Cookie & Similar Technologies Policy

This Policy applies, where relevant, to:

• the OrderWeb corporate website;
• OrderWeb web applications;
• OrderWeb restaurant ordering websites and applications;
• restaurant customer accounts;
• local POS-related web interfaces;
• table-booking functionality;
• loyalty functionality;
• online shops and gift-card functionality; and
• other OrderWeb-hosted online services.

OrderWeb Ltd Company number: 12760826 Brockley, London United Kingdom

Email: mail@orderweb.co.uk

OrderWeb provides restaurant software, online ordering, local POS software, websites, web applications and related digital services.

Cookies are small pieces of information that may be stored on your computer, mobile phone, tablet or other device when you visit a website or use an online service.

Cookies can be used for purposes such as:

• keeping you signed in;
• maintaining a shopping basket;
• remembering preferences;
• maintaining security;
• processing an online checkout;
• understanding how an online service is used; and
• supporting analytics or advertising where enabled.

Some cookies exist only while your browser is open. Others remain on your device for a defined period.

Cookies may be set directly by OrderWeb or by an authorised third-party service.

Privacy and electronic communications rules may also apply to technologies other than traditional cookies.

Depending on our services and configuration, these technologies may include:

• browser local storage;
• session storage;
• tracking pixels;
• scripts;
• software development kits;
• tags;
• device identifiers;
• link-tracking technologies;
• embedded third-party services; and
• similar mechanisms that store or access information on a user's device.

In this Policy, we collectively refer to these as “cookies and similar technologies.”

OrderWeb may use cookies and similar technologies for the purposes described below.

4.1 Strictly necessary technologies

These technologies are required for an online service to work or to provide functionality specifically requested by the user.

They may be used for:

• maintaining secure sessions;
• keeping users signed in;
• user authentication;
• fraud and abuse prevention;
• security controls;
• load balancing;
• remembering items in a shopping basket;
• maintaining an order during checkout;
• maintaining table-booking progress;
• maintaining gift-card or shop checkout information;
• processing user privacy choices;
• protecting forms against security threats; and
• providing other functionality that is essential to a service requested by the user.

Where an applicable legal exemption applies, we may use strictly necessary technologies without obtaining consent.

We will still provide appropriate information about their use.

These technologies may remember choices made by a user, such as:

• interface preferences;
• selected restaurant or location;
• language;
• display preferences; or
• other optional settings.

Some preference technologies may be strictly necessary to provide functionality expressly requested by the user.

Where they are not exempt under applicable law, they will only be used after obtaining the required consent.

We may use analytics technologies to understand how our websites and applications perform and how users interact with them.

Depending on the configuration of the relevant service, analytics may help us understand information such as:

• pages visited;
• features used;
• approximate session duration;
• referring pages;
• device and browser type;
• application errors;
• performance information; and
• general interaction patterns.

Where consent is required under applicable privacy and electronic communications law, analytics technologies will not be activated until the user has provided the appropriate consent.

OrderWeb may operate services without optional analytics being enabled.

If OrderWeb or a restaurant customer enables advertising, retargeting, conversion measurement or similar technologies, these may be used to:

• measure advertising effectiveness;
• understand whether an advertisement resulted in a visit or action;
• create advertising audiences;
• personalise advertising; or
• support marketing campaigns.

These technologies may be provided by third-party advertising or social-media providers.

Where consent is legally required, such technologies will not be loaded or accessed until the user has provided the relevant consent.

Rejecting advertising technologies will not prevent access to the core ordering or restaurant functionality that does not depend on them.

OrderWeb provides websites and applications to restaurant businesses.

When a customer accesses an OrderWeb-powered restaurant service, some technologies may be required to perform actions requested by the customer.

For example, necessary technologies may be used to:

• maintain an online order;
• remember items placed in a basket;
• maintain a customer login session;
• authenticate an account;
• progress through checkout;
• process a table reservation;
• maintain gift-card or shop transactions;
• protect transactions against fraud or abuse; and
• remember the customer's cookie choices.

These technologies may be necessary for the requested restaurant service to function properly.

Optional analytics, marketing or advertising technologies are treated separately.

Where an OrderWeb restaurant customer determines which optional analytics, marketing or advertising technologies are enabled on its restaurant website or application, that restaurant may act as the Data Controller or otherwise be responsible for its own use of those technologies.

Restaurants using OrderWeb must ensure that:

• optional technologies they enable are lawful;
• users receive appropriate information;
• required consent is obtained before non-exempt technologies are used;
• marketing technologies comply with applicable data-protection and PECR requirements; and
• their own privacy and cookie notices accurately describe their processing.

OrderWeb may provide technical tools intended to help restaurant customers manage these requirements.

Where consent is required, OrderWeb or the relevant restaurant application will provide a mechanism allowing the user to make a choice before relevant non-essential technologies are used.

Consent should be:

• freely given;
• specific;
• informed; and
• provided through a clear positive action.

Simply continuing to browse or use a website is not treated by OrderWeb as consent to non-essential cookies where consent is legally required.

