Privacy Policy

Information We Collect

We collect information from two groups: the restaurants that subscribe to Pontún, and the diners who order from them.

From restaurants

• Business and account information, such as the restaurant's name, address, contact details, menu, photos, and login credentials for the Pontún portal.
• Banking and processing setup information needed to connect payments so that orders settle to the restaurant.
• Communications with our team, such as support requests and campaign approvals.

From diners

• Order information: name, phone number, email address, items ordered, order total, and order history.
• Delivery information: delivery address and, for delivery orders, the information needed to dispatch and track a driver.
• Payment information entered at checkout. This is handled by our payment processor; we do not store full card numbers.
• Loyalty and marketing information: points balance, coupon use, and email, SMS and push opt-ins.
• Technical information collected automatically, such as device and browser type, IP address, and pages visited. See Cookies and Analytics.

How We Use Your Information

We use the information above to:

• Operate the ordering platform, including taking, routing and fulfilling orders for delivery, pickup, curbside, table QR, catering and scheduled orders.
• Dispatch and track deliveries.
• Run loyalty programs, coupons and promotions on a restaurant's behalf.
• Send email, SMS and push marketing messages that a diner has agreed to receive from a restaurant, and transactional messages such as order and delivery updates.
• Give restaurants reporting on their own orders, sales and customers.
• Maintain, secure and improve the website, ordering platform and apps.
• Comply with legal obligations and protect the rights, property and safety of Pontún, our restaurants, diners and others.

We do not sell personal information to third parties for their own marketing purposes.

How We Share Your Information

We share information only as needed to run the service:

• With the restaurant a diner orders from. Order details, contact information, delivery address and order history are shared with that restaurant so it can fulfill the order, provide support and build its own customer list.
• With Uber Direct, our delivery dispatch partner. For delivery orders, order details and the delivery address are shared with Uber Direct so it can dispatch a driver and let the diner track the delivery. Uber Direct's handling of that information is governed by its own privacy policy.
• With our payment processor. Payment information needed to process the transaction and settle funds to the restaurant. Merchant processing is handled in general terms only; we do not disclose processing rates or the identity of every partner in this policy.
• With service providers who help us operate the platform, such as hosting, email and SMS delivery, and analytics providers, under confidentiality obligations. We use a small number of service providers to run the service: Microsoft for email delivery, Zoho for our customer records, Uber Direct for delivery dispatch, and a payment processor for card payments. A current list is available on request.
• When required by law, in response to a valid legal process, or to protect the rights, property or safety of Pontún, a restaurant, a diner, or others.

Your Restaurant's Customer List

Each restaurant on Pontún owns its own customer list: the diners who have ordered from it, joined its loyalty program, or downloaded its app. Pontún holds manager-level access to that list so we can run campaigns, send communications and provide reporting on the restaurant's behalf. We do not own a restaurant's customer list, and we do not share one restaurant's list with another restaurant or with a third party for that party's own marketing.

If a restaurant stops using Pontun we provide its customer list and order history as a CSV export on written request, normally within 30 days.

Email and SMS Marketing

Restaurants use Pontún to send email, SMS and push messages to diners who have opted in, such as promotions, new menu items, events, loyalty updates and win-back offers.

Consent

Diners agree to receive marketing messages by opting in at checkout, at loyalty signup, or when downloading a restaurant's app. Consent to marketing is separate from placing an order; a diner can complete an order without opting in to marketing.

Message frequency

How often a diner hears from a restaurant depends on that restaurant's own campaign schedule. Message frequency varies by restaurant and by campaign. Message and data rates may apply to SMS messages.

How to opt out

Diners can unsubscribe from email using the link at the bottom of any email, and can opt out of SMS by replying STOP to any text message. You can stop marketing messages at any time: reply STOP to any text message, or use the unsubscribe link in any email. A diner can also ask a restaurant directly to remove them from its marketing list. Opting out of marketing does not opt a diner out of transactional messages, such as order confirmations and delivery updates, which are necessary to complete an order.

Each restaurant is responsible for obtaining proper consent before sending or authorizing marketing messages to its own customer list, and for honoring opt-out requests promptly.

Cookies and Analytics

Pontún, and the restaurants that use it, use cookies and similar technologies on pontun.com, on each restaurant's ordering platform, and in the apps to:

• Keep the ordering platform working, for example remembering items in a diner's cart between pages.
• Keep a diner or restaurant signed in.
• Understand aggregate usage of the site and ordering platform through analytics tools. We do not use third-party analytics on this website.

We do not use these cookies to sell personal information, and we do not knowingly use third-party advertising cookies to retarget diners on other websites. We do not run advertising or retargeting pixels on this website. The home page loads a font from Google Fonts, which means your browser requests that file from Google. A diner can control or block cookies through their browser settings; blocking some cookies may affect parts of the ordering experience, such as keeping items in a cart.

Data Retention

We retain personal information for as long as necessary to provide the service, maintain business and order records, and comply with applicable legal requirements. When information is no longer needed, we take reasonable steps to securely delete or de-identify it. We keep records for as long as the account is active and for a reasonable period afterwards, and longer where the law requires it.

Security

We use reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure or destruction. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Choices

A diner who wants to access, correct or delete personal information can contact the restaurant they ordered from directly, since the restaurant owns its own customer list, or reach us through our Contact page. A restaurant can manage its own account and customer data settings by logging into the Pontún portal. We will respond to reasonable requests in accordance with applicable law. The restaurant owns its customer list, so we pass deletion requests to the restaurant and act on its instruction.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site, ordering platform or apps after changes are posted means you accept the updated policy.

Contact

Questions or concerns about this Privacy Policy can be directed through our Contact page, or by email at general@vanirbm.com.

Vanir Business Management, LLC, doing business as Pontun, headquartered in Pasadena, California. Write to general@vanirbm.com.