Privacy policy

Last updated 30 October 2026

Draft. This page is being finalised and may change before payments go live.

This policy explains what information SitBites collects when you order food, create an account or get in touch with us, what we use it for, and the choices you have.

What we collect

Account details: your name, phone number and, if you add one, your email address. Your password is stored in a scrambled (hashed) form that we can’t read.
Orders: what you ordered, from which stand and venue, the event, pickup or seat details, any note you add, and when the order was placed and ready.
Payments: the amount, status and the payment provider’s reference. We don’t receive your card number or mobile money PIN.
Partner requests: if you contact us about bringing SitBites to a venue or stand, the name, business, phone, email, city and message you send.
Technical information: your IP address and basic request logs, used to keep the service running and to block abuse such as spam form submissions.

What’s stored on your device

The web app saves your cart, your chosen venue and stand, your sign-in session and, if you order as a guest, the orders placed from that device, so they’re still there when you come back. We don’t use advertising or third-party tracking cookies, and we don’t run third-party analytics.

How we use it

To send your order to the stand and show you its status.
To send order updates and, when you ask, sign-in or password reset codes by SMS.
To help when something goes wrong with an order or a payment.
To prevent fraud and misuse.
To reply to partner requests.
To understand, in total, how SitBites is used at each venue so we can improve it.

Who we share it with

The stand you order from sees your order, the pickup or seat details and, if you’re signed in, your name and email address.
Venue operators see sales totals for their venue, not personal details.
Service providers who help us run SitBites: payment providers, our SMS provider and our hosting provider. They only get what they need to do that job.
Authorities, when the law requires it.

We don’t sell your personal information.

How long we keep it

We keep your account details while your account is open. Order and payment records are kept for as long as we need them for accounting and legal reasons. Partner requests are kept while we’re in touch and deleted when they’re no longer needed.

Your choices

You can order as a guest without creating an account.
You can ask us for a copy of the information we hold about you, or to correct it.
You can ask us to delete your account. We’ll remove your personal details, but may keep order and payment records where the law requires.

Security

SitBites is served over encrypted connections (HTTPS), passwords are hashed, and access to personal information is limited to the people and stands who need it.

Children

If you’re under 18, ask a parent or guardian before creating an account.

Changes

We may update this policy. If the changes are significant, we’ll tell you in the app or on this site.

Contact

Questions about your information? Send us a message using the form on our homepage (choose “Something else”) and we’ll get back to you.