Privacy Policy

Last updated 1 June 2023

Introduction

This Privacy Policy details how your data is collected and used by innOrder. For the purposes of the Data Protection Act (“Act”), innOrder is the Data Controller of our own information captured and also the Data Processor on behalf of our clients using the System.

The website and application www.innorder.com and app.innorder.com (“Service”, Services”) are operated by Saphan Solutions, a Limited Company registered in Thailand (“innOrder”, “we”, “our”, or “us”). 

Types of Data we Collect

Personal Data

During your use of our Service, we may request personally identifiable information from you that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to, details such as your email address, name, address, state, province, ZIP/postal code, city, credit card information, cookies, and usage data.

We may use your Personal Data to communicate with you regarding updates on new features or announcements, provide updates on your account status, issue invoices, receipts, or payment reminders, as well as share any other pertinent information that may be relevant to you.

You can opt out of receiving emails regarding new features and similar announcements by clicking the ‘unsubscribe’ link in the email. It is not possible to opt out of receiving transactional emails or notifications concerning your account status, security updates, or other essential communications related to the functioning of your account. If you are no longer a user of innOrder and all business with us is concluded, you can opt out of all communications from us.

Usage Data

We may also gather information on how the Service is accessed and utilized ("Usage Data"). This Usage Data may include details such as your computer's Internet Protocol (IP) address, browser type, browser version, the specific pages of our Service that you visit, the date and time of your visit, the duration of time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking & Cookies Data

To monitor the activity on our Website and System and retain certain information, we may employ cookies or similar tracking technologies. Cookies are small files containing data, including an anonymous unique identifier. These files are sent to your browser from a website and stored on your device. We also utilize tracking technologies such as tags and scripts to collect and track information, thereby improving and analyzing our Service. You have the option to configure your browser to reject all cookies, however please note that if you decline cookies, certain parts of our Service may not be accessible.

Use of Personal Information

We gather and use your personal information to effectively run our website and provide services to you and your customers. Your personal information is used for purposes such as offering online ordering services, customer management, technical support, billing, sales and support, product upgrades, and providing information to you. Additionally, we use your personal information to monitor service usage and identify, prevent, and resolve technical issues.

We prioritize the confidentiality of all information we collect from you. We do not engage in renting, leasing, or providing our customer lists or any other details from your account, including client information, to third parties.

There may be instances where we may share your personal information with contracted service providers, spam filter operators, or official innOrder partners who assist us in delivering services. However, such sharing will only occur within the boundaries defined by our contractual agreements and obligations.

Your Privacy and Disclosure of Data

We are committed to maintaining the confidentiality of any material uploaded to our servers and will not disclose it to any third party without your consent, except as permitted or required by law. In cases involving fraud prevention and related security purposes, we may share information with regulatory bodies, law enforcement officials, and agencies.

In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred. We will notify you before any such transfer takes place and becomes subject to a different Privacy Policy.

Retention of Data

We will store your Personal Data only for as long as it is necessary to fulfill the purposes stated in this Privacy Policy. We will keep and utilize your Personal Data to the extent required to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Additionally, we will retain Usage Data for internal analysis purposes. Usage Data is typically kept for a shorter duration, unless it is utilized to enhance the security or functionality of our Service, or if there is a legal obligation to retain such data for extended periods.

Data Security 

We strive to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. However, it is important to note that no method of data storage or transmission, whether electronic or physical, can be guaranteed to be 100% secure. Therefore, we cannot provide an absolute guarantee of data security. 

You play a crucial role in maintaining the security of your data. It is your responsibility to keep your personal and account details, as well as your password, confidential. Your password is essential for protecting your personal information, and you are accountable for any activities that occur in your account or relating to your use of this service. If you suspect that the security of your password or account has been compromised in any way, please notify us immediately.

Legal Basis for Collecting and Using Personal Data

For those in the European Union, our legal grounds for processing data about you under EU data protection laws, is that our use of your data is based on the grounds that: 

  • We need to fulfill our commitments to you under the applicable terms of service or other agreements with you or is necessary to administer your account;

  • For compliance with a legal obligation; 

  • For payment processing purposes; 

  • We have a legitimate interest such as to provide and update our services, to improve our services so we can offer a better user experience, to safeguard our service, to communicate with you, to measure, gauge, and improve the effectiveness of our advertising, and to understand our user retention and attrition, to monitor and prevent any problems with our services, and to personalize your experience; or 

  • You have given us your consent. 

