Privacy

What ordering records, why it is needed, and how long it stays.


Who holds what

Heartbreaker is the software a pop-up runs its ordering on. Each pop-up is its own business, run by whoever operates it. When you order you order from that pop-up, and Heartbreaker holds the details on its behalf so the food can be made and handed to you.

What ordering records

Your name, your email address, a phone number if you give one, any note you add to the order, and whether you asked to hear about future nights. Alongside that: what you ordered, what it came to, the collection time you chose, and whether the order was taken online or at the counter.

Why each of those is needed

The name and the order print on the slip the kitchen works from. The collection time holds your place. The email carries your confirmation and the link to your order. A phone number is only used if something about your order needs saying before you arrive.

Your order link

The link in your confirmation is what proves the order is yours; there is no password on it. Anyone holding that link can view the order and cancel it, so treat it the way you would a ticket. Cancelling releases your place and returns the ingredients to that night's stock. The record of the order stays, marked cancelled.

If you run a pop-up

Signing in records your email address. There is no password: a one-time code goes to that address, and the session it opens is held in a cookie for twelve hours, scoped to that pop-up's own address. Being signed in to one pop-up does not sign you in to another.

Cookies

Three, none of them for advertising and none for analytics. popup_operator holds a signed-in operator's session for twelve hours. popup_operator_pending remembers an email address between asking for a code and entering it, for ten minutes. popup_signup carries a new pop-up through sign-up. That is the whole list.

Where it is held

Orders and pop-up settings are stored on Foir, the platform this software is built on. The site is served by Cloudflare. Confirmation emails are sent through the platform on the pop-up's behalf. Nothing is passed to advertisers and nothing is sold.

Marketing

You hear about future nights only if you ticked the box while ordering. It is off unless you turn it on.

How long it is kept

Orders are kept indefinitely. Nothing in the software removes them on a timer, and cancelling marks an order rather than deleting it — the pop-up still needs to know a place was taken and given back.

Asking about your own details

Ask the pop-up you ordered from. They can find the order by your name or its number, correct what is wrong with it, or have it removed. If you would rather not go through them, or the pop-up has stopped trading, write to matt@tinytiger.studio and it will be dealt with here.

Any of this unclear?

Make your pop-up