Privacy Policy Last updated: 14 November 2026

This policy explains how TADA! handles personal information about merchants, website visitors and people using order-tracking pages. Privacy enquiries: support@tada.bh.

1. Our role

We determine how information is used to manage TADA! accounts, provide support, administer subscriptions and protect the service. Where a merchant determines the purposes of processing personal information for its orders, that merchant is responsible for those purposes and we process the information on its instructions to provide TADA!. Paddle separately handles purchase and billing information under its own privacy notice.

2. Information we handle

• Merchant accounts: names, email addresses, authentication information, shop details and any additional contact information you choose to provide.

• Shop content: logos, branch/location details, website and menu links, social links and Google Maps/review links. Information intended for the customer page is visible to people who access that page.

• Order records: order identifiers, status, creation/ready/collection times and customer acknowledgment, together with relevant service activity such as review-link clicks where recorded.

• Merchant phone number: required for every merchant account, used to contact you about payment verification, activation and support. It is not shown to customers and is not described as verified.

• Payment records: payment confirmations you upload, transaction references and notes you enter, the bank reference and amount we verify, review decisions and their history, and the resulting access period. Bank transfers are made directly between banks; TADA! does not receive your card or online-banking credentials.

• Historical billing records: if you used our earlier test checkout, Paddle subscription identifiers and status records from that period are kept as history.

• Technical information: information generated when the service is accessed, which may include IP address, device/browser details, timestamps and diagnostic or security logs.

• Support correspondence: the information you choose to send when you contact us.

Customers do not need to provide a name, phone number or account to track an order. However, order identifiers, links and technical information may still constitute personal information. Please do not place unnecessary sensitive information in order fields or support messages.

3. Why we use information

We use information to operate accounts and shop pages; display and update orders; administer subscriptions; provide operational statistics; troubleshoot problems; prevent misuse; answer enquiries; send necessary account/service communications; and meet legal obligations.

Where applicable, the legal grounds include performing our contract with you, complying with legal duties, legitimate operational and security interests where permitted, and consent where required. We do not sell personal information. We obtain consent for optional uses where the law requires it, and consent may be withdrawn for future processing.

4. Browser storage and optional measurement

The service uses essential browser storage as needed for authentication, security and preferences such as language. Disabling this storage may affect functionality.

If we introduce optional measurement or marketing technologies, we will explain them and obtain consent before using them where required. Any consent controls offered must allow you to decline optional tracking and later change your choice. Operational order statistics are distinct from optional marketing-site tracking.

5. Sharing and service providers

Information is made available to authorized people at the relevant shop and to providers as necessary for their roles. Payment confirmations, phone numbers and review records are kept in private storage and are accessible only to the submitting shop’s account and to TADA! platform administrators. Our service uses Supabase for database, authentication and storage functions, and Lovable and the hosting infrastructure supporting our published application. Paddle does not process bank-transfer payments; it holds only records from earlier test checkouts. Providers supporting account/service email delivery may also process information needed for delivery.

We may disclose information where legally required, to protect lawful rights or investigate fraud, or in connection with a business transfer subject to applicable safeguards and notification requirements.

Opening a shop’s website, social profile, Google Maps or Google review link takes you to a separate service governed by its own privacy terms. Leaving a review is optional.

6. International processing

Our providers may process information in countries outside your country of residence. International transfers are subject to applicable data-protection requirements, including any necessary safeguards, permissions or contractual arrangements. Contact support@tada.bh for information about the arrangements relevant to your data.

7. Security and retention

We use reasonable technical and organizational measures to protect information, including encrypted web connections and access restrictions. No system can guarantee absolute security.

We retain information for as long as reasonably necessary for the purposes described here. Payment confirmations, review decisions and audit records are kept as part of payment history and are not deleted as routine cleanup, because they are needed for accounting, refunds and disputes. We have not set a fixed deletion schedule; relevant criteria include whether your account remains active and applicable legal-retention obligations. Ending a subscription does not itself delete the account.

You may request account closure or deletion. Information that is no longer needed is deleted or de-identified, subject to lawful retention requirements. Residual backup copies may remain until the applicable backup-retention cycle ends and are not used for ordinary business purposes.

8. Your choices and rights

Depending on the law that applies, you may request access to or a copy of your personal information, correction, deletion, restriction, portability or objection to certain processing. You may withdraw consent where processing depends on it and raise a complaint with the relevant data-protection authority.

Send requests to support@tada.bh. We may request proportionate information to verify your identity. If a request concerns information controlled by a merchant, contact that shop; we can assist the merchant in handling requests where appropriate. We respond within the deadlines required by applicable law.

9. Updates and contact

We will publish updates with a revised date and give appropriate notice of material changes. For questions, contact support@tada.bh or visit /contact.

Related pages: Terms of Service /terms · Refund Policy /refund-policy · Contact /contact