Your Data Protection Rights Under Under General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

  • Request access to your personal data;

  • Request correction or deletion of your personal data;

  • Object to our use and processing of your personal data;

  • Request that we limit our use and processing of your personal data; and

  • Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

innOrder as a Data Processor (GDPR)

Our web-based software is primarily designed for managing orders. When you use innOrder, it is likely you may store personal information about your customers within your innOrder account. As outlined by the General Data Protection Regulation (GDPR), in such situations, you are regarded as the Data Controller, while we assume the role of your Data Processor. It is your responsibility to ensure the privacy and protection of your customers' personal information and to uphold their associated rights. 

Third Party Service Providers

We may engage third-party companies and individuals (“Service Providers”), to assist us in facilitating, providing, and analyzing the usage of our Service. These Service Providers are granted access to your Personal Data solely for the purpose of performing these tasks on our behalf. They are obligated to uphold confidentiality and refrain from utilizing your Personal Data for any other purposes.

Google Analytics: Google Analytics is a web analytics service provided by Google that enables the tracking and reporting of website traffic. It collects data to monitor and analyze the usage of our Service. This data may be shared with other Google services. Google may utilize the collected data to personalize and contextualize advertisements through its advertising network. If you wish to prevent your activity on the Service from being available to Google Analytics, you can opt-out by installing the Google Analytics opt-out browser add-on. This add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information about your visit activity with Google Analytics. For more details regarding Google's privacy practices, please refer to the Google Privacy & Terms page.

Payment Processors: We use third-party services for payment processing (e.g. payment processors). These payment processors adhere to the standards set by PCI-DSS to help ensure the secure handling of payment information. Your payments to us are processed by Stripe. For more details regarding Stripe’s privacy practices, please refer to Stripe’s Privacy & Terms page.

Links to Other Sites: Our Service may include links to external websites not managed by us. When you click on a link to a third-party site, you will be redirected there. We recommend reviewing the Privacy Policy of each visited site. We do not have control over or take responsibility for the content, privacy policies, or practices of any third-party sites or services.

How to Contact Us

Please contact us if you have any questions about our Privacy Policy at support@innorder.com.

Privacy Policy Changes

We may review and update this Privacy Policy from time to time. Revised versions will be updated on this website and will be effective once posted. Your continued use of the Website and System will be deemed as acceptance of the policy.



Last updated 1 June 2023

Introduction

This Privacy Policy details how your data is collected and used by innOrder. For the purposes of the Data Protection Act (“Act”), innOrder is the Data Controller of our own information captured and also the Data Processor on behalf of our clients using the System.

The website and application www.innorder.com and app.innorder.com (“Service”, Services”) are operated by Saphan Solutions, a Limited Company registered in Thailand (“innOrder”, “we”, “our”, or “us”). 

Types of Data we Collect

Personal Data

During your use of our Service, we may request personally identifiable information from you that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to, details such as your email address, name, address, state, province, ZIP/postal code, city, credit card information, cookies, and usage data.

We may use your Personal Data to communicate with you regarding updates on new features or announcements, provide updates on your account status, issue invoices, receipts, or payment reminders, as well as share any other pertinent information that may be relevant to you.

You can opt out of receiving emails regarding new features and similar announcements by clicking the ‘unsubscribe’ link in the email. It is not possible to opt out of receiving transactional emails or notifications concerning your account status, security updates, or other essential communications related to the functioning of your account. If you are no longer a user of innOrder and all business with us is concluded, you can opt out of all communications from us.

Usage Data

We may also gather information on how the Service is accessed and utilized ("Usage Data"). This Usage Data may include details such as your computer's Internet Protocol (IP) address, browser type, browser version, the specific pages of our Service that you visit, the date and time of your visit, the duration of time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking & Cookies Data

To monitor the activity on our Website and System and retain certain information, we may employ cookies or similar tracking technologies. Cookies are small files containing data, including an anonymous unique identifier. These files are sent to your browser from a website and stored on your device. We also utilize tracking technologies such as tags and scripts to collect and track information, thereby improving and analyzing our Service. You have the option to configure your browser to reject all cookies, however please note that if you decline cookies, certain parts of our Service may not be accessible.

Use of Personal Information

We gather and use your personal information to effectively run our website and provide services to you and your customers. Your personal information is used for purposes such as offering online ordering services, customer management, technical support, billing, sales and support, product upgrades, and providing information to you. Additionally, we use your personal information to monitor service usage and identify, prevent, and resolve technical issues.

We prioritize the confidentiality of all information we collect from you. We do not engage in renting, leasing, or providing our customer lists or any other details from your account, including client information, to third parties.

