RapidHub — Privacy Policy

Last updated: 27 June 2026

1. Who we are

RapidHub is an order-integration service operated by RapidPay Group ("we", "us"). RapidHub connects online food-ordering platforms (such as Glovo, Uber Eats and Just Eat Takeaway) to the point-of-sale (POS) systems of restaurants that use our service ("Merchants").

2. Our role

For order data, RapidHub acts as a data processor on behalf of the Merchant, who is the data controller. We process personal data only to deliver orders from the platforms to the Merchant's POS and to relay order-status updates back, on the Merchant's instructions.

3. Data we process

• Order data received from delivery platforms: order items, amounts, customer first name, delivery address, and a privacy-protected (proxy) phone number where provided by the platform.
• Merchant account data: business name, email, and login credentials (passwords stored only as salted hashes).
• Platform connection credentials (API keys / OAuth secrets), stored encrypted at rest.

4. Why we process it

Solely to route incoming orders to the correct restaurant's POS, allow the restaurant to accept/reject and update order status, and operate, secure and support the service. We do not sell personal data or use it for advertising.

5. Sharing

Order and status data is exchanged only between the originating delivery platform and the Merchant's POS. We use a reputable cloud hosting provider to run the service. We do not share personal data with any other third parties except as required by law.

6. Security

All traffic is encrypted in transit (TLS/HTTPS). Credentials are encrypted at rest (AES-256-GCM) and account passwords are stored as salted hashes (PBKDF2). Access is restricted per tenant and per restaurant key.

7. Retention

Order data is retained only as long as needed to provide the service and to meet the Merchant's and legal requirements, after which it is deleted or anonymised.

8. Your rights

Where the GDPR or similar laws apply, data subjects have rights of access, rectification, erasure and restriction. As we act as a processor for Merchants, such requests are normally directed to the relevant Merchant; we assist Merchants in fulfilling them.

9. Contact

Questions about this policy or data handling: privacy@rapidpaygroup.com.