Privacy Policy
DRAFT: must be reviewed by an Egyptian lawyer before publication. Remove this note only after that review.
Who we are
Ridercrew (رايدر كرو) is a system that restaurants and cloud kitchens use to send orders to their own delivery riders, follow each delivery and keep track of the cash each rider collects. Ridercrew is operated by [Saif Gomaa / Ridercrew One Person Company, commercial register no. ●], [address ●], Egypt ("Ridercrew", "we", "us"). Contact: saifgomaa48@gmail.com, WhatsApp +20 110 780 7956.
This policy follows the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations.
Two roles: when we decide, and when the restaurant decides
- We are the controller for data about visitors to our website, people who contact us or book a demo, and the restaurant owners and managers who hold a Ridercrew account and pay for it.
- The restaurant is the controller for data about its own customers and riders that it enters into Ridercrew (orders, addresses, phone numbers, rider records, rider location and cash records). We process that data only on the restaurant's instructions, as its processor. If you ordered food from a restaurant or ride for one, the restaurant's own privacy notice applies, and you should contact the restaurant first; we will help it answer you.
What we collect
Website visitors and leads
- What you send us: name, restaurant name, phone or WhatsApp number, email, area, number of riders, and your message.
- Technical data: IP address, browser and device type, pages visited and time of visit, collected through server logs and, if used, privacy-respecting analytics. [List the analytics tool here once chosen.]
Restaurant account holders
- Name, role, phone, email and log-in details of owners, managers and staff; the restaurant's legal name, tax and commercial register numbers, address, branches; invoices and payment records (amount, date, transfer reference). We do not store card numbers.
- Support messages and usage records needed to keep the service secure and fix problems.
Data we process for restaurants
- The restaurant's customers: name, phone, address, landmark, the location pin they share, order details and amount, payment method and order history.
- The restaurant's riders: name, phone, zone, PIN (stored hashed), the time and location of each order action, location during an active shift if the restaurant enables it, cash collected, expenses and shift handover amounts.
- We do not ask for national ID scans, bank or wallet details of riders, or health data.
Rider app and location
- The rider app asks your phone for permission to use your location. You can refuse or turn it off in your phone settings at any time; the app will still work, but your actions will be saved without a location.
- When allowed, location is saved only when you tap picked up, delivered or returned, and, if your restaurant turns on shift tracking, while you are logged in to an active shift. The web app does not follow you when you are off shift or have closed it.
- Your location is shown only to your restaurant's owner and dispatcher, and to you. Ridercrew does not sell it or share it with other restaurants, delivery apps or advertisers.
- Raw location points are deleted after 90 days. The delivered time and distance of each order are kept for the restaurant's reports.
- When you tap the map button, Google Maps opens on your phone and Google's own privacy policy applies to that use.
Why we use data, and on what basis
- To provide the service the restaurant subscribed to, support it and keep it secure (performance of our contract with the restaurant).
- To reply to your enquiry, arrange a demo or trial, and send invoices (your request, and our contract).
- To meet tax, accounting and legal duties (legal obligation).
- To send occasional news about Ridercrew to account holders and leads, only with consent, and with an easy way to stop.
- To improve the service using aggregated statistics that do not identify any person or restaurant.
We do not sell personal data, and we do not use restaurants' customer lists to market to those customers.
Who we share data with
- Service providers that host and run Ridercrew: Supabase, Inc. (database, on Amazon Web Services servers in Frankfurt, Germany), Cloudflare, Inc. (hosting and network security, global), and Google LLC (business email and files; maps when used). Each is bound by written data-protection terms.
- The restaurant that the data belongs to, and services the restaurant connects itself (for example its Shopify store).
- Authorities, when the law requires it.
- A company that takes over Ridercrew's business (for example a Ridercrew company once incorporated), under the same commitments.
Data stored outside Egypt
Ridercrew's database is in Frankfurt, Germany, and some providers are based in the USA. This is a transfer of personal data outside Egypt. We apply for, and follow, the licence required by the Personal Data Protection Center for such transfers, and we only use providers that protect data to a standard not lower than Egyptian law. [Licence status: ●.]
How long we keep data
- Enquiries and demo requests that do not become customers: 12 months after the last contact.
- Restaurant account data: for the subscription, then deleted from the live system within 30 days after the 30-day export period and from backups within a further 60 days, except invoices and payment records kept as long as tax law requires (currently up to 5 years [confirm with accountant]).
- Raw rider location points: 90 days. Server logs: up to 30 days.
Your rights
Under the Personal Data Protection Law you can ask to know what personal data we hold about you and get a copy, correct or complete it, have it deleted or its processing limited, object to processing, and withdraw your consent at any time where we rely on consent. You will also be told about a breach that affects your data, as the law requires. To use these rights, write to saifgomaa48@gmail.com. We reply within the period set by the law. For data a restaurant holds about you, we will pass your request to that restaurant. You may also complain to the Personal Data Protection Center.
Security
Each restaurant's data is kept separate at database level, data is encrypted in transit and at rest, administrator accounts use two-factor authentication, and access is limited to the people who need it. No system is perfectly secure; if a breach affects your data, we will act and notify as the law requires.
Cookies
The website and apps use only the cookies and local storage needed to keep you logged in, remember your language and keep the service secure. We do not use advertising cookies. If we add analytics or advertising tools, we will update this section and ask for consent where the law requires.
Children
Ridercrew is a business tool and is not meant for anyone under 18. We do not knowingly collect children's data.
Changes to this policy
We will post any change on this page with a new date, and tell account holders by email or WhatsApp at least 15 days before a material change takes effect. The Arabic version prevails if the two versions differ.
Contact
Privacy questions and requests: saifgomaa48@gmail.com, WhatsApp +20 110 780 7956 (https://wa.me/201107807956). Data protection contact: Saif Gomaa.