Privacy Policy

1. Who we are

GetTakeaway is an online ordering system for restaurants and takeaways. It is run by GetTakeaway Ltd, operator of gettakeaway.net (“GetTakeaway”, “we”, “us”).

This policy explains how we handle personal data. For TouchPOS, our till app, see also the TouchPOS Privacy Policy.

2. Restaurants and their customers

There are two different situations:

• Restaurants using GetTakeaway (owners and staff), and visitors to gettakeaway.net: we are the controller of your personal data. This policy applies in full.
• Customers ordering from a restaurant on its GetTakeaway website or app: the restaurant is the controller of your data, and its own privacy notice applies. We store and process your data on the restaurant’s behalf, only to provide its ordering service, as its processor. If you have a question about your order or account, please contact the restaurant first. We will help it respond.

3. What we collect

From restaurants (our customers)

• Account details: restaurant name, your name, email address and the web address you choose. Your password is stored only in encrypted (hashed) form.
• Business details you add in Settings, such as address, phone number, opening hours and logo.
• Billing details: your plan, subscription status and payment history. Card payments are handled by Stripe; we never receive or store your full card number.
• TouchPOS details: licence key, device name and licence status.
• Messages you send us, such as support emails.

From visitors to gettakeaway.net

• Technical data: IP address, browser and device type and pages requested, recorded in our server logs for security and to keep the service working.
• We do not use advertising or analytics tracking on gettakeaway.net.

Processed for restaurants (their customers’ data)

• Customer names, email addresses, phone numbers and delivery addresses;
• orders, order history, notes (including any dietary notes customers choose to add), loyalty points and gift voucher use;
• customer accounts and saved addresses, and marketing choices (only customers who opt in receive marketing);
• delivery tracking information, such as the driver’s location while a delivery is in progress, where the restaurant uses this.

Card payments from customers are made through the restaurant’s own SumUp account. Card details go directly to SumUp and are never stored by GetTakeaway.

4. Why we use it

We don’t sell personal data, and we don’t use it for advertising. We don’t make decisions about people based solely on automated processing that have legal or similarly significant effects.

5. Who we share it with

We only share personal data with service providers who help us run GetTakeaway (our sub-processors), under contracts that protect it, or where the law requires us to.

We may also share data with professional advisers, with authorities where the law requires it, or with a business that takes over GetTakeaway. Restaurants will be told of any change to our sub-processors before it happens.

6. International transfers

Our servers are in the USA, and some of the providers above are outside the Isle of Man, the UK and the EU. When personal data is transferred, we make sure it is protected by appropriate safeguards, such as adequacy decisions, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, or the provider’s certification under the Data Privacy Framework.

7. How long we keep it

A restaurant can delete individual customer records at any time. Customers who want their data deleted should ask the restaurant, and we will carry out its instructions.

8. How we protect it

• All connections to GetTakeaway are encrypted (HTTPS).
• Passwords are stored hashed, never in plain text.
• Each restaurant’s data is kept in its own separate database.
• Server access is restricted to key-based logins; we use a firewall, automatic blocking of repeated login attempts and automatic security updates.
• Data is backed up every night.
• Only people who need access to provide the service have it, and they are bound by confidentiality.

No system is completely secure. If a breach affects your personal data, we will tell the people affected, the restaurants concerned and the regulator where the law requires.

9. Cookies

gettakeaway.net and GetTakeaway ordering websites only use cookies and similar storage that are needed to make them work, for example to keep you logged in, protect forms against misuse and remember your basket. These don’t need consent and are not used for tracking or advertising.

Some features load content from other services, such as SumUp’s card payment form, maps and fonts. Those services may set their own cookies under their own policies.

10. Your rights

Under data protection law (the Isle of Man GDPR and, where they apply, the UK GDPR and EU GDPR) you have the right to:

• ask for a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To use these rights, email info@gettakeaway.net. We will reply within one month. If you are a customer of a restaurant, please contact the restaurant, which is responsible for your data. We will help it.

11. Children

GetTakeaway accounts are for businesses and are not intended for anyone under 18. Restaurants are responsible for their own rules on ordering by children.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make important changes, we will tell restaurants by email before they take effect.

13. Contact and complaints

For any question about privacy, or to use your rights, email info@gettakeaway.net.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Isle of Man Information Commissioner, or, if you are in the UK, the Information Commissioner’s Office (ICO).

Operated by GetTakeaway Ltd, operator of gettakeaway.net.