Legal
Privacy Policy
Effective Date: 05/05/2026
Bites Limited ("we", "us", "our") is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we process personal data in connection with our restaurant order management software, which is installed on point-of-sale (POS) devices used by business customers (e.g. restaurants and food outlets) to receive and manage orders placed by end users via websites or mobile applications.
1. Important Context
Our software is designed for business use (B2B).
- The app is installed on restaurant POS devices
- It is used to receive and process orders placed by customers via external platforms (e.g. websites or apps)
- Bites Limited acts primarily as a data processor on behalf of the restaurant (data controller) in relation to customer order data
2. Data Controller and Processor Roles
- The restaurant or business using the app is the data controller of customer data
- Bites Limited acts as a data processor, processing data on behalf of the business
- In some cases (e.g. app usage, device data), Bites Limited may act as a data controller
3. Personal Data We Process
3.1 Customer Order Data (Processed on behalf of restaurants)
This may include:
- Customer name
- Contact details (phone number, email)
- Delivery or collection address
- Order details and preferences
Purpose: To display, process, and manage orders for the restaurant.
Legal basis: Processing on behalf of the data controller (restaurant) under Article 28 UK GDPR. We do not use this data for our own independent purposes.
3.2 Device and Technical Data
We may collect:
- Device model and operating system
- App version
- Network status
- System logs and error logs
Purpose: Ensure system stability, troubleshoot issues, improve performance.
Legal basis: Legitimate interests (Article 6(1)(f)).
3.3 Account and Configuration Data
- Store ID
- API keys or tokens
- Device configuration settings
Purpose: To connect the POS device to the correct restaurant account.
Legal basis: Performance of a contract (Article 6(1)(b)).
3.4 Permissions
The app may request access to:
- Notifications — To alert staff of new orders and system updates
- Bluetooth / Nearby Devices — To connect to printers or POS hardware
- Storage (if applicable) — To store logs, receipts, or configuration data locally
- Phone (optional) — For features such as calling customers directly
Permissions are requested only where necessary.
4. How We Use Data
We use data strictly to:
- Deliver orders to the restaurant
- Enable order management and printing
- Maintain system reliability and performance
- Provide technical support
We do not use customer data for marketing or unrelated purposes.
5. Data Sharing
We do not sell personal data. We may share data only:
- With the restaurant (data controller)
- With service providers acting on our behalf
- Where required by law or regulatory authorities
6. Data Retention
- Customer order data is retained only as required by the restaurant
- Device and log data is retained for troubleshooting and service improvement
- Data is deleted or anonymised when no longer required
7. Data Security
We implement appropriate safeguards, including:
- Secure data transmission
- Access controls
- System monitoring
While we take reasonable steps, no system can be fully secure.
8. Your Rights
End users (customers) should contact the restaurant (data controller) regarding their personal data rights.
Where Bites Limited acts as a controller, you have the right to:
- Access your data
- Request correction or deletion
- Restrict or object to processing
- Data portability
- Withdraw consent where applicable
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.
9. International Transfers
Where data is transferred outside the UK, appropriate safeguards such as Standard Contractual Clauses are applied.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be made available within the app or via our website.
