Privacy policy

For an order you place in a store, the business that runs the store decides how your order details are used and is responsible for them; Ordpin processes them on its behalf. For your Ordpin account, the device registry, statistics and protection against fraud, Ordpin is responsible.

For a request about an order you can contact the store or us; we pass requests on to the store when they are its to answer.

When you order: your name and phone number, the delivery address and its point on the map if you choose delivery or shipping, the items, your notes and your product ratings.

About the device: a random id we generate, the IP address, the type of device, its system and browser, the screen size, language and time zone, and a short technical fingerprint computed from these traits. We never read your contacts, photos or your device's precise location.

About use: the pages, categories and products you opened, searches, what you added to or removed from the cart, checkout starts and errors, and how you reached the store (the referring site and campaign links).

For pickup, delivery or shipping we may ask you to sign in with Google, Facebook or Apple. The provider gives us a stable id for your account, your name, your e-mail address and your profile picture if there is one. We never receive your password, contacts or posts.

After you sign in we ask only for what the order still needs: a phone number, and for delivery an address with its place on the map. Your account keeps your name, phone, saved addresses (up to 20) and order history, so ordering from any store is quick.

One account works in every Ordpin store, but each store sees only the orders you placed with it, never your e-mail, how you sign in, or your orders elsewhere. Accounts are never merged automatically: signing in with another provider creates a separate account.

You can delete your account yourself from the account page in any store or in the app. Deleted at once: your sign-in methods, addresses, sessions, name, phone and e-mail, and we revoke the access you gave Apple. Your past orders stay in the stores' financial records, and we erase your name, phone and address from them 90 days after each order ended.

To run the service: getting your order to the store, following it and keeping your cart.

For protection: request limits are counted per device, so customers on one mobile network do not block each other, and to detect duplicate accounts and abuse of the welcome credit and referral rewards.

To improve: aggregated statistics help the Ordpin team see what works and what needs improving in the stores and the platform.

To take and deliver your orders and run your account, because you asked for it (a contract). To keep the service safe — request limits, duplicate accounts, abuse of credits — for our legitimate interest in protecting customers, stores and Ordpin. To keep financial records, because the law requires it. To count visits in the European Economic Area, the United Kingdom and Switzerland, only with your consent, which you can withdraw at any time.

We use the "ordpin_did" cookie for the device id, for up to 400 days; it is signed so it cannot be forged, and the store's pages cannot read it. We use "ordpin_cid" for a customer's sign-in (30 days, renewed as you use it), a ten-minute cookie that ties a sign-in to your browser so no one can slip their own sign-in into it, a sign-in cookie for store owners and their staff, and two for the chosen language and country.

The cart, the current visit number and your latest orders are kept in your browser's storage on your device; you can delete them in your browser settings.

In the European Economic Area, the United Kingdom and Switzerland we count visits only if you allow it: we ask once and keep your answer in the "ordpin_consent" cookie for a year. The cookies needed for security, the cart and signing in are used either way.

We estimate the country and city from the IP address with an open database (DB-IP). On mobile networks it often shows the carrier's city rather than yours.

We only know a precise location when you set it on the map for a delivery order, and it is used for that order only.

When you scan a barcode in the Ordpin app we keep the code with your area rounded to about 1 km and your device’s random id, to learn what customers look for and cannot find. The camera image is never sent or stored, and markets only see how many customers near them looked for an item, never who they are or where. These records are deleted after 400 days.

The store you ordered from sees only the order details it needs to fulfil it. It does not see your device id, your IP address or your activity in other stores.

The Ordpin team sees the device registry and statistics for protection and improvement only. Data is stored on Amazon servers in Frankfurt (European Union).

We do not sell, rent or share data with advertisers. We may disclose it when the law requires us to.

Amazon Web Services (hosting, database, files and email, in the European Union); Cloudflare (domain names and their DNS); Google, Apple and Facebook (only when you choose to sign in with them); OpenStreetMap (map images your browser loads when a map is shown). Our Data Processing Agreement (ordpin.com/dpa) lists what each one does.

Data is stored and processed on Amazon Web Services in Frankfurt, Germany, in the European Union. The Ordpin team may access it from outside the European Union, including from Iraq, under the European Commission's Standard Contractual Clauses where the GDPR requires them.

Visits and events: 400 days, then deleted automatically. Devices: deleted two years after they were last seen. Customer accounts: kept until you delete them. Orders: kept in the store's records and the financial accounts; if you delete your account, we erase your name, phone and address from them 90 days after the order ended.

You can delete the cookies in your browser at any time, and your device gets a new id. You can delete your account yourself from the account page, or ask for a copy of your data or its deletion through the support form; we answer within 30 days.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to have your data corrected, to restrict or object to its use, to receive it in a portable format, to withdraw your consent at any time, and to complain to your data protection authority.

We may update this policy when we add features. We will change the date above and announce important changes in the stores.

For any privacy question or a request about your data, write to the Ordpin team through the support form and choose “Privacy and my data”.