Privacy Policy

OrderNook is a product of ZIZWE IT LIMITED ("we", "us"), a company registered in England and Wales, company number 14987632. This policy explains what personal data we handle and why. Questions: support@zizweit.uk.

Two kinds of people, two roles

Shops who sign up — the café, deli, bakery, food truck. For them we are the data controller.

Customers who place an order. Their details are collected on behalf of the shop they are ordering from. That shop is the controller of its own customer data, and we act as its processor, providing the ordering tool.

What we collect from shops

An email address, a password (stored hashed by our authentication provider, never in plain text), and the shop details you enter — name, slug, brand colour, logo, menu items, prices, options, and opening settings. Subscription payment is handled by Stripe; we store only a Stripe customer and subscription reference, and where you enable online payments, your Stripe connected account ID. We never see or store your card number.

What we collect from customers

A name (required, so staff can call the order out) and a mobile number (optional, so the shop can reach you if there is a problem), plus the items ordered, the total, and the time. Nothing else is required — there is no customer account and no password.

If you choose to turn on "notify me when it's ready", your browser gives us a push subscription — a device-specific address your browser generates for this purpose. It is stored against that one order and used only to send that one notification. Declining costs you nothing but the notification.

We never receive your card details.Paying online takes you to a checkout page hosted by Stripe, and the card data goes straight to Stripe and to the shop's own Stripe account. It does not pass through OrderNook.

Why we use it (lawful basis)

To provide the ordering service and the account you asked for (performance of a contract); to send the "order ready" notification where the customer switched it on (consent, which they can withdraw by clearing site permissions in their browser); to take subscription payments and meet our accounting obligations (contract and legal obligation); and to keep the service secure and prevent abuse (legitimate interests).

Who processes it for us

We use a small number of providers, strictly to run the service: Supabase (database, login, and image storage, hosted in London), Vercel (hosting), Stripe (shop subscriptions and customer card payments), and Sentry (error monitoring, EU region). Each receives only what it needs for its task. Sentry is configured not to send personal data, and session recording is switched off.

Analytics and advertising

We do not use analytics or advertising trackers, we do not build profiles of customers, and we do not sell or share personal data with anyone for marketing.

Cookies and local storage

We use essential cookies to keep shop staff signed in to the dashboard, and your browser's local storage to remember your basket while you are ordering. Both are needed for the service to work, so there is no tracking-cookie banner to click through — there is nothing to opt out of.

Retention

Order details are kept so the shop has a record of its trade, and for the periods UK tax and accounting rules require. Shop account data is kept while the account is active and for a reasonable period afterwards for legal and accounting purposes, then deleted. A push subscription is discarded once the order it belongs to is complete.

Your rights

You can ask to access, correct, or delete your personal data, or object to certain processing. Customers should contact the shop they ordered from first, since that shop controls its own order records; shops, and customers who cannot reach a shop, can contact us at support@zizweit.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy. Where a change materially affects you, we will let you know. See also our Terms of Service.

ZIZWE IT LIMITED · Company No. 14987632 · England and Wales · support@zizweit.uk