We forgetyou fast.
nemaserve tells you when your food is ready. To do that it needs almost nothing about you, and it keeps that almost-nothing for 24 hours.
0
names, emails or payment details
24h
until order data is deleted
0
marketing messages, ever
Who is responsible
The restaurant you ordered from is the data controller — it decides that guests get notified and it holds the relationship with you. SisleLabs OOD operates nemaserve on the restaurant's behalf as its processor, which means we only handle your details to deliver the notification the venue asked us to send.
What we hold
Only what a notification needs:
- A random session identifier created when you tap the stand.
- Your order number, as given to you at the counter.
- If you added a wallet card: its serial number, and the device identifier and push token your phone gives us so the update can reach it.
- If you chose WhatsApp: the phone number you messaged us from.
We never receive your name, email address, or anything about how you paid. We do not track you across venues or visits.
Why we are allowed to
Performance of a contract — you asked to be told when your order was ready, and this is us doing that. It is not based on consent, so there is no consent to withdraw; if you want it to stop, remove the card or block the WhatsApp number and it stops.
How long
Everything above is deleted automatically 24 hours after your order, by a job that runs every hour. Not archived, not anonymised and kept — deleted.
We keep counts of things that happened — how many people tapped, how long the counter took to link an order — with no identifier attached to them. Those numbers cannot be traced back to you or to your phone, and we keep them to see whether the product works.
What we never do
Your phone number is never used for marketing, never sold, and never shared with anyone beyond the venue you ordered from and the platforms that carry the notification — Apple, Google and, if you chose it, WhatsApp. We have not built the ability to market to you, deliberately.
Your rights
You can ask for a copy of what we hold, ask us to correct or delete it, or object to it. In practice, 24 hours of waiting achieves deletion on its own. Because the venue is the controller, requests are best sent to them — but write to us and we will help either way. You also have the right to complain to your local data protection authority.
Contact
support@sislelabs.com
SisleLabs OOD
SisleLabs OOD