Who we are
PlaceMyOrder is run by Hameldon Technology Ltd, a company registered in England and Wales (company number 17376440), Rawtenstall, Rossendale, Lancashire, BB4 8EB. "We" and "us" in this notice mean Hameldon Technology Ltd. Questions about your data: email [email protected].
The three ways we might hold your data
- You register your interest or contact us. We decide what happens to your data. This notice covers it.
- You run a shop on PlaceMyOrder. We hold your account and billing details. This notice covers them.
- You order food from a shop that uses PlaceMyOrder. The shop is in charge of your order details and decides how they're used. We handle them for the shop, on its instructions, to take and deliver your order. See Ordering from a shop below.
If you register your interest or contact us
We collect your name, shop name, phone number, email address, and anything else you choose to tell us, such as your postcode and what you use now.
Why: to call or email you about PlaceMyOrder, because you asked us to. Our lawful basis is our legitimate interest in replying to people who contact us. We don't add you to a mailing list or pass your details to anyone to market to you.
How long: up to 2 years, unless you become a customer or ask us to delete them sooner.
If you run a shop on PlaceMyOrder
We collect:
- your name, email address, phone number and password (kept scrambled; we can't read it);
- your shop's details: name, address, phone, menu, opening hours, delivery areas and settings;
- billing details: the orders we charge for, your weekly bills, and the Direct Debit set up with our payment provider (your bank details are held by them, not us);
- for card payments to your shop, the link to your own payment account (your payment provider holds those details);
- the devices you pair as shop phones, and, if you connect it, which Google Business Profile listing is yours;
- short-lived records of wrong passwords and sign-in emails, to stop people breaking into accounts.
Why: to provide the service you signed up for, to bill you, and to keep it secure (our lawful bases are the contract with you, our legal obligations for tax and accounting records, and our legitimate interest in keeping the service safe). We'll email you about your account, setup reminders and important changes. We won't send you unrelated marketing without asking.
How long: while your account is open. Billing records are kept for 6 years for tax purposes. Half-finished sign-ups are deleted after 7 days.
Ordering from a shop
When you order from a shop's PlaceMyOrder page, we collect your name, phone number, email address, delivery address (for delivery), your order and any notes, on the shop's behalf. The shop uses them to make and deliver your food and to contact you about your order, and we email you updates about it. The shop is the "controller" of this data; we are its "processor". To ask about your data, contact the shop, or contact us and we'll pass your request on.
If you tick the box at checkout, the shop may also send you offers and news by text or email. It's never ticked for you, and you can ask the shop to stop at any time. Shops count visits to their website, but without cookies and without recording who you are.
Card payments are taken by the shop's payment provider on its own secure page. We never see or store your card number. To save typing next time, your details and basket are remembered in your own browser on your device, not on our systems. You can clear them by clearing your browser's site data.
Who else handles data
We use carefully chosen suppliers, under contracts that protect your data, to run the service:
- hosting and security providers, which run our servers and block attacks;
- email providers, which send our emails;
- payment providers, for card payments and Direct Debits;
- map and postcode lookup services, which turn a postcode into a location and its streets (only the postcode is sent). If you open the map at checkout to show your door, the map pictures load from OpenStreetMap, which sees your device's internet address, as any website does;
- Google, only if a shop connects its Business Profile;
- our professional advisers, such as accountants, when needed.
We don't sell personal data. Some suppliers may store data outside the UK; where they do, we make sure it's protected by approved safeguards.
Cookies
This website sets no tracking or advertising cookies, and no analytics cookies. Signing in to a shop account uses cookies to keep you signed in, and our security provider may set a cookie that helps block bots. These are strictly necessary, so we don't ask for consent. Shop ordering pages remember your basket and details in your browser, as described above.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to limit or move it. Email [email protected]. We'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd like the chance to put things right first.
Changes
We'll update this notice if what we do changes, and change the date at the top. If a change matters to you as a shop, we'll email you.