Privacy Policy
Effective: 18 September 2026 · العربية
Who we are
Merco is operated by MERCO AI LTD, a company registered in the United Kingdom (company number 17458981). Contact: admin@getmerco.com. This notice covers getmerco.com, our restaurant dashboard, and WhatsApp ordering services, including pilot use.
Our role and the restaurant’s role
The restaurant you order from decides how your order is fulfilled and is responsible for its use of customer information. Merco processes ordering information on the restaurant’s instructions to provide the service. Merco is responsible for information used for its own merchant accounts, support, website operation and service security. The restaurant’s own privacy notice also applies.
Information we handle
When you use ordering features, we receive your WhatsApp phone number and identifiers, any name or profile information provided to us, messages and replies, cart contents, items, quantities, modifiers, order notes and order status. For delivery, we receive addresses and any location pin you choose to send. Saved customer names and addresses help with repeat orders. We also handle restaurant and staff account details, menus, support correspondence, and technical information such as request times, IP addresses and diagnostic records. We receive these details from you, restaurant staff, WhatsApp and our service infrastructure. Only share information needed for your order; do not send passwords, verification codes or payment-card details.
Why we use it
We use information to build and route orders, calculate displayed totals, support delivery or pickup, send order updates, remember saved details, run merchant accounts, answer support requests, and investigate errors or misuse. Providing a phone number and order details is necessary for WhatsApp ordering; a delivery address is necessary for delivery. You may choose pickup where offered and need not share a location pin if an address can be entered.
Legal grounds
For information Merco controls, we rely on performing our contract with merchants where applicable, our legitimate interests in operating and protecting the service and responding to enquiries, and compliance with legal obligations where required. Where consent is required for an optional use, we will ask for it separately and you may withdraw it. Restaurants determine the legal grounds for processing their customers’ order information.
Who receives information
The relevant restaurant and its authorised staff receive information needed to handle your order. WhatsApp/Meta delivers messages; Google Cloud hosts the application and database; Google Maps processes location information when reverse-geocoding a delivery pin; and Cloudflare hosts and protects our website. Support communications also pass through our email service provider. These providers may process information under their own terms as well as providing services to us. We may disclose information when legally required or necessary to protect the service and people using it.
Storage and international processing
Our application and database are hosted in Google Cloud’s europe-west1 region. Restaurants and service providers may access or process information in other countries, including the country where your order is fulfilled. Contact us for details about the providers and transfer arrangements relevant to your information. Where applicable law requires safeguards for an international transfer, those safeguards must be in place before that transfer.
How long information is kept
Order and conversation records are kept for service delivery, restaurant support, resolving disputes and any applicable legal record-keeping needs. Saved customer details are kept to support repeat orders until removed or no longer needed. Merchant account information is kept while the account is active and as needed afterward for outstanding obligations. Support and diagnostic records are kept for the time needed to resolve issues and protect the service. Retention depends on the record, purpose and restaurant’s obligations; there is no single automatic deletion period covering all customer data. You can request deletion at any time using the instructions below.
Your choices and rights
Depending on applicable law, you can request access, correction, deletion, restriction or a portable copy of your information, and object to certain uses. Contact us or the restaurant. We may need proportionate identity checks and will coordinate requests for restaurant-controlled data with that restaurant. You may complain to your local data protection authority; for UK matters, see the Information Commissioner’s Office. See our data deletion instructions for the request process.
Website and updates
The public landing and policy pages do not contain advertising trackers or analytics scripts. Hosting and security services may process technical information or use necessary security cookies. The restaurant dashboard may use storage needed for sign-in and operation. We will update this notice when our practices change and show the updated date here.
Contact
For questions about this website or your privacy, contact admin@getmerco.com.