Privacy notice
Version 2026-11-02 · Updated 2026-11-02
_AI draft, not legal advice_
Who we are. RidgeOrder is provided by PixelRidge Web, Nepal, privacy contact privacy@pixelridgeweb.com.
Two roles.
- For guests and restaurant staff, each restaurant decides how data is used (it is the controller). We process it only for them. Read the restaurant's own notice (the "Privacy" link on its menu) and contact the restaurant first.
- For restaurant owners, managers and visitors to our own pages, we are the controller. This notice covers that.
What we collect about owners and managers, and why | Data | Why | Legal reason (UK) | How long | |---|---|---|---| | Name, email, password (hashed), 2FA setting | Your account and sign-in | Contract | While the account is open + 30 days | | Restaurant details, Legal details card | Run the service, show the guest notice | Contract | While the account is open + 30 days | | Plan, invoices (when billing starts) | Billing | Legal obligation (tax) | 6 years | | Support tickets | Help you | Contract | 2 years after closed | | Agreement acceptance (who, version, time; no IP) | Prove what you agreed to | Legitimate interests | While the account is open + 6 years | | Admin audit log (ids only) | Security and accountability | Legitimate interests | 6 years | | Security logs (IP address, browser) at Vercel/Supabase | Stop attacks | Legitimate interests | Up to 7 days |
We do not sell data, use guest data to market PixelRidge, or use advertising trackers.
Marketing to owners. We may email you about RidgeOrder as our customer. Every email has an unsubscribe link. (UK PECR reg 22 soft opt-in for business contacts; Canada CASL: existing business relationship.)
Who helps us. See /legal/subprocessors.
Where. India (database), global edge network (web hosting). Transfers from the UK are protected by approved contract clauses, or the UK IDTA/Addendum.
Your rights. Access, correction, deletion, objection, portability: email privacy@pixelridgeweb.com. We reply within one month. Complain to the ICO (ico.org.uk) in the UK or the Privacy Commissioner of Canada (priv.gc.ca).
Changes. We post a new version here with its date, and tell owners in the app.