Privacy Policy

Bumgandu uses two different roles, depending on whose data it is.

• Restaurant account data (staff names, work email addresses, business details, menus and settings): Bumgandu is the data controller.
• Diner order data (orders placed with a Restaurant through the customer app or web app): the Restaurant is the data controller and Bumgandu is its data processor. We process this data only on the Restaurant's instructions to provide the Service.
• Website visitors and people who contact us: Bumgandu is the data controller.

Depending on how you use the Service, we may collect the following categories of data.

• Account details: name, email address, role and business name for Restaurant users.
• Order details: items ordered, quantities, notes and special requests, table number, order time and status.
• Dietary and allergen information: if a Diner includes allergy or dietary needs in an order note, this may reveal health-related information. We treat it as sensitive and use it only to pass it to the Restaurant to prepare the order.
• Payment information: confirmation of payment status, amount, and a Stripe reference. Card numbers, expiry dates and security codes are entered directly into Stripe's secure form and are never stored by Bumgandu.
• Device and technical data: device type, operating system version, app version, IP address, crash and error logs.
• Push notification tokens: if you allow notifications, so that we can send order status updates.
• Communications: messages you send us, such as support requests or demo enquiries.

We only use personal data where we have a lawful basis under data protection law.

• To provide the Service, such as creating accounts, showing menus, submitting and tracking orders, and processing payments (performance of a contract).
• To keep the Service secure, prevent fraud and fix faults (legitimate interests).
• To respond to enquiries and provide support (legitimate interests or contract).
• To send service messages such as order updates and important account notices (contract or legitimate interests).
• To meet legal obligations such as tax, accounting and responding to lawful requests (legal obligation).
• To send optional product updates or use optional features such as location or notifications (consent, which you can withdraw at any time).

Card payments are processed by Stripe, which is certified as a PCI DSS Level 1 service provider. Bumgandu does not receive or store your full card details, which keeps our systems outside the scope of most card data handling requirements.

Stripe acts as an independent controller for some of the data it processes, for example to prevent fraud and meet financial regulations. See Stripe's own privacy policy for details.

We do not sell personal data. We share it only where needed to run the Service:

• The Restaurant you order from, so it can prepare and fulfil your order.
• Stripe, to process payments.
• Microsoft Azure, which hosts the website and our infrastructure.
• Apple, for app distribution and push notification delivery.
• Professional advisers, insurers, and authorities where required by law or to protect legal rights.
• A successor business, if Bumgandu is involved in a merger, acquisition or sale of assets. We would tell you first, and the privacy commitments in this policy would continue to apply.

Some of our providers may process data outside the UK or European Economic Area. Where that happens, we rely on safeguards recognised by data protection law, such as adequacy decisions, the UK International Data Transfer Agreement or Standard Contractual Clauses.

We keep personal data only as long as needed for the purposes above.

• Restaurant account data: for as long as the account is active, and for a limited period afterwards to deal with queries and disputes.
• Order and payment records: for the period required by tax and accounting law, which is typically six years in the UK.
• Support and enquiry messages: for as long as needed to resolve the matter and for a reasonable period afterwards.
• Technical logs: for a short period, then deleted or anonymised.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit using HTTPS/TLS, access controls limited to staff who need access, secure hosting, and separation of each Restaurant's data from other Restaurants.

No system is completely secure. If a personal data breach occurs that is likely to put people at risk, we will notify the affected Restaurants, individuals and the Information Commissioner's Office (ICO) as required, normally within 72 hours of becoming aware.

Under data protection law you have the right to:

• be informed about how your data is used;
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time where we rely on it;
• not be subject to decisions based solely on automated processing that significantly affect you. We do not make such decisions.

Email us at info@bumgandu.com. We may need to verify your identity, and we will normally respond within one month.

If your request relates to an order you placed with a Restaurant, we may pass it on to that Restaurant, because it is the controller of that data. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority.

This website and the browser version of the customer app use only the storage that is strictly necessary for them to work. We do not use advertising or cross-site tracking cookies. If we introduce analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.

The Service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

Our website may link to third-party sites, including Stripe, Apple and Restaurants' own websites. We are not responsible for their privacy practices, so please read their policies.

We may update this policy from time to time. If we make a material change we will take reasonable steps to tell you, for example by email or in the Service. The date at the top of this page shows when it was last updated.

For any questions about this policy or how we handle your data, contact Bumgandu Ltd at info@bumgandu.com.