.net — Restaurant Operators

• Business information: restaurant name, address, phone number, email
• Billing information: payment method via Stripe for platform subscription
• Menu and order data: menus created, orders received, reports generated

TouchPOS App — Restaurant Operators & Staff

• Licence information: restaurant name, contact email, licence key
• Device identifier: a unique device ID stored in secure device storage (Keychain) — used to bind your licence to your iPad
• Order data: orders processed through the app (stored locally on device and synced to your account)
• Billing: subscription managed via Stripe; card details handled by Stripe directly

TouchPOS does not collect personal data about end customers (diners). It is a tool for restaurant staff only. No advertising or behavioural tracking is performed.

4. How We Use Your Data

• To provide the service — processing orders, activating licences, managing accounts
• To process payments — subscription billing and order payments via Stripe
• To communicate with you — sending licence keys, receipts, support replies, and important service updates
• To verify licence validity — TouchPOS contacts our server on every launch to confirm your licence is active
• To improve the service — analysing usage patterns in aggregate (no individual profiling)
• To comply with legal obligations — tax records, fraud prevention

We rely on contract performance and legitimate interests as our lawful bases under UK GDPR. We do not use your data for advertising or sell it to third parties.

5. Who We Share Data With

• Stripe (stripe.com/gb/privacy) — payment processing for subscriptions and orders. Stripe handles card data directly and is PCI-DSS compliant.
• Hosting infrastructure — our servers are hosted on a VPS (virtual private server). Data is stored in the UK/EU.
• SumUp (TouchPOS card payments) — if you use the SumUp integration in TouchPOS, card transaction data is processed by SumUp under their own privacy policy.

We do not sell, rent, or trade personal data with any third parties for marketing purposes.

6. How Long We Keep Data

• Order data: retained for 7 years to comply with UK tax and accounting requirements
• Account data: retained while your account is active; deleted within 90 days of account closure upon request
• TouchPOS licence data: retained for the duration of your subscription plus 90 days
• Server logs: retained for up to 90 days for security monitoring

7. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to restrict processing of your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at info.gettakeaway@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

The gettakeaway.net website uses the following cookies:

• Session cookies — to keep you logged in while using the platform (essential, expire when you close your browser)
• Preference cookies — to remember settings such as your restaurant or basket

We do not use advertising cookies or cross-site tracking cookies. The TouchPOS iPad app does not use cookies; it uses the iOS Keychain for secure local storage.

9. Security

We take appropriate technical and organisational measures to protect your data, including:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using bcrypt
• Licence keys and device IDs stored in iOS Keychain (hardware-backed encryption on supported devices)
• Database access restricted to server-side application code only
• Payment card data never stored on our servers — handled entirely by Stripe

If you discover a security vulnerability, please email info.gettakeaway@gmail.com responsibly.

10. Children

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For material changes, we will notify active users by email. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or concerns: