We collect only what we need. This table shows each kind of data, what we use it for and the legal basis we rely on under the GDPR.

We do not ask for sensitive categories of personal data, and we do not make decisions about you by automated profiling.

We use personal data to:

• reply to your enquiry and arrange a demo or onboarding;
• provide, support and bill our software and services;
• send you service messages, such as information about a download, an update or an invoice;
• keep our website and software secure, and prevent fraud and misuse;
• improve our products and website, using aggregated information where possible;
• meet our legal obligations and defend our legal rights.

We use your contact details to reply to your request and to follow it up. If we want to send you anything promotional, we will first make sure we have a lawful basis to do so and give you an easy way to opt out.

We keep this to the minimum. The website stores two small items on your device, both so that it looks the way you chose:

• a language cookie (i18n_redirected) that remembers the language you picked;
• a theme entry in your browser’s local storage (nuxt-color-mode) that remembers light or dark mode.

Neither is used to track you. We use no advertising, analytics or social-media tracking cookies or pixels on this website, and our fonts are served from our own domain, so your browser does not contact a font provider. You can delete these items at any time in your browser settings; the website will simply forget your preferences.

We do not sell personal data. We share it only where it is needed, and only with:

• Our branches. 24order operates through local branches in Norway, Jordan, Egypt and Algeria, and your enquiry may be handled by the branch for your country.
• Service providers. Suppliers such as hosting and content delivery, email and telephony, and customer-management tools, who process data for us under written agreements and only on our instructions.
• Authorities and advisers. When the law requires it, to protect our rights, or to our professional advisers, who are bound by confidentiality.
• A successor. If 24order is involved in a merger, acquisition or sale of its business, data may pass to the new owner, who must continue to honour this policy.

We do not allow our suppliers to use your data for their own purposes.

Because we work in Norway, Jordan, Egypt and Algeria, your data may be processed in countries outside the European Economic Area (EEA), some of which the European Commission has not recognised as offering an adequate level of data protection.

When we transfer personal data out of the EEA, we use an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses, together with technical and organisational measures. You can ask us for information about the safeguards that apply.

We keep personal data only for as long as we need it for the purposes above:

• Enquiries and demo requests: until your request is dealt with, and then normally for no more than 24 months after our last contact, in case you come back to us.
• Customer, licence and invoice records: for as long as you are a customer, and afterwards for as long as accounting, tax and other laws require us to keep them.
• Technical logs: for a short period, normally no more than 90 days, unless we need them to investigate a security incident.

When the time is up, we delete the data or make it anonymous.

Under the GDPR and similar laws, you can ask us to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• erase your data, where we no longer need it or have no lawful basis to keep it;
• restrict how we use your data while a question is being resolved;
• export the data you gave us in a common, machine-readable format;
• object to processing that relies on our legitimate interests;
• withdraw your consent at any time, where we rely on it. This does not affect what we did before you withdrew it.

To use any of these rights, contact us and tell us which one you would like to use. We may need to confirm your identity first, and we will reply within one month.

You also have the right to complain to a data protection authority. In Norway this is the Norwegian Data Protection Authority, Datatilsynet. We would appreciate the chance to put things right first.

We use technical and organisational measures that fit the risk, such as encryption of data in transit, access controls that limit data to the people who need it, and keeping our systems up to date.

No system is perfectly secure. If a personal data breach is likely to put you at risk, we will tell you and the data protection authority, as the law requires.

If you order food, pay or book a table through a restaurant that uses 24order, that restaurant is the controller of your data. We process it on the restaurant’s behalf, under a data processing agreement and only on its instructions.

Please read the restaurant’s own privacy notice and send your requests to the restaurant. If you contact us instead, we will point you to the right party. Restaurants that use 24order can ask us for our data processing agreement.

Our website and software are made for businesses and are not directed at children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Our website links to our sister products, such as TV Menu and Bajri, and to payment partners and app stores. They have their own privacy policies, and we are not responsible for how they handle data. We encourage you to read them.

We may update this policy as our services or the law change. The date at the top of the page shows when it was last updated. If a change is significant, we will highlight it on the website and, where the law requires, ask for your consent again.

For any question or request about privacy, use the contact form or call the branch for your country. All branches and phone numbers are on our Contact page. Please write “Privacy” in your message so that it reaches the right person.