Acceptable Use Policy

This policy is part of the Terms of Service. It applies to every business that uses DataRestro and to everyone it lets use its account, including owners, managers and staff. The business is responsible for making sure they follow it.

You must not use the Service to:

• break any law that applies to you, your restaurant or your guests;
• issue false or misleading invoices, suppress or alter sales records, evade tax, or misrepresent DataRestro as IRD-certified billing software;
• publish content on a restaurant website, menu or receipt that is misleading, defamatory, obscene, hateful, or that infringes someone else’s intellectual property or privacy;
• process payments for goods or services you do not actually provide.

• Collect and use guest and staff personal data only with a lawful basis and the notices the law requires (see the Data Processing Addendum).
• Do not send guests marketing messages they have not agreed to receive.
• Do not use the Service to harass, stalk or discriminate against anyone, or to monitor staff in ways the law does not allow.

Data the Service is not designed for

Do not enter the following into order notes, customer notes, staff records or any other field, unless we have agreed it with you in writing: national identity, passport or citizenship numbers; full payment card numbers or bank, wallet or other financial credentials; passwords for other services (other than the payment and IRD credentials the Service asks for in its integration settings); health or medical information beyond a guest’s stated allergy or dietary need for their order; or other especially sensitive information about a person.

You must not, and must not help anyone else to:

• access, or try to access, another business’s data or any part of the Service you are not authorised to use;
• share logins or PINs, or let anyone use the Service other than your authorised users;
• probe, scan or test the security of the Service without our written permission, or circumvent any access control, rate limit or other protection;
• upload malicious code, overload the Service, or use automated means to extract data beyond what the Service and its documented interfaces allow;
• copy, modify, reverse engineer or decompile the Service, or use it to build a competing product, except where the law expressly permits it;
• resell, sublicense or white-label the Service unless we have agreed it in writing.

If you find a security weakness, report it to support@datadoodlestech.com with enough detail for us to reproduce it, and give us reasonable time to fix it before telling anyone else. Do not access, change or keep data that is not yours while investigating. We will not pursue good-faith research that follows these rules.

Depending on how serious the breach is, we may ask you to stop, remove the content concerned from public pages, limit a feature, or put the business on hold under the Terms of Service. Where we can, we tell you first and give you a chance to put things right; we act straight away where the law requires it or guests, other businesses or the Service are at risk.

To report misuse of DataRestro, such as a misleading restaurant website, write to support@datadoodlestech.com.