20/July/2026

This Privacy Policy explains how FlyOrder ("FlyOrder", "we", "us" or "our") collects, uses, stores, shares and protects personal data when individuals use the FlyOrder website, application, QR ordering experience, hotel room-service ordering features, merchant interfaces and related services (collectively, the "Services").
 
1. Who We Are

FlyOrder is a digital ordering technology platform operating in the Sultanate of Oman. For the purposes of this Policy, the entity responsible for the relevant processing is: FLY ORDER LLC, Commercial Registration No. [CR NUMBER], Sultanate of Oman.

Privacy contact: support@flyorder.io | Customer support: +968 91129282 | Website: flyorder.io.

2. Personal Data We May Collect

• Identity and contact data: name, mobile number, email address and account information, where supplied.
 
Order and service data: restaurant or hotel selected, menu items, quantities, preferences, table number, hotel room number, delivery/service location, order notes, transaction status and order history.
 
• Technical data: IP address, device/browser information, operating system, app identifiers, timestamps, security logs, cookies and similar technologies where used.
 
• Support and communication data: messages, complaints, feedback and other communications with FlyOrder or a participating merchant.
 
Payment-related data: payment amount, payment status and transaction/reference identifiers received from an authorized payment provider. FlyOrder does not intend to store full payment-card numbers, CVV codes or online-banking credentials unless expressly disclosed and lawfully implemented.
 
3. How We Collect Personal Data

Directly from you when you scan a QR code, place an order, create an account, contact support, submit a complaint, or otherwise use the Services.

From participating restaurants, cafés, hotels and other merchants where necessary to manage your order or resolve a service issue.

From integrated service providers such as payment, hosting, analytics, security and communications providers, where permitted.

4. Why We Use Personal Data

To receive, transmit, manage and fulfil orders and service requests.

To identify the correct table, hotel room or service location.

To provide account, customer-support and complaint handling services.

To send order confirmations, status updates and service messages.

To process or verify payment status through authorized payment providers.

To maintain the security, integrity and availability of the Services and prevent misuse or fraud.

To improve functionality, performance and user experience, including through aggregated or appropriately anonymized analytics.

To comply with applicable legal, regulatory, accounting and record-keeping obligations.

Where consent is required by applicable law, FlyOrder will seek the relevant consent before carrying out the applicable processing.

5. Sharing of Personal Data

We may share only the data reasonably required for the relevant purpose with: the restaurant, café or hotel receiving the order; authorized payment-service providers; hosting, cloud, security, messaging and support providers; professional advisers where necessary; and competent governmental, regulatory or judicial authorities where disclosure is legally required.

FlyOrder does not sell personal data to third parties.

6. Restaurants and Hotels

When you submit an order, the participating merchant receives the information needed to prepare, deliver or otherwise fulfil that order. A merchant may have its own legal obligations and privacy practices. Where the merchant independently determines how it uses personal data beyond the FlyOrder service, that merchant is responsible for its own processing under applicable law.

7. Payments

Where online payment is offered, payment processing may be provided by an authorized third-party payment gateway or payment-service provider. Such provider may process payment information under its own terms and privacy notice.

Unless FlyOrder expressly states otherwise, FlyOrder receives only limited transaction information needed to confirm and manage an order and does not store full payment-card credentials.

8. Cookies and Similar Technologies

FlyOrder may use cookies, local storage or similar technologies for session management, preferences, security, analytics and functionality. Where consent is legally required for a particular technology, FlyOrder will provide an appropriate choice mechanism.

9. Data Retention

FlyOrder retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, accounting, security, complaint or dispute-resolution requirements. When data is no longer required, it may be securely deleted, anonymized or archived where permitted by law.

10. Data Security

FlyOrder applies reasonable technical and organizational safeguards appropriate to the nature of the data and risks involved. Measures may include access controls, authentication, secure transmission, logging, backups, vulnerability management and supplier controls. No electronic system can guarantee absolute security.

11. International Data Transfers

Where a service provider processes or stores personal data outside the Sultanate of Oman, FlyOrder will apply the requirements and safeguards prescribed by applicable Omani data-protection law and its executive regulations before or in connection with the transfer.

12. Your Data-Protection Rights

Subject to applicable law and any lawful limitations, you may request information about the processing of your personal data, access to your data, correction of inaccurate data, deletion where applicable, withdrawal of consent where processing relies on consent, and the exercise of any other rights granted by applicable Omani law.

Requests should be sent to support@flyorder.io. We may need to verify your identity before completing a request.

13. Children and Minors

FlyOrder is not designed to knowingly collect personal data from children in a manner contrary to applicable law. Where parental or guardian consent or authorization is legally required, the relevant mechanism should be used before processing.

14. Marketing Communications

FlyOrder will send direct marketing communications only where permitted by applicable law. Where required, users will be given an appropriate way to consent, unsubscribe or withdraw consent.

15. Privacy Complaints and Data Incidents

If you have a privacy complaint or believe your personal data has been misused, contact support@flyorder.io. FlyOrder will handle privacy incidents and notifications in accordance with applicable legal requirements.

16. Changes to this Privacy Policy

We may update this Policy to reflect changes in law, technology or the Services. The latest version and effective date will be published through the FlyOrder website or application. Material changes will be communicated where required by law.

17. Governing Framework
 
This Policy is intended to operate in accordance with the laws of the Sultanate of Oman, including the Personal Data Protection Law issued by Royal Decree 6/2022 and its Executive Regulation issued by Ministerial Decision 34/2024, as amended or replaced from time to time.