Privacy policy

Last updated 28 September 2026

OrderMate lets you order from restaurants on WhatsApp. The restaurant you order from is responsible for your data (the data controller); OrderMate processes it on their behalf. This policy follows the Botswana Data Protection Act 2024, South Africa's POPIA and the EU GDPR.

What we collect

• Your WhatsApp number and profile name, which WhatsApp shares when you message the restaurant.
• Messages, taps, photos and voice notes you send in the chat.
• Your delivery location pin and address notes, if you choose delivery.
• Your orders: items, amounts, payment method and status. Card details are handled only by the payment provider (DPO Pay) and never reach us.

Why we use it

• To take, prepare, deliver and invoice your order (performing our contract with you).
• To keep tax records the law requires (VAT invoices are kept for the statutory period).
• To send promotions, only if you opt in by replying subscribe. Reply stop at any time to opt out.
• To read typed orders, the text of your message and the menu are processed by Anthropic's Claude AI service. It is not used to train models.

Sharing

Your order and delivery pin are shared with the restaurant's staff and the driver delivering your order. Service providers we rely on: Meta (WhatsApp), Supabase (database hosting), Cloudflare (hosting), DPO Pay (card payments) and Anthropic (order reading). We never sell your data.

Security

Data is encrypted in transit (HTTPS/TLS) and at rest in the database and file storage. Staff access is limited to their own restaurant, and every chat takeover is logged.

How long we keep it

Chat history and saved addresses are kept while you use the service. Order records are kept for tax purposes, and are anonymised if you ask us to delete your data.

Your rights

• Access: reply my data in the chat to see what we hold, or ask the restaurant for a full copy.
• Deletion: reply delete my data to erase your name, address and chat history.
• Objection and correction: reply agent to reach a person at the restaurant.
• You can complain to your data protection authority (in Botswana, the Information and Data Protection Commission).