Noura RestaurantSan Jose
Call us

Privacy Policy

Effective Date: September 10, 2026

This Privacy Policy explains how Noura Restaurant ("we," "our," or "us") collects, uses, shares and protects information in connection with our Point of Sale ("POS") system and the third-party ordering integrations it operates, including DoorDash and Uber Eats.

It applies in every region in which our integrations operate and is the single authoritative privacy notice referenced by our integration partners.

1. Information We Collect

1.1 Information received from ordering platforms

When a customer places an order on DoorDash or Uber Eats, the platform sends us the information needed to prepare and hand over that order. Typically:

  • the customer's first name and last initial as the platform provides it;
  • a contact number or email, which these platforms commonly supply as a masked or relayed address rather than the customer's real one;
  • a delivery reference or pickup short code;
  • the items ordered, quantities, modifiers and any preparation instructions;
  • order totals, tax and gratuity as calculated by the platform;
  • the platform's own order identifier and fulfilment type.

We receive this data from the platform. We do not collect it from the customer directly, and we do not receive customers' payment card details — the platform collects payment.

1.2 Information collected directly

For orders placed in person, by phone or through our own site, we collect the name, contact details and delivery address provided to us, together with order contents and payment method.

1.3 Operational data

We record how the POS is used — transaction records, timestamps, the staff account performing an action, printer and device status — for operations, accounting and troubleshooting.

2. How We Use Information

We use information to:

  • prepare, fulfil and hand over orders;
  • confirm, update, adjust or cancel an order with the originating platform;
  • produce receipts, kitchen tickets and sales, tax and reconciliation records;
  • respond to customer service enquiries and resolve order disputes;
  • maintain the security and reliability of our systems;
  • meet legal, accounting and tax obligations.

2.1 Purpose limitation for platform orders

Information received from DoorDash or Uber Eats is used only to fulfil and support the order it relates to, and for the records we are required to keep. We do not use it to market to that customer independently of the platform, do not add platform customers to our own marketing lists, do not sell or share it for cross-context behavioural advertising, and do not combine it with other data for profiling.

3. How We Share Information

We share information with:

  • the originating ordering platform — order confirmations, preparation times, status changes and cancellations, as required to complete the order;
  • service providers who operate our systems on our behalf (hosting, database, messaging and printing infrastructure), bound to use it only to provide those services;
  • authorities, where disclosure is required by law or in response to a valid legal request.

We do not sell personal information.

4. Retention

Order records are retained for as long as needed to fulfil the order, resolve disputes, and satisfy accounting, tax and audit obligations, after which they are deleted or anonymised. Operational logs are retained on a shorter cycle appropriate to troubleshooting and security review.

5. Security

We apply industry-standard measures to protect information, including encryption of data in transit, authenticated and secret-verified integration endpoints, restricted database access, role-based permissions in the POS, and retention of an auditable record of data received from ordering platforms.

6. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to request its deletion, to obtain a copy, and not to be discriminated against for exercising these rights. California residents have these rights under the California Consumer Privacy Act as amended by the CPRA; we do not sell or share personal information as those terms are defined there.

To exercise a right, contact support@nourarestaurant.com. We will verify your request before acting on it and will respond within the period required by applicable law.

If your order was placed on DoorDash or Uber Eats, that platform is also a controller of your information and holds records we never receive. Requests concerning your platform account, payment details or full contact information should be directed to the platform.

7. Children

Our services are not directed to children, and we do not knowingly collect personal information from them.

8. Changes to This Policy

We may update this Policy. The current version is always published at this URL. Material changes will be reflected in the effective date above and, where they affect merchants using our integrations, communicated before they take effect.

9. Contact Us