About this policy

OrdersPal ("we", "us") provides online ordering and store management software. Businesses use OrdersPal to run an online store ("Stores"), and shoppers use those stores to browse products and place orders ("Customers").

This policy explains what personal information we collect through the OrdersPal website, store portal, storefronts and mobile apps (together, the "Service"), how we use it, and the choices you have.

Information we collect

Store owners and staff

• Account details: name, email address, phone number and password (stored only as a secure hash).
• Store details: store name, address, logo, banner, tax settings, products, categories and photos.
• Billing details: your plan, payment history and receipts. Card and bank details are entered directly with our payment providers (Stripe or PayPal) and never reach our servers.

Customers of a store

• Name, email address, phone number and delivery address entered at checkout.
• Order details: items, options, quantities, prices, notes and order history with that store.

Collected automatically

• Technical data such as IP address, browser and device type, pages visited and the time of each visit.
• Activity logs, such as sign-ins and changes made in the store portal, which we keep for security and support.

How we use it

• To run the Service: host your store, take orders and show them to the right store.
• To send service messages, such as order confirmations and updates by email, SMS or app notification, password resets and billing notices.
• To process subscription payments and keep billing records.
• To keep the Service secure: prevent spam, fraud and abuse (including with Google reCAPTCHA) and fix errors.
• To provide support and improve the Service, using aggregated statistics where possible.
• To meet legal obligations, such as tax and accounting rules.

We do not sell personal information, and we do not use Customers' information to advertise other stores or products to them.

Stores and their customers

When you order from a store on OrdersPal, that store decides what information it collects and how it uses it to fulfil your order. For Customers' information, the store is responsible for it and we process it on the store's behalf to provide the Service.

If you have a question about an order or want a store to update or delete your information, contact the store first. If you can't reach them, contact us and we'll help.

Who we share it with

We share personal information only when needed to provide the Service:

• The store you order from receives your order and contact details so it can fulfil the order.
• Service providers that work for us under contract and may only use the data to provide their service:

• Legal reasons: when required by law, or to protect the rights, safety or property of our users, the public or us.
• Business transfers: if OrdersPal is merged or sold, personal information may transfer to the new owner, who must keep protecting it as this policy describes.

Cookies

We use only the cookies the Service needs to work: a session cookie that keeps you signed in, a security cookie that protects forms against forgery, and cookies set by Google reCAPTCHA to tell people from bots. We don't use advertising or cross-site tracking cookies.

Storage and retention

Our database and files are stored in Canada. Some of the service providers listed above may process data in other countries, such as the United States, where it may be accessible to local authorities under their laws.

We keep information while a store's account is active. After an account is closed, we delete or anonymize its data within 90 days, except records we must keep longer by law (for example, billing records for tax purposes). Backups are overwritten on a rolling schedule.

Security

We protect information with encrypted connections (HTTPS), hashed passwords, role-based access for store staff, private file storage with expiring links, and daily backups. No system is completely secure, so we can't guarantee absolute security. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant authorities as the law requires.

Your rights

Depending on where you live, you can ask us to:

• Tell you what personal information we hold about you, and give you a copy.
• Correct information that is wrong or incomplete.
• Delete your information, unless we must keep it by law.
• Withdraw consent you gave earlier, such as for marketing emails.

Email support@orderspal.com and we'll respond within 30 days. Store owners can also view and update most of their information directly in the store portal. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Emails and messages

Service messages, such as order updates, password resets and billing notices, are part of the Service and can't be turned off while you have an account or an open order. If we send marketing emails, every one includes an unsubscribe link, and you can opt out at any time.

Children

The Service is meant for businesses and adult shoppers. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We may update this policy as the Service changes. We'll update the effective date at the top, and for important changes we'll notify store owners by email or in the store portal before the change takes effect.

Contact us

Questions about this page? Email us at support@orderspal.com and we'll get back to you within two business days.