Privacy Policy

Ordia is an order-management platform for restaurant groups, operated by CALANTZIS DESIGN (PTY) LTD, trading as SuperUltra (“we”, “us”), a company registered in South Africa. Ordia is not a public service: access is provided only to the staff of restaurant organisations that subscribe to it. This policy explains how we process personal information in terms of the Protection of Personal Information Act, 2013 (POPIA).

We process the following personal information about Ordia users:

• Account details — your name, work email address, role and organisation. These are provided to us by your employer when your account is created; we do not collect personal information from the general public.
• Phone number and WhatsApp consent — if you choose to receive order reminders on WhatsApp, we store your phone number and a record of your consent, including when it was given or withdrawn.
• Message delivery records — for each WhatsApp reminder we send, we keep a delivery log (queued, sent, delivered, read, or failed) for troubleshooting and audit purposes.
• Usage records — actions taken in Ordia (such as placing or approving orders) are recorded against your account as part of the platform’s normal audit trail.

Business data processed in Ordia — orders, stock counts, suppliers, sales data — belongs to and is processed on behalf of your organisation.

Ordia can send transactional order reminders (for example, “orders close today at 15:00”) via the WhatsApp Business Platform. These messages are:

• Opt-in only — we only send them to users who have explicitly enabled WhatsApp reminders in their Ordia profile.
• Strictly transactional — never marketing or promotional content.
• Easy to stop — you can opt out at any time via the toggle in your Ordia profile, or by replying STOP to any reminder. Opt-outs take effect immediately.

Message delivery is handled by Meta Platforms, Inc. as the operator of the WhatsApp Business Platform, subject to Meta’s own terms and privacy policy.

We use personal information only to operate Ordia for your organisation: authenticating you, sending the notifications you have opted into, and maintaining the platform’s audit records. We do not sell personal information, we do not use it for marketing, and we do not share it with third parties except the service providers listed below.

Ordia runs on the following processors, each bound by their own data-protection terms:

• Supabase (database, authentication and file storage — hosted in the London (UK) region)
• Vercel (application hosting)
• Meta / WhatsApp Business Platform (WhatsApp message delivery)
• Resend (transactional email delivery)
• OpenAI (product-catalogue matching; no personal data is sent)

Ordia uses only the cookies required to keep you signed in (authentication session cookies). We use no advertising or third-party tracking cookies.

Personal information is retained for as long as your organisation subscribes to Ordia and your account remains active, plus any period required for audit or legal purposes. Data is stored encrypted at rest and in transit, with access restricted by role-based permissions.

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to processing or withdraw consent (such as WhatsApp reminders) at any time. To exercise these rights, contact us at the address below or speak to your organisation’s Ordia administrator. You also have the right to lodge a complaint with the Information Regulator (South Africa).

CALANTZIS DESIGN (PTY) LTD (trading as SuperUltra)
Email: johan@superultra.co