Privacy policy

• Account details: name, email, phone number and, if you save one, a delivery address.
• Order details: what you ordered, from where, when, the notes you left, and the total paid.
• Location: the delivery address, and — only while an order is active and only if you allow it — the device location used to improve the courier hand-off.
• Payment: handled by our payment processor. Sellio stores the card brand and last four digits only. We never receive or store the full card number.
• Technical data: device type, app version and error logs, used to fix faults.

To take and deliver your order, to process payment and refunds, to provide support, to detect fraud, and to meet tax and food-safety record-keeping obligations. We also use aggregated, non-identifying order data to measure delivery times and improve dispatch.

• The restaurant sees your first name, the order contents and your notes to the kitchen. It does not see your address, phone number or email.
• The courier sees your first name, delivery address and a masked phone number that stops working two hours after delivery.
• Processors we rely on: a payment processor, a cloud hosting provider, a mapping provider and an email provider. Each is bound by contract to use the data only to provide that service.
• Nobody else. We do not sell personal data and we do not share it with advertising networks.

Order records are kept for seven years to meet tax and accounting requirements. Support conversations are kept for two years. Device location during an active order is deleted 24 hours after delivery. Closing your account removes your profile and marketing preferences immediately; the financial record of past orders is retained in pseudonymised form.

You can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to processing. Marketing emails have an unsubscribe link in every message and we never make transactional order updates conditional on marketing consent. Write to privacy@selliocompany.org and we respond within 30 days.

The platform is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, tell us and we will delete it.

Data is encrypted in transit and at rest. Access to production data is limited to staff who need it, logged, and reviewed quarterly. If a breach affects your data we will tell you and the relevant regulator within 72 hours of confirming it.

Sellio Company, 215 W Ohio Street, Suite 400, Chicago, IL 60654. Data protection enquiries: privacy@selliocompany.org.