Privacy Policy

This Privacy Policy explains how [Legal Entity Name] (“ORDERK,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use ORDERK. ORDERK is a platform that lets merchants build an online product catalog and storefront, and take orders from customers who message them on WhatsApp, Instagram, Telegram, Messenger, and other supported chat channels.

This policy applies to two different groups of people, and it says explicitly which parts apply to whom:

• Merchants — the business owners who sign up for a ORDERK account, manage a dashboard, and operate a storefront.
• Customers — the people who visit a merchant’s storefront, browse products, and place orders that are handed off to a chat app.

By creating a ORDERK account, or by placing an order through a ORDERK-powered storefront, you agree to the collection and use of information as described in this policy.

Merchant account information. When you sign up, we collect your name, email address, password (stored as a salted hash — we never store your password in plain text), phone number, and information about your business or store (store name, store URL/slug, description, address, product catalog, images, categories, pricing, and store settings such as appearance, payment methods, and menu links).

Storefront & order information. When a customer browses a storefront and checks out, we collect the information needed to create the order: the products and variants selected, quantities, pricing and discounts applied, delivery or booking details, the customer’s name and contact details (such as a phone number or chat handle), and a delivery address where applicable. This information is stored in the merchant’s dashboard (Orders, Customers) so the merchant can fulfill the order.

Payment information. Where a merchant has enabled card payments, payment details are collected and processed directly by our payment processing partners (including Stripe); ORDERK does not store full card numbers on its own servers. For local payment methods such as cash on delivery, bank transfer, or QR-code payments, the relevant details (e.g., a bank reference or payment proof) may be recorded against the order.

Usage & device information. We automatically collect certain technical information when you use ORDERK, including IP address, browser and device type, pages visited, timestamps, and general diagnostic/log data, to help us operate, secure, and improve the service.

Cookies. We use cookies and similar technologies primarily to keep you signed in and to remember basic preferences. See “Cookies & tracking” below.

We use the information described above to:

• Create and maintain merchant accounts and stores, and authenticate sign-ins;
• Operate storefronts, shopping carts, checkout, bookings, and the merchant dashboard;
• Generate the structured order message that is handed off to WhatsApp, Instagram, Telegram, or Messenger so a merchant and customer can complete the order in chat;
• Process payments and payouts through our payment processing partners;
• Send transactional messages such as order confirmations, status updates, and account notices;
• Provide customer support and respond to inquiries;
• Monitor, secure, debug, and improve the reliability and performance of ORDERK;
• Detect, prevent, and investigate fraud, abuse, and violations of our Terms of Service; and
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We share information only in the following circumstances:

• With the relevant merchant. When a customer places an order on a storefront, the order and contact details are shared with the merchant who owns that store so they can fulfill the order.
• With messaging platforms. To complete the chat hand-off, order details are shared with the messaging platform the customer chooses to continue on — WhatsApp/Instagram/Messenger (operated by Meta) or Telegram — subject to that platform’s own privacy policy and terms.
• With payment processors. Card and other electronic payments are shared with our payment processing partners (including Stripe) solely to process the transaction.
• With infrastructure & service providers. We use third-party hosting, database, and related infrastructure providers to run ORDERK. These providers process information on our behalf and are only permitted to use it to provide services to us.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of ORDERK, our users, or others.
• Business transfers. If ORDERK is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a policy at least as protective.

ORDERK uses essential cookies to keep you signed in to your account and to remember settings such as your preferred language. We may also use limited analytics tools to understand how the platform is used so we can improve it. You can control cookies through your browser settings; disabling essential cookies may prevent parts of ORDERK (such as staying signed in) from working correctly.

We retain merchant account information for as long as the account is active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations or to resolve disputes. Order and customer information collected through a storefront is retained by the merchant’s account for as long as that merchant’s account is active, unless the merchant deletes it sooner or a shorter period is required by law. We may retain limited information after account closure where necessary for legitimate business or legal purposes, such as fraud prevention and record-keeping.

We use industry-standard technical and organizational measures to protect information, including encrypted connections (HTTPS), hashed passwords, and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your personal information;
• Request a copy of your information in a portable format; and
• Opt out of receiving marketing communications from us at any time.

Merchants can access and update most of their own information directly from their dashboard’s account and store settings. To exercise any of these rights — or if you’re a customer of a ORDERK storefront and want to reach us directly — contact us at [privacy contact email]. We may need to verify your identity before acting on a request.

ORDERK is intended for business use and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

ORDERK’s infrastructure and service providers may process and store information in countries other than the one you live in. Where we transfer personal information internationally, we take steps intended to ensure it remains protected in accordance with this policy and applicable data protection law.

For the customer data collected through a merchant’s storefront (such as order and contact details), the merchant is the data controller and ORDERK acts as a service provider/processor that stores and displays that data on the merchant’s behalf. Merchants are responsible for handling their customers’ information lawfully — including having a proper basis to contact customers on WhatsApp, Instagram, Telegram, or Messenger, honoring their own customers’ privacy requests, and complying with data protection laws that apply to their business. ORDERK provides the tools; merchants are responsible for how they use them with their own customers.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice (such as an in-app or email notification). Continued use of ORDERK after a change takes effect means you accept the updated policy.

If you have questions about this Privacy Policy or how your information is handled, contact us at [privacy contact email] or write to [Legal Entity Name], [Company Address].