01 Introduction
SimpleMenu ("we," "us," or "our") provides technology that lets restaurants and food businesses offer their own branded online ordering. We respect your privacy and are committed to protecting your personal information. This Policy should be read together with our Terms of Service.
By using the Platform, you acknowledge the practices described here. If you do not agree, please do not use the Platform.
02 Who we are
SimpleMenu is a service of Online Ordering Corp. For the purposes of data-protection law, the data controller for personal information collected through the Platform is Online Ordering Corp (operating as SimpleMenu), 575 Lexington Ave, New York, NY 10022, USA. References in this Policy to "SimpleMenu," "we," "us," or "our" mean Online Ordering Corp. When you order from a restaurant that uses SimpleMenu, that restaurant ("Restaurant Partner") is also a controller of the information needed to fulfill your order. You can reach us using the details in the Contact us section.
03 Information we collect
Information you give us
- Account information — name, email address, phone number, and password (or a sign-in identifier if you use Facebook Login).
- Order information — items ordered, pickup or delivery details, delivery address, and any notes you provide.
- Payment information — processed by our payment providers; we receive confirmation and limited details, not your full card number.
- Communications — messages you send to support and any content you submit, such as reviews or photos.
Information we collect automatically
- Device and usage data — device type, operating-system version, app version, IP address, and interactions with the Platform.
- Cookies and similar technologies — used on our websites to keep you signed in, remember preferences, and measure performance.
04 SMS / text messaging
Online Ordering Corp offers an SMS/MMS program, operated through Dialpad, that sends customer care and service-related text messages — such as order confirmations, order status and pickup/delivery updates, account updates, and responses to your customer service inquiries. We do not use this program to send marketing or promotional text messages.
How you opt in
You join this program only by verbally providing your consent while speaking with our Customer Support team over the phone. Our Customer Support team will ask whether you would like to receive text messages, read you the required disclosures, and confirm your consent before any messages are sent. We keep a record of your consent in our customer database. Consent is not a condition of any purchase.
Message frequency and costs
Message frequency varies based on your orders and interactions with us. Message and data rates may apply, depending on your mobile carrier and plan.
Opting out and getting help
You can opt out at any time by replying STOP to any message you receive, or by contacting us using the details in the Contact us section. For help, reply HELP or contact us directly. After you opt out, we will send one final message confirming your removal, and you will not receive further text messages unless you opt in again.
We will not sell, rent, or share your mobile phone number, SMS/MMS consent, or any personal information collected for this SMS program with third parties or affiliates for their own marketing or promotional purposes.
Mobile opt-in data and consent are never shared with third parties for marketing. We share this information only with our SMS platform provider, Dialpad, Inc., which processes and delivers messages on our behalf under its own privacy policy, and as otherwise described in this Policy — for example, with service providers who help us operate the Platform, or where required by law. None of these are for third-party marketing purposes.
05 Information from Facebook Login
If you choose to sign in using Facebook Login, a service of Meta Platforms, Inc. ("Meta"), we receive information from your Facebook profile based on the permissions you approve — typically your name, email address, and profile picture. We request only what is needed to create and authenticate your account.
How we use it
We use information from Facebook Login solely to identify you, create or access your account, and provide the Platform. We do not post to your Facebook account, message your contacts, or sell this information.
Our handling of data obtained through Facebook Login complies with the Meta Platform Terms and Developer Policies. You can review or remove SimpleMenu's access at any time in your Facebook account under Settings & Privacy → Settings → Apps and Websites. To delete the data we hold, see Deleting your data.
06 Information in our apps
Our Android mobile and tablet applications, distributed through Google Play, may request device permissions to function — for example, notifications to alert staff to new orders, or location to support delivery features. You can manage these permissions in your device settings. Your use of the apps is also subject to Google Play's terms and Google's privacy policy. We handle data collected through the apps in line with the Google Play User Data policy.
07 How we use information
- To create and manage your account and authenticate sign-in.
- To process and fulfill orders, including passing necessary details to the relevant Restaurant Partner and, where applicable, delivery and payment providers.
- To provide customer support and respond to your requests.
- To operate, maintain, secure, and improve the Platform.
- To send service messages and, where you have consented or as permitted by law, marketing communications.
- To detect and prevent fraud, and to comply with legal obligations.
08 Legal bases for processing
Where data-protection laws such as the GDPR apply, we process personal information on these bases: performance of a contract (to provide the Platform and fulfill orders), consent (for optional marketing and certain cookies), legitimate interests (to secure and improve the Platform), and legal obligation (to meet tax, accounting, and other legal requirements).
10 Data retention
We keep personal information only as long as needed for the purposes described here. Account information is retained while your account is active. Order and transaction records may be retained, in anonymized or business-record form, for as long as required to meet tax, accounting, fraud-prevention, and legal obligations. When information is no longer needed, we delete or de-identify it.
11 Deleting your data
You can request deletion of your account and associated personal information at any time:
- In Facebook: remove SimpleMenu under Settings & Privacy → Settings → Apps and Websites to stop further data sharing.
- From SimpleMenu: follow the instructions on our Delete your account page, or email [email protected] from the address on your account.
We process verified deletion requests within 30 days, except where we must retain certain records to comply with the law.
12 Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data-protection authority. We will not discriminate against you for exercising your rights.
13 Security
We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your login credentials confidential and notify us promptly of any suspected unauthorized use.
14 Children's privacy
The Platform is not directed to children under the age required to consent to the use of online services in your jurisdiction, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.
15 International transfers
We may process and store information in countries other than your own. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.
16 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, provide additional notice. Your continued use of the Platform after changes take effect means you accept the updated Policy.
17 Contact us
Questions about this Policy or your personal information? Reach us at:
Email: [email protected]