Privacy Policy
This policy explains how Bites (“we”), an app that food shops use to take and run orders, handles personal information. Bites is used by food shops; when you order from a shop, that shop is in charge of your information and its own privacy notice applies. We handle it for them, as described below.
1. Shop owners and staff
When a business uses Bites we keep:
- Account details: name, username, role and a scrambled (hashed) password. We never store passwords themselves.
- Sign-in and activity records: when accounts sign in or change settings, with the internet (IP) address, to keep accounts secure and to show the owner an activity log.
- Work records the shop chooses to use, such as staff hours and hourly pay for the time clock.
2. Shops' customers (we act for the shop)
When someone orders from a shop that uses Bites, we process for that shop:
- The name and phone number given with an order, the order itself and any notes.
- A Bites Club card, if the customer joins: the phone number, stamps and free items, and a first name if given.
- A random device code in a cookie, so the shop can tell returning customers from fake or abandoned orders (Pickup Protection). We store only a scrambled version of it, with that device's pickup history.
- Anonymous visit statistics (which pages and items were viewed), tied to a random code that's deleted when the browser tab closes.
We use this to run ordering, pickup and loyalty for that shop, to keep the service secure, and to fix problems. Shops decide how long they keep orders and can delete a customer’s details on request.
3. Improving Bites
We use information from across Bites to improve it: for example how features are used, where errors happen, what sells and at what times, and how well no-show protection works. We do this with combined or de-identified data wherever we can (counts and patterns rather than who you are), and we don’t use a person’s name or phone number to build profiles of them.
4. What we don't do
- We don't sell personal information or share it for advertising.
- We don't use advertising or cross-site tracking cookies.
- We don't send texts or marketing messages on behalf of shops.
5. Who else is involved
- Cloudflare, Inc. protects and delivers our websites (it sees visitors' internet addresses and may set security cookies).
- Hetzner Online GmbH hosts Bites Cloud on servers in Germany, so information may be stored outside your state or country.
- The shop's own computer, in the shop, holds the shop's copy of its data.
- Authorities, when the law requires us to share information.
6. How long we keep it
Account and shop data are kept while the business uses Bites and deleted when it leaves, except where the law requires us to keep something. Sign-in and activity records are kept while the business uses Bites, so its owner can check who did what. The device cookie expires about 13 months after it is first set.
7. Security
Connections are encrypted, passwords are hashed, each business’s data is kept apart, and our servers only accept traffic through Cloudflare. No system is perfectly secure; if a breach affects you, we’ll tell you and the people affected as the law requires.
8. Your choices and rights
You can ask to see, correct or delete personal information. If you ordered from a shop, ask that shop first (it can remove your details and Bites Club card); you can also contact us and we’ll pass it on. Shop owners and staff can contact us directly. We won’t treat you differently for asking.
9. Children
Bites is not meant for children under 13 and we don’t knowingly collect their information.
10. Contact and changes
Privacy questions and requests: bites-cloud.com. If we change this policy, we’ll update the date above and, for important changes, tell shop owners in advance. See also our Cookie Notice.