Privacy Policy
Last updated: November 27, 2024
At Ordermatic, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp-based business operations platform.
By using Ordermatic, you agree to the collection and use of information in accordance with this policy. We comply with the Protection of Personal Information Act (POPIA) and relevant data protection regulations.
1. Information We Collect
1.1 Information You Provide
We collect information that you voluntarily provide when using our service:
- Business information (company name, address, contact details)
- User account information (name, email, phone number)
- Menu and product information
- Payment and billing information
1.2 Customer Data
When your customers interact with your WhatsApp business number through Ordermatic, we process:
- WhatsApp phone numbers
- Order details and preferences
- Delivery addresses and contact information
- Message content and conversation history
- Transaction records
1.3 Automatically Collected Information
We automatically collect certain information when you use our platform:
- Usage data and analytics
- Device information (browser type, operating system)
- IP addresses and location data
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the collected information for the following purposes:
- Providing and maintaining our service
- Processing orders and transactions
- Sending automated WhatsApp messages on your behalf
- Managing your account and providing customer support
- Improving and optimizing our platform
- Analyzing usage patterns and trends
- Detecting and preventing fraud or security issues
- Complying with legal obligations
- Sending important service updates and notifications
- Marketing communications (with your consent)
3. How We Share Your Information
We may share your information in the following circumstances:
3.1 Service Providers
We work with third-party service providers who help us operate our platform:
- WhatsApp Business API providers
- Cloud hosting and storage services
- Payment processors
- Analytics and monitoring tools
- Customer support platforms
3.2 Business Transfers
If Ordermatic is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
3.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
4. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure data centers and infrastructure
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
5. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
When data is no longer needed, we securely delete or anonymize it. Customer conversation data is typically retained for 12 months unless otherwise required by law or requested by you.
6. Your Rights
Under POPIA and applicable data protection laws, you have the following rights:
- Access: Request copies of your personal information
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal information
- Objection: Object to processing of your personal information
- Restriction: Request restriction of processing
- Portability: Request transfer of your data to another service
- Withdraw Consent: Withdraw consent for processing at any time
To exercise these rights, please contact us at hello@ordermaticai.com. We will respond to your request within 30 days.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Types of cookies we use:
- Essential Cookies: Required for basic site functionality
- Analytics Cookies: Help us understand how visitors use our site
- Preference Cookies: Remember your settings and preferences
8. Third-Party Services
Our platform integrates with third-party services, including:
- WhatsApp: Subject to Meta's privacy policy and terms
- Payment Processors: Have their own privacy policies
- Analytics Services: May collect usage data
We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.
9. Children's Privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than South Africa. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you an email notification (for material changes)
You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
13. POPIA Compliance
As a South African company, we comply with the Protection of Personal Information Act (POPIA). We process personal information lawfully, in a reasonable manner, and only for specified purposes. We ensure the quality and security of personal information and provide data subjects with access to their information.