Privacy notice
in plain English.

Who we are

Manto Order is a product of Manto Studio, based in London. Where this notice says "we", it means the company that provides the ordering system and the till.

You can reach us through the contact page. The registered address and the name of the data protection contact go here once they are confirmed.

What this notice covers — and what it doesn't

This notice covers the data we control. That means the people who visit this website and the owners and staff who hold a Manto account. For that data we decide what is collected and why, which makes us the controller, and everything below applies.

It does not cover your customers. For the people who order from your shop, you are the controller and we are only your processor — we hold their details and do what you instruct, and nothing else. Three separate documents govern that, because it is a different relationship and mixing the two into one notice is how a shop ends up unable to answer a straight question about its own customers:

• the data processing agreement — the Article 28 terms between you as controller and us as processor;
• the storefront privacy notice — the notice we write for you to publish under your own name, which is what your customers actually read;
• and Who owns your customers?, which is the plain-English reasoning behind both.

The practical consequence: a customer asking what you hold about them asks you, not us, and we give you the tools to answer.

What we collect when you visit this website

• Page views and the usual technical detail — pages visited, referrer, approximate region, device and browser. We use Vercel Analytics and Vercel Speed Insights, which are aggregated and do not set advertising cookies or build a profile of you.
• Anything you type into a form: your name, your shop, your email address, your phone number, and whatever you tell us about your setup.

We do not run advertising trackers on this site, and we do not sell or share what we collect here with anyone for their own purposes.

What we collect when you become a customer

• Account details: names, work email addresses and phone numbers for you and your staff.
• Billing details, and the record of what has been paid. Card details are handled by our payment provider and never reach our servers.
• Support conversations — email, phone and chat — so the next person you speak to has the history.
• Usage and error logs from the till and the storefront, which is how a fault gets found.

What we hold on your behalf — in one paragraph

Running your shop means holding your customers' details: names, phone numbers, delivery addresses, order history, and any marketing permission they have given you. You control that data and we only process it, so it is governed by the data processing agreement and described to your customers in the storefront notice rather than here.

The one thing worth repeating in our own notice, because it is a promise about our conduct: we do not market to your customers, we do not sell their data, and we do not build a cross-shop data product out of it. Anything we ever publish about how takeaways trade comes from aggregated figures that cannot be traced to a shop or a person.

Why we use it, and the lawful basis

Running your account and the service

Performance of our contract with you

Taking payment and chasing what is owed

Performance of our contract, and our legitimate interest in being paid

Support, security and fixing faults

Our legitimate interest in a service that works and is not abused

Telling you about the product you use

Our legitimate interest in keeping our own customers informed

Marketing to businesses that are not yet customers

Consent, or the soft opt-in where it genuinely applies

Meeting tax, accounting and legal duties

Legal obligation

Your customers' personal data

You decide the purpose and the basis. We act on your instructions

Who else touches it

A short list of sub-processors, each doing one job, each under a contract that binds them to the same terms we are bound by. Card payments run through Stripe, at their published rate.

The full list — hosting, messaging, email and support tooling, with the country each one operates in — is published here before launch, and you are told before it changes. That is a promise in the data processing agreement, not a courtesy.

How long we keep it

• Website enquiries: kept while we are talking, and for a reasonable period after, then deleted.
• Account and billing records: kept for as long as you are a customer, and afterwards for the period tax and company law require.
• Support conversations: kept while they are useful for support, then deleted.
• Your customers' data: kept for as long as you tell us to, and deleted or returned when you leave — your choice, confirmed in writing.

Backups roll off on their own cycle. Anything waiting to roll off is put beyond use in the meantime — it is not looked at, and it is not restored into service.

Where it is stored

Personal data is stored in the United Kingdom or the European Economic Area. Where a sub-processor has to move data outside those, we rely on the UK's adequacy regulations or on the International Data Transfer Agreement, and the sub-processor list says which applies to whom.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us relying on legitimate interest, or ask for it in a portable format. Where we rely on consent you can withdraw it at any time, and that does not undo anything done before you did.

Write to us through the contact page. We answer within a month, and we do not charge for it.

Your customers' rights come to you

Because you are the controller for your customers, their requests are yours to answer. The dashboard has the tools — look someone up, export what you hold, delete it — and if a request gets complicated we help. If one arrives at our door by mistake, we pass it to you rather than answering it ourselves. The storefront notice tells your customers exactly that, so nobody is sent round in a circle.

Cookies

This website uses what it needs to work, plus the aggregated analytics described above. No advertising cookies, no cross-site tracking, nothing sold on. Your storefront is a different question, and its own privacy notice — the one we write for you during onboarding — covers it.

Security

Encryption in transit and at rest, access limited to the people who need it and logged, multi-factor authentication on administrative access, and a documented route for telling you about a breach without delay. The specific measures are listed in Annex 3 of the data processing agreement.

Complaining

Tell us first — it is usually quicker. If we do not put it right you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. Complaining to them does not stop you coming back to us.

Changes to this notice

When this changes we update the date at the bottom, and when the change is material we tell customers directly rather than hoping they re-read the page.