There may be instances where we may share your personal information with contracted service providers, spam filter operators, or official innOrder partners who assist us in delivering services. However, such sharing will only occur within the boundaries defined by our contractual agreements and obligations.

Your Privacy and Disclosure of Data

We are committed to maintaining the confidentiality of any material uploaded to our servers and will not disclose it to any third party without your consent, except as permitted or required by law. In cases involving fraud prevention and related security purposes, we may share information with regulatory bodies, law enforcement officials, and agencies.

In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred. We will notify you before any such transfer takes place and becomes subject to a different Privacy Policy.

Retention of Data

We will store your Personal Data only for as long as it is necessary to fulfill the purposes stated in this Privacy Policy. We will keep and utilize your Personal Data to the extent required to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Additionally, we will retain Usage Data for internal analysis purposes. Usage Data is typically kept for a shorter duration, unless it is utilized to enhance the security or functionality of our Service, or if there is a legal obligation to retain such data for extended periods.

Data Security 

We strive to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. However, it is important to note that no method of data storage or transmission, whether electronic or physical, can be guaranteed to be 100% secure. Therefore, we cannot provide an absolute guarantee of data security. 

You play a crucial role in maintaining the security of your data. It is your responsibility to keep your personal and account details, as well as your password, confidential. Your password is essential for protecting your personal information, and you are accountable for any activities that occur in your account or relating to your use of this service. If you suspect that the security of your password or account has been compromised in any way, please notify us immediately.

Legal Basis for Collecting and Using Personal Data

For those in the European Union, our legal grounds for processing data about you under EU data protection laws, is that our use of your data is based on the grounds that: 

  • We need to fulfill our commitments to you under the applicable terms of service or other agreements with you or is necessary to administer your account;

  • For compliance with a legal obligation; 

  • For payment processing purposes; 

  • We have a legitimate interest such as to provide and update our services, to improve our services so we can offer a better user experience, to safeguard our service, to communicate with you, to measure, gauge, and improve the effectiveness of our advertising, and to understand our user retention and attrition, to monitor and prevent any problems with our services, and to personalize your experience; or 

  • You have given us your consent. 

Your Data Protection Rights Under Under General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

  • Request access to your personal data;

  • Request correction or deletion of your personal data;

  • Object to our use and processing of your personal data;

  • Request that we limit our use and processing of your personal data; and

  • Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

innOrder as a Data Processor (GDPR)

Our web-based software is primarily designed for managing orders. When you use innOrder, it is likely you may store personal information about your customers within your innOrder account. As outlined by the General Data Protection Regulation (GDPR), in such situations, you are regarded as the Data Controller, while we assume the role of your Data Processor. It is your responsibility to ensure the privacy and protection of your customers' personal information and to uphold their associated rights. 

Third Party Service Providers

We may engage third-party companies and individuals (“Service Providers”), to assist us in facilitating, providing, and analyzing the usage of our Service. These Service Providers are granted access to your Personal Data solely for the purpose of performing these tasks on our behalf. They are obligated to uphold confidentiality and refrain from utilizing your Personal Data for any other purposes.

Google Analytics: Google Analytics is a web analytics service provided by Google that enables the tracking and reporting of website traffic. It collects data to monitor and analyze the usage of our Service. This data may be shared with other Google services. Google may utilize the collected data to personalize and contextualize advertisements through its advertising network. If you wish to prevent your activity on the Service from being available to Google Analytics, you can opt-out by installing the Google Analytics opt-out browser add-on. This add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information about your visit activity with Google Analytics. For more details regarding Google's privacy practices, please refer to the Google Privacy & Terms page.

Payment Processors: We use third-party services for payment processing (e.g. payment processors). These payment processors adhere to the standards set by PCI-DSS to help ensure the secure handling of payment information. Your payments to us are processed by Stripe. For more details regarding Stripe’s privacy practices, please refer to Stripe’s Privacy & Terms page.

Links to Other Sites: Our Service may include links to external websites not managed by us. When you click on a link to a third-party site, you will be redirected there. We recommend reviewing the Privacy Policy of each visited site. We do not have control over or take responsibility for the content, privacy policies, or practices of any third-party sites or services.

How to Contact Us

Please contact us if you have any questions about our Privacy Policy at support@innorder.com.

Privacy Policy Changes

We may review and update this Privacy Policy from time to time. Revised versions will be updated on this website and will be effective once posted. Your continued use of the Website and System will be deemed as acceptance of the policy.