Privacy

Only what an order needs:

• your name and phone number, and your email if you give one
• a delivery address, if you order delivery
• the orders you place — the items, the amounts, and any note you added for the kitchen
• your points balance and the dishes you saved as favourites
• if you set a password, a scrambled version of it that cannot be turned back into the password
• whether you agreed to hear from Taco Boy's by email

We do not ask for your date of birth, your ID, or anything about you beyond the above.

There is no analytics and no advertising pixel anywhere in this app. Nobody is watching you browse the menu, and no profile of you is built or sold.

The one thing from outside is on the home screen: what Taco Boy's posts on Instagram and TikTok, loaded from Instagram and TikTok themselves. Like on any page that shows them, they can set their own cookies and know you visited, under their own privacy policies. Nothing you give us is passed to them.

We do not sell your details, rent them, share them for anyone else's advertising, or use them to advertise to you.

To take your order and get it to you; to let Taco Boy's reach you about it; to run the rewards programme; to keep your account and sign you in; to prevent fraud and abuse; and to keep the records that tax and accounting law require.

Taco Boy's emails you about offers only if you asked them to, and you can tell them to stop at any time.

• Taco Boy's and their staff — they need to know whose order this is.
• Stripe, who process the payment. They receive your card details directly from your browser and what they do with them is covered by their own privacy policy.
• Our hosting and database providers, who store the data so the app can run, and who are not permitted to use it for anything else.
• If Taco Boy's has connected their point of sale, the order itself is passed to that till so their kitchen and their accounts have it.
• Anyone we are legally required to disclose it to, and no one else.

Your card is entered into a form hosted by Stripe and goes straight to them. Card numbers never reach our servers and we cannot see or store them. All we keep is Stripe's reference for the payment, so an order can be matched to it and refunded.

Your account and its details stay until you ask for them to be deleted. Records of completed orders are kept for as long as tax and accounting law requires, which is longer, and those records are kept whether or not the account is deleted.

You can ask to see what is held about you, to have it corrected, to have it deleted, to get a copy of it, and to object to a particular use of it. Ask Taco Boy's and they will do it, or write to us at contact@aidertechs.com and we will act on their instruction.

Asking costs nothing, and we do not treat you differently for asking. Depending on where you live you may also have the right to complain to a data protection authority.

This app is not intended for children under 13, and we do not knowingly hold their details. If you believe a child has created an account, tell Taco Boy's or us and it will be removed.

Connections are encrypted in transit. Passwords are stored scrambled and are never readable, by us or by Taco Boy's. Access to the data is limited to the restaurant it belongs to — one restaurant can never see another's customers. Any access credentials we hold on a restaurant's behalf are encrypted before they are stored.

No system is perfectly secure, and we do not claim otherwise. If a breach affects you, you will be told.

Your details are stored on servers operated by our hosting providers, which may be in a different country from the one you live in. Where the law requires safeguards for that, they are in place.

This notice may change. The date at the top says when the current version took effect.

Aider Tech Solutions LLC
[postal address — required before launch]
contact@aidertechs.com