We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it — in plain English.
RRDine is operated by Turnkey Web Tools, Inc., a California corporation. We provide a commission-free online ordering platform for independent restaurants.
For the purposes of data protection law, Turnkey Web Tools, Inc. is the data controller for information collected from restaurant owners and staff. Individual restaurants are the data controllers for information collected from their customers through their ordering pages.
We collect different types of data depending on how you interact with RRDine.
| Data | How We Collect It | Purpose |
|---|---|---|
| Name & email address | Account registration | Account access, billing communication |
| Password (hashed) | Account registration | Authentication |
| Restaurant name, address, phone | Onboarding form | Platform setup, customer display |
| Business hours, cuisine type | Settings | Menu availability, search |
| Logo & cover images | Media uploads | Customer-facing ordering page |
| Stripe account ID | Stripe Connect onboarding | Payment routing |
| Subscription & billing status | Stripe Cashier | Access control, billing |
| IP address & browser info | Automatically on login | Security, fraud prevention |
| Data | How We Collect It | Purpose |
|---|---|---|
| Name | Checkout form | Order identification |
| Phone number | Checkout form | Order status SMS notifications |
| Email address (optional) | Checkout form | Order confirmation, review request |
| Order contents & special instructions | Order submission | Fulfillment |
| Table number (dine-in) | QR code scan | Order routing |
| Payment method (tokenized) | Stripe.js | Payment processing (card data never touches our servers) |
| Star rating & review text (optional) | Post-order review page | Restaurant analytics |
If you visit rrdine.com without registering, we collect standard server log data (IP address, browser type, pages visited, referring URL) for security and analytics purposes. We do not use third-party analytics trackers.
We use the data we collect to:
We do not sell your personal data. We do not use your data for advertising targeting on third-party platforms.
We share data only with the parties necessary to operate the platform:
We do not share your data with advertisers, data brokers, or analytics platforms. We may disclose data if required by law, court order, or to protect the rights, property, or safety of RRDine, our users, or the public.
In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will provide notice before your data is subject to a different privacy policy.
When your customers place orders through your RRDine ordering page, they provide data to you (their restaurant) — not to RRDine directly. You are the data controller for your customers' data. RRDine processes that data on your behalf as a data processor.
As a restaurant owner using RRDine, you are responsible for:
RRDine retains customer order data on your behalf to power your analytics dashboard and order history. This data is stored only for your restaurant and is not shared with other restaurants on the platform.
RRDine never sees or stores full credit card numbers, CVV codes, or raw payment credentials. All payment data is handled directly by Stripe's secure infrastructure using Stripe.js, which tokenizes card data in the customer's browser before it ever reaches our servers.
What we do store:
For questions about how Stripe handles payment data, refer to stripe.com/privacy.
RRDine uses a minimal set of cookies necessary to operate the platform:
We do not use advertising cookies, Google Analytics, Facebook Pixel, or any third-party tracking scripts on the RRDine platform or marketing website.
You may request earlier deletion of your personal data by contacting support@rrdine.com. Note that some data may be retained to comply with legal obligations or resolve disputes.
We implement industry-standard security measures to protect your data:
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to support@rrdine.com.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email support@rrdine.com with the subject line "Privacy Request." We will respond within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you additional rights:
To submit a CCPA request, email support@rrdine.com or call 1-800-673-4898. We may need to verify your identity before fulfilling a request.
RRDine is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at support@rrdine.com and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or post a notice on the platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of RRDine after the effective date constitutes acceptance of the updated policy.
Questions, concerns, or requests about this Privacy Policy: