Privacy Statement 

OrderUp Privacy Statement and Data Policies (“Privacy Statement”)

Updated January 14, 2022

This Privacy Statement is part of the Terms of Use (“Terms”) governing your use of Services provided by OrderUp, including:

• Contact Tracing services “Contact Tracing,”
• Digital Menu services “Digital Menu,” 
• Contactless Payment services “Contactless Payment,” 

or any combination of services accessible through a mobile web browser or any white-labelled websites that are created or powered by OrderUp applications provided for Establishments and our website —www.orderup.ai—including the online products or services which may be accessed therein, any Account you use to access any of the above, (collectively, the “Service”), all of which are offered by OrderUp Technologies Inc., a federally incorporated Canadian company (“OrderUp”, “we”, “our” or “us”). 

All references to “user”, “you”, “your” mean the Establishment or Patron, as applicable that access and use the Service in any manner, with “Patron” being an individual, end-user, customer, and “Establishment” being the restaurant, stadium, bar, venue or business. 

This Privacy Statement applies to Personal Information (as defined below) collected by or on behalf of OrderUp, through or in conjunction with the Service, by email, phone or any other offline interactions and anywhere else we post or display this Privacy Statement. By accessing or using the Service, you accept and agree to the terms of this Privacy Statement in effect at the time of your use.  Any individual user acting on behalf of an Establishment hereby confirms that such user has all necessary and legal authority to bind the Establishment. Acceptance of this Privacy Statement by such user will be deemed acceptance by the Establishment of this Privacy Statement. Any terms capitalized herein but not defined will have the meanings ascribed to them in the Terms.

Please note that Establishments are independent third parties that maintain their own business practices and policies outside of their relationship with OrderUp and their use of the Services. As a result, unless provided otherwise in this Statement, we are not responsible for the privacy policies or data practices of our Establishments, who may maintain separate policies and practices. 

By using the Services and/or providing us with your Personal Information, you acknowledge and agree that your personal information will be processed and used in the manner set out in this Privacy Statement. We may amend this Statement from time to time in line with the “Updates to this Privacy Statement” section below. To the extent permitted by law, your continued use of the Services and Websites constitutes your acceptance to those amendments and the updated Statement.

You must be at least eighteen (18) years old to use the Service.  We desire to protect any personal and financial information you choose to provide us as described in this Privacy Statement.

INFORMATION WE COLLECT

“Personal Information” is information that directly or indirectly identifies you or can be used to identify you as an individual. The following are categories of Personal Information we may collect about you and how we collect it:

Registration, Payment and Personal Information from Patrons. As a Patron, the Service may require you to enter information including your name, phone number, e-mail address, passwords and security question responses etc., and payment information such as your credit card number, expiration date and billing address (“Payment Information”) to use and access the Service, including to settle, pay for or close (“Settle”) a check, bill, tab, owed payment or other transaction (each a “Transaction”) with Establishments, including but not limited to restaurants, bars or stadiums.  Should you choose to create an Account via a social media account, we may obtain the name, user name, profile picture, e-mail address, and other disclosed demographics associated with that account.  Additionally, when users are requesting and performing various activities on the Service, you may provide us Personal Information that will facilitate our effective response to those requests, including items such as dietary information, food allergies and preferences.

Registration Information from Establishments. As an Establishment, we will require you to enter information including your company name, address, point-of-sale type, logo, and phone number.

Technical Information.  When you access the Service, the Service may automatically record information transmitted, including access times, Internet Protocol (IP) addresses and browser used.  We may also use “cookies” or “web beacons” (certain small data files stored on your computer that collect information about visits and usage, retain user preferences and account settings, and may improve the customization and efficiency of your recurring experience with the Service).  However, we do not permit third parties to track your online activities over time and across other websites based on your use of the Website. You can adjust your browser to not accept cookies; however, your experience with the Website might accordingly be different and less efficient or you may be unable to access all features of the Website.  We may also obtain technical information from your device, including your unique device identifiers, hardware model, operating system and version, mobile network information, and information about the device’s interaction with our Service.  We may also identify other software running on the device for anti-fraud and malware-prevention purposes, but will not collect any content from that other software. 

The Website also uses analytics tools such as Google Analytics, a web analytics service provided by Google, Inc. that uses cookies to help the Site analyze how users navigate the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google in aggregate form. Google uses this aggregated information on our behalf in order to evaluate use of the Site, compile reports on Site activity and other services relating to Site usage. You can learn more about Google Analytics and how to opt out here: https://tools.google.com/dlpage/gaoptout.

