Privacy: your details and this website

Who runs this website

Templehall Cafe (Gav's cafe in Templehall, Kirkcaldy) runs this website and decides how your order details are used. Phone the cafe on 07519 035359.

The website is built and looked after for the cafe by Clarity HQ. Clarity HQ only handles your details to keep the website working for the cafe, and doesn't use them for anything else. The one exception is Clarity's own visit counter, described under Counting visits, which Clarity HQ uses to see how its websites are doing. Email Clarity HQ at hello@clarityhq.uk.

When you order: what we ask for, and why

We use these details to take, make and hand over the order you asked for. Nothing else.

Why we're allowed to: you've asked the cafe to make your order, and it needs these details to do that (in data protection law, this is “to carry out a contract”, or the steps before one).

What you'd like

So the cafe knows what to make.

Collect or delivery, and the time

So your food is ready when you want it.

Your name

So the cafe knows whose order it is when you collect it or when it's delivered.

Phone number (optional)

So the cafe can ring you if there's a problem with your order, for example if something has sold out. You can leave it blank.

Address (delivery only)

So the cafe can bring your food to your door. We don't ask for it if you're collecting.

Postcode (delivery only)

So the driver can find you, and so the website can check the cafe delivers to your area before you order.

Anything else (optional)

For notes like “no peas, please”. Allergy details are health information, so the law gives them extra protection. Only add allergy info you're happy for the kitchen to see. If you do, you're agreeing to the cafe using it only to make this order safely, and it's deleted with the order. You can phone the cafe about an allergy instead.

We never ask for your email address, date of birth or card number on this website. We don't send marketing messages.

Ordering by WhatsApp or text

The “Order on WhatsApp” and “Send as a text” buttons open WhatsApp or your phone's own messages app with your order already typed in. Nothing is sent until you press send yourself.

When you press send, your message (with your order, name, any phone number and delivery address you typed, and the number you're messaging from) goes from your phone to the cafe's phone. It travels through WhatsApp (run by Meta) or your mobile network, and their own privacy rules apply to it. A copy also stays on your phone.

The cafe keeps order messages and paper kitchen tickets for [TO CONFIRM WITH GAV: how long, suggested 30 days], then deletes or bins them, and will delete them sooner if you ask.

Preview: on this preview website, these buttons show the message instead of opening WhatsApp or your messages. Nothing is sent.

Sending your order from this website

If you tap “Send my order to the cafe”, your order and the details above go to the cafe's order screen, which is locked with the cafe's passcode.

If the cafe has switched on kitchen ticket printing, or asks you to pay online first, your order is also held for a short time on the website's server (run by Cloudflare for Clarity HQ) so the cafe's printer can collect it and print a ticket. The cafe's app and its printer can get it. Clarity HQ, which runs the server for the cafe, can also see these orders while they're held, and only uses them to print tickets and match payments. That server copy is deleted automatically 48 hours (2 days) after you order. To stop anyone flooding the order system, the server also keeps a short-lived count of orders from your connection. It uses a scrambled code, never your IP address, and it's dropped after about 12 minutes.

Preview: the order only shows in the cafe's demo app on the same browser. That demo app has no lock, and this browser keeps a copy of the order and the demo cafe's test codes. Test orders on the server are deleted 48 hours after they're made.

Paying online (if the cafe asks you to)

The cafe can ask you to pay before it starts making your food. “Pay now” opens the cafe's card payment page, run by SumUp or Square. You type your card details on their page, never on this website, and their own privacy notice applies.

The website only gets told that your order was paid, how much, and your order number, so the ticket can print as “PAID”. If the cafe allows it, you can choose to pay cash instead.

Preview: no payment is taken and no card details are asked for. “Pretend I've paid” just marks the test order as paid.

Counting visits to this website

The website counts visits so the cafe can see how many people look at it. It doesn't use cookies and doesn't keep IP addresses.

When you open a page, your connection's address and your browser type are mixed with a secret code and the date, and shortened into a scrambled code (something like 3fa91c0b72de). It can't be turned back into your IP address. Because the date is part of the mix, you get a new code every day, so nobody can follow you from one day to the next.

What's counted:

• which page you opened (just the page, not anything after a “?” in the address)
• what kind of site sent you, as one word: Facebook, Instagram, Google, another search engine, another site, or none
• when parts of the page, like the menu, come into view
• taps on buttons and links, with the button's words (like “Order on WhatsApp”), and when the order form is sent

Never counted: anything you type, your name, phone number or address.

Each day's record (that day's totals and that day's scrambled codes) is deleted automatically after 395 days, about 13 months. To stop one connection flooding the count, a second scrambled code limits how much one connection can add in a day. It's kept in the same day's record and deleted with it. Search engines and other robots are skipped.

This preview website also has Clarity’s visit counter. It counts visits with the time, device type (phone, tablet or computer) and rough town, and Clarity HQ can get a note the first time the preview is opened. No names, no IP address and nothing you type. Counts are kept for 13 months after the last visit, then deleted.

Don't want to be counted at all? Tap the switch. It saves a small note in this browser so both counters skip this device. Nothing about you is stored.

Getting your details deleted

You can ask to see, correct or delete the details you've given the cafe, or ask what it holds about you. Phone the cafe on 07519 035359, ask at the counter, or email Clarity HQ at hello@clarityhq.uk and we'll pass it to the cafe. It helps to tell us your name and roughly when you ordered.

We'll reply within one month [TO CONFIRM WITH GAV: he's happy with the one-month reply]. There's no charge.

• WhatsApp and text messages: the cafe deletes its copy. You can delete the chat on your own phone too.
• Website orders: the server copy is already deleted automatically 48 hours after you order. The cafe deletes its copy from its order screen.
• Visit counts: these can't be linked to you, so there's nothing to find or delete. Use “Don’t count me” above to stop being counted.

If you're unhappy with how your details are handled, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.