Non-essential technologies should remain disabled until the relevant consent has been provided.

Where optional cookies or similar technologies are used, users should be provided with controls allowing them to:

• accept optional technologies;
• reject optional technologies; and/or
• manage individual categories where appropriate.

Rejecting optional cookies should not prevent access to core functionality that relies only on strictly necessary technologies.

Where technically available, users may change or withdraw their cookie consent through:

• a Cookie Settings or similar control displayed on the relevant website or application;
• reopening the consent-management interface; or
• deleting stored cookies and preferences through their browser.

Withdrawal of consent does not affect processing that occurred lawfully before consent was withdrawn.

Where consent is required, we may maintain records necessary to demonstrate the user's privacy choice.

Such records may include:

• the consent status;
• date and time of the choice;
• consent categories selected;
• version of the consent notice;
• anonymous or pseudonymous consent identifiers; and
• other information reasonably necessary to demonstrate compliance.

Consent records are retained only for an appropriate period having regard to legal and compliance requirements.

OrderWeb services may integrate with third-party services.

Depending on the configuration of a website or application, these may include providers of:

• payments;
• analytics;
• maps;
• customer communications;
• fraud prevention;
• security;
• embedded media;
• advertising;
• social-media functionality; and
• other technical services.

Third parties may set their own cookies or use similar technologies where permitted.

Examples may include services provided by payment providers such as Stripe or other providers where necessary to securely deliver payment functionality.

The technologies used by a particular OrderWeb restaurant may differ depending on the services and integrations that restaurant has enabled.

OrderWeb integrates with third-party payment providers.

Payment providers may use cookies or similar technologies for purposes such as:

• processing payments;
• authentication;
• fraud detection;
• security;
• payment-session management; and
• regulatory compliance.

Some of these technologies may be necessary to provide the payment service requested by the user.

Where a payment provider independently determines how it uses information, its own privacy and cookie documentation may also apply.

Most browsers allow users to manage cookies through browser settings.

Depending on the browser, users may be able to:

• view stored cookies;
• delete cookies;
• block all or some cookies;
• restrict third-party cookies;
• clear cookies when the browser closes; or
• use private browsing functionality.

Blocking strictly necessary cookies may prevent some OrderWeb functionality from working correctly.

For example, a user may be unable to:

• remain logged in;
• maintain an online basket;
• complete checkout;
• maintain booking progress; or
• use other functionality that requires a secure session.

PECR-style storage and access rules are not limited to traditional websites.

Where OrderWeb provides mobile or application-based functionality, similar rules may apply where the application stores information on or accesses information from a user's device.

Where required, OrderWeb will apply appropriate notice and consent mechanisms to such technologies.

The exact technologies used may vary between OrderWeb services and restaurant configurations.

They will generally fall into categories such as:

### Strictly necessary - Purpose: Security, login, sessions, baskets, checkout and requested application functionality - Consent: Usually not required where the applicable exemption applies

### Preferences - Purpose: Remember optional user choices and settings - Consent: May be required depending on purpose

### Analytics - Purpose: Measure service use, performance and interaction - Consent: Used only where permitted and, where required, after consent

### Marketing / advertising - Purpose: Advertising, retargeting, conversion measurement or audience creation - Consent: Consent required where applicable

### Third-party functional services - Purpose: Embedded services such as payment or other requested functionality - Consent: Depends on the nature and legal basis of the technology

The actual cookie-management interface should provide further information about the specific technologies currently enabled.

OrderWeb should maintain a current inventory of cookies and similar technologies used across its services.

Where applicable, the cookie interface or accompanying notice may identify:

• cookie or technology name;
• provider;
• purpose;
• category;
• whether it is first-party or third-party;
• expiration or duration; and
• whether consent is required.

Because OrderWeb integrations and restaurant configurations may change, this inventory may be updated from time to time.

Where information collected through cookies or similar technologies constitutes Personal Data, it will also be handled in accordance with applicable data-protection law.

Further information about OrderWeb's processing of Personal Data is available in our Privacy Policy.

Where OrderWeb acts as a Processor for a restaurant, the relevant processing may also be governed by our Data Processing Agreement.

Different cookies and technologies may remain for different periods.

They may include:

Session technologies These generally expire when the browser or application session ends.

Persistent technologies These may remain on a user's device for a defined period or until deleted.

We aim to use storage periods that are appropriate to the purpose of the relevant technology and will review them periodically.

We may update this Cookie & Similar Technologies Policy to reflect:

• changes to the OrderWeb platform;
• new integrations;
• changes to cookies or similar technologies;
• changes in law;
• regulatory guidance; or
• changes to our privacy practices.

The “Last updated” date at the top of this Policy will show when it was most recently revised.

Where a material change means that fresh consent is legally required, we will request that consent before using the relevant technology.

If you have questions about cookies, similar technologies or privacy within OrderWeb services, contact:

OrderWeb Ltd Company number: 12760826 Brockley, London United Kingdom

Email: mail@orderweb.co.uk

Related documents: Privacy Policy · Data Processing Agreement (DPA) · Terms & Conditions