The “Technical Information” described in this paragraph is non-demographic and typically is not, in and of itself, personally identifiable and remains in aggregate form.  We therefore consider it Blind Data, as that term is defined below.  We may use this Technical Information to, for example, improve users’ experience of the Service or block users who violate this Privacy Statement or the Terms.  If Technical Information or a combination thereof does identify you as an individual, we will treat the information as Personal Information.

Location-Based Information.  We and our service providers may collect certain location-based information (“LBI”) from you, such as identifying locations where you activate the Service, check into an Establishment, or make an OrderUp transaction.  We will collect this information only when you provide consent; we may directly and explicitly request your consent or the Service may check your device settings regarding location sharing.  We may use LBI to provide the Services to you, such as listings of nearby Establishments, targeted coupons, and special offers.  Certain aspects of the Service may be dependent on LBI, and your withholding of LBI may prevent or materially limit the Service’s functionality.  You can discontinue LBI tracking or withdraw your consent at any time by: contacting us using the contact details at the bottom of this Privacy Statement, changing the preferences on your mobile device, or following the standard uninstall process to remove the applicable instances of the Service from your device.

Transaction Data.  We may access, use, process, and transmit data related to your use of the Service, including Transactions enabled by the Service and related Transaction information, including item descriptions, price, tax and tip amounts (“Transaction Data”).   If you are a Patron, Transaction Data may include Establishments you patronize and information about the other users with whom attend Establishments or use the Service. We may obtain Transaction Data directly from you, the other parties engaged in the Transaction, and/or indirectly, such as via an Establishment’s point-of-sale system.

Sources.  We collect the information listed above from the following categories of sources:

• Direct interaction with the Service – While interacting with the Service, you may be asked directly to provide personal information.  For example, you may enter your name and address when registering for an account.
• Indirectly through your interaction with the Service – The Service may indirectly and automatically collect information associated to your account.  For example, the Service may create access logs or other Technical Information as described in this Privacy Statement.

USE OF INFORMATION

Permitted Uses.  Personal Information, Technical Information, LBI and Transaction Data are collectively referred to as “Information.”  We only collect and process Information submitted to us through the Service for the purposes described in this Privacy Statement or the Terms, including:

• Authentication purposes – to verify your identity and to protect our rights, your rights and the rights of other users.
• Providing the Service – to perform functions to Settle and process Transactions, provide receipts, or otherwise provide the Service.
• Security – to detect and prevent criminal activity such as fraud and abuse and to provision technical notices, security alerts and support and administrative messages.
• Improving the Service – to research and analyze usage of the Service for the development of new services or contests, to improve the Services offered and to solicit feedback.

Information includes data we collect through the Service, even if you have not signed up for an Account or downloaded the App.

Blind Data.  We may use the Information to create aggregated, anonymized general information (“Blind Data”) for analytics and reporting, monitoring, developing and improving the Service, create usage statistics, identifying trends and insights that may be of value to us, Establishments or Patrons, or for any other lawful business purpose.  Blind Data does not and cannot be used to identify you as an individual. 

YOUR RIGHTS AND CHOICES

Contact. To exercise any of your rights outlined in this section, or to learn more about our privacy practices, please contact us by email at [email protected].

Making a Request.  You may make a request personally or through an authorized agent.  We may ask for supporting information (such as details of a recent transaction) to verify your identity before fulfilling a request.  We will use commercially reasonable efforts to respond to all verifiable requests within 30 days of its receipt, and will inform you in writing if we require more time.

Access and Deletion. You may request access to and deletion of Information about yourself and your Organization by contacting us directly.

Correction. You may update or correct Information about yourself or your Organization by logging into your Account at any time or by contacting us directly.

Exceptions. We may retain archived copies of information about you and your transactions for a period of time that is consistent with applicable law.

