Privacy notice

Information we use

When you order, we collect your name, phone number, Uttara delivery address, selected items, order notes, timestamps, and order status. If you sign in, your Supabase account identifier and email are used to secure your account and show orders linked to it.

Why we use it

We use order information to confirm availability, prepare and deliver food, provide live status updates, prevent duplicate or abusive requests, support customers, and keep the operational and financial records required to run the restaurant.

Guest tracking

A guest order receives a private tracking key stored in that browser's session storage. A phone number by itself does not unlock full order history. Signed-in history is protected by the account session and database access rules.

Service providers

We use Supabase for authentication and data, Vercel for website hosting, Cloudflare for DNS and network services, and Resend for transactional email. When enabled, Google provides sign-in and Google Maps rating/review content. Each provider processes data under its own terms and privacy practices.

Google Maps content

Ratings and reviews labeled Google Maps come from Google Maps Platform. Review authors and source links are displayed with that content. Read Google's Privacy Policy.

Analytics choices

Optional Meta Pixel browser analytics is off by default. If you explicitly accept, it may receive page views and a non-identifying order reference, currency, and order value; Yamzo does not send your name, phone number, or delivery address from the browser. Your choice is stored in the first-party yamzo_analytics_consent cookie for up to 180 days. Global Privacy Control or Do Not Track keeps browser analytics off even if an earlier cookie says otherwise. You can delete Yamzo Uttara site data in your browser to make the choice again, and your choice never affects ordering.

When the restaurant enables server-side conversion measurement, Meta may separately receive a completed production order's value and item details plus one-way hashes derived from the customer's name, phone number, country, and signed-in account identifier. Test orders are excluded. These server events support advertising measurement and are not used to decide whether an order is accepted or fulfilled.

Retention and choices

Website orders, including test orders, are retained for restaurant operations, support, audit, and legal needs. Approved staff may cancel an order, but cannot permanently delete its operational record. You may ask about your personal information by emailing admin@yamzouttara.com.

Security

We use role-based access, row-level database policies, encrypted transport, secret-only server configuration, and audit records. No online service can promise absolute security, so we continually limit access and the amount of personal information exposed.