Privacy Policy

How BipOrder processes and protects personal data (GDPR).

Last updated : 2026-08-11

1. Data controller and scope

This policy describes how BipOrder LLC (1209 Mountain Road Pl NE, Suite N, Albuquerque, NM 87110, United States — [email protected]) processes personal data.

For the biporder.com website and restaurant (professional) accounts, BipOrder acts as the data controller.

For end-customer data collected through the tools a restaurant uses (reservations, orders, delivery), BipOrder acts as a processor on behalf of the restaurant, which is the data controller. Such processing is governed by our data processing agreement (DPA), available at biporder.com/dpa, which forms an integral part of the terms accepted by the restaurant upon subscription.

2. Data we process

Browsing and support chat on biporder.com: IP address, approximate geolocation derived from the IP (city, country, internet provider), browser type, pages visited, message content and, where provided, your name and email.

Table reservations: first name, last name, email, phone, date and time, party size, optional notes; where applicable a card authorization via Stripe to secure the booking.

QR-code table ordering (on site): table number and ordered items. No identifying data is required.

Delivery or takeaway orders: name, phone, email and delivery address, needed to prepare and hand over the order.

Restaurant account: identity, email and information about the establishment.

Payment: handled directly by our provider Stripe. We never store card numbers.

3. Purposes and legal bases

Providing the requested service (order, reservation) and managing the account: performance of the contract (Art. 6(1)(b) GDPR).

Billing and accounting obligations: legal obligation (Art. 6(1)(c)).

Support and visitor tracking via chat, service security, fraud and abuse prevention: legitimate interest (Art. 6(1)(f)).

Anonymous audience measurement (no cookie, no identifier, IP address hashed server-side, "Do Not Track" signal respected): legitimate interest (Art. 6(1)(f)).

Marketing communications: consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Recipients and processors

We share data only with providers necessary for the service: Stripe (payment), an IP geolocation service (ip-api.com), Mistral AI (conversational assistant), our email delivery provider, Cloudflare (security and content delivery) and Hostinger (hosting).

When you make a reservation or order with a restaurant, that restaurant receives the corresponding data as data controller.

We do not sell personal data.

5. Transfers outside the European Union

BipOrder LLC is established in the United States and some of our providers (including Stripe and Cloudflare) are established there. Transfers to these recipients are governed by appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses and/or certification mechanisms such as the Data Privacy Framework.

6. Retention periods

Visitor chat data: kept for up to 6 months, then deleted.

Restaurant account: kept for the duration of the contractual relationship, then deleted, except billing data kept as required by legal obligations.

Reservations and orders: kept for the time needed for the service and its follow-up, then for a limited period.

Technical and security logs: kept for up to 90 days.

7. Security

We implement appropriate technical and organizational measures: encryption of sensitive data, strict data isolation between restaurants, hardened servers, restricted access and logging.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time.

To exercise these rights, write to [email protected]. For data collected through a restaurant, you may contact that restaurant (the controller) or us, and we will forward your request.

You have the right to lodge a complaint with a supervisory authority. In Belgium: the Data Protection Authority (APD/GBA), www.autoriteprotectiondonnees.be. In the EU, you may contact the authority of your country of residence.

9. Cookies

We use only cookies strictly necessary for the site to function. Our audience measurement is anonymous and cookieless (no identifier or tracker stored on your device). The consent banner lets you manage your choice for any optional cookie.

10. Contact

For any question about this policy or your personal data: [email protected] — BipOrder LLC, 1209 Mountain Road Pl NE, Suite N, Albuquerque, NM 87110, United States.