INFORMATION SHARING

1. Unless we have your consent or as stated in this Privacy Statement, we do not share any of your Information.
2. We may share Patron Information with Establishments, including certain Personal Information, LBI and Transaction Data (but excluding Payment Information), to improve their products and services. For Patrons that opt in, we will also share Patron email addresses with Establishments for marketing purposes such as promotions, updates and discounts.
3. As a Patron, when you Settle a Transaction via the Service, the Service will automatically transmit your tokenized Payment Information to the Payment Processor selected by the Establishment. Through this process, this information may be provided to financial institutions, processors, payment card associations, and other entities that are part of the payment or transfer process, and your Payment Information may be transferred, processed and stored outside of Canada or the United States on servers in Canada, the United States, or other countries, and may be subject to disclosure as required by applicable law. The Payment Processor may also collect other information directly from you via cookies or other means. Processing may involve evaluation of card suspension or cancellation, and payment and balance data.  We will not access, decrypt or store your Payment Information during these transmissions. If the Establishment is using Stripe as its payment processor, the Stripe Privacy Policy will apply:  https://stripe.com/ca/privacy (in Canada) and https://stripe.com/us/privacy (in the United States).
4. We may also provide Information to our agents, technology vendors and other service providers on a “need-to-know” basis for the purpose of providing the Service and operating our business.  For example, business analytics platforms, marketing vendors, fraud detection and prevention firms and other vendors that help us improve our products and services and protect against fraud or misuse of the Service. These service providers are required to keep the Information confidential, and may not use it for any purpose other than to perform services for us or as otherwise required by law.
5. We may submit any Information we have regarding an alleged violation of law involving the Service to law enforcement, or to other governmental or regulatory entities (including pursuant to a subpoena, court order, or other legal process; or upon reasonable belief that a violation of applicable law has occurred).  We may also submit such Information as is required to establish our legal rights or defend against legal claims.
6. We may assign and transfer the Information to a third-party successor-in-interest in connection with, or in negotiation of:  a merger, acquisition, sale of substantially all our assets or stock, or similar change-in-control transaction; a financing event; or a bankruptcy or dissolution proceeding.
7. We may share your Information with an affiliate or to our group companies (i.e., entities that control OrderUp Technologies Inc.) for business purposes. We will require these entities to comply with the terms of this Privacy Statement with regard to their use of your information.

INFORMATION SECURITY

We maintain reasonable organizational, technological and physical safeguards in an effort to protect personal information in our custody and control against unauthorized access, use, modification and disclosure. Despite our actions and precautions, no Internet data transmissions are completely secure, and they are subject to theft, fraud, destruction, alteration, disclosure, unauthorized access and other misuse.

The security of your Account and Personal Information depends on you performing your responsibility to control access to your devices and applications, including maintaining physical possession of your device, and keeping your passwords and PINs confidential and not sharing them with anyone.  It is also your responsibility to alert us if you believe the security of information in any part of the Service has been compromised.

You agree that there is risk involved in your transmission of Information to us, some of which is unavoidable and may be (a) incurred via occurrences out of our control, or (b) inherent in all like Internet transmissions.  To the greatest extent permissible under applicable law, we are not responsible for the security or privacy of any Information you choose to submit to us.

THIRD-PARTY WEBSITES AND TECHNOLOGIES

We are not responsible for the privacy and data security practices, or the content or services, of third-party websites and services, including those to which you may elect to link from the Website.  You must review the privacy policies and terms of use of these other websites to understand their business practices.  This Privacy Statement does not cover the information practices of third parties who may collect your information, nor do we assume any liability for them.  If you have an issue with a third party, including any payment vendor, you must contact that third party directly.

RETENTION AND DISPOSAL OF PERSONAL INFORMATION

We retain Information to provide, maintain, and augment the Service, and to comply with legal requirements and standard business practices.  We retain Information for as long as (a) we have a business need, or (b) applicable laws, regulations, or government orders require.  When we dispose of Information, we use reasonable procedures to erase or render it unreadable (for example, shredding documents and wiping electronic media).  We may retain Blind Data for so long as it is relevant to our business model, in our discretion.

 

 

 

General Provisions

PRIVACY OF CHILDREN

We do not knowingly collect Personal Information from children under the age of 13.  If we learn that we have inadvertently done so, we will take commercially reasonable steps to delete that Personal Information. 

ENFORCEMENT

If you violate our Privacy Statement or other terms of use, we may prevent you from using the Service.  If you believe another person has committed such a violation, contact us via the customer care contact information we provide on the Website.

INTERNATIONAL TRANSFERS

OrderUp Technologies Inc. and its affiliated companies are located in Canada and the United States. The Service is not targeted at individuals outside Canada and the United States. If you are visiting the Website or using the Service from outside Canada and the United States, please note that information collected through the Service will be stored and processed in Canada or the United States or any other country (“Transfer Country”) in which we, or our affiliates, subsidiaries, agents or service providers, maintain facilities, where the data protection laws may differ from those in the country where you are located.  By using the Service, you consent to any such foreign transmission, including an express consent to your Personal Information being transferred, to, stored, in and accessed from a Transfer Country that differs from the country where you reside and/or utilize the Service.

UPDATES TO THIS PRIVACY STATEMENT 

This Privacy Statement will change from time to time to maintain compliance with applicable law and regulations.  We reserve the right to modify this Privacy Statement at any time in our sole discretion by posting the most recent version (which shall supersede any other version and become effective as of the last updated date indicated) on the Website.  Your continued use of the Service following posting of these changes constitutes acceptance of the terms as they exist at the time of your usage.

CONTACT US

For any questions regarding this Privacy Statement, please contact us at [email protected]