This page explains what personal data the wdpw platform holds about you, how to ask for it to be deleted, and what happens after you ask. It is written for the person most likely to need it: a guest who ordered from a restaurant through WhatsApp, or by scanning a QR code at a table. You do not need an account, a password, or a login to make a request — most guests never had one. A phone number is enough.
If you are a restaurant that uses wdpw to run your business, your own account data is covered in section 9.
1. If you just want the messages to stop
Many people who land on this page do not want their order history erased — they want the promotional messages to stop. That is a smaller and faster request, and it does not touch anything else:
- Tell the restaurant. Any wdpw restaurant can switch marketing off for your number from its own dashboard in seconds. It applies to every campaign after that, on every channel.
- Or email us at [email protected] with the phone number and the restaurant, and we will apply the opt-out on the restaurant’s behalf.
- Or block the number in WhatsApp. This is immediate, entirely in your hands, and needs no request. It stops everything from that number though — including order confirmations and “your order is ready” updates.
- If the message was a marketing email, the unsubscribe link at the bottom of it is one click and takes effect immediately.
Please do not rely on replying “STOP”. Our ordering bot does not currently treat STOP as an opt-out instruction — it will try to read it as part of an order. Use one of the routes above instead.
Opting out of marketing leaves your order history in place. If you want the data removed as well, the rest of this page covers that.
2. What the platform holds about you
What exists depends on how you ordered. Nothing below is collected for advertising, and none of it is sold or shared with data brokers.
2.1 If you messaged the WhatsApp ordering bot
- Your WhatsApp phone number (the
wa_idMeta sends with every message) and the profile name shown on your WhatsApp account, which the bot uses as your guest name. - What you send the bot — the text of your messages, taps on its buttons, a location if you share one, and voice notes.
- Voice notes are downloaded from WhatsApp and passed to a speech-to-text service to be turned into text; we do not keep the audio file afterwards. The resulting text is handled like a typed message. Message text is also sent to a language-model provider so the bot can work out what you are ordering.
- Your in-progress conversation — the cart you are building, the branch, pickup or delivery, and the address you typed — sits in a temporary cache that expires automatically 30 minutes after your last message. It is not a permanent transcript.
- Anything that ends up on an order you actually place is kept with that order (see 2.2).
WhatsApp is Meta’s service, and Meta keeps its own copy of the conversation, on your phone and on its systems, under its own privacy policy. We cannot delete that for you. Deleting the chat in WhatsApp is under your control, and any request to Meta about its own records has to go to Meta.
2.2 Your orders
- Items, quantities, options, prices, taxes and totals
- The guest name and phone number given at checkout
- Delivery address for delivery orders — street, building and area, any extra notes such as a floor or landmark, and the coordinates used to locate it
- The pickup code for collection orders
- Order notes and special requests, including timing requests
- Which branch, when it was placed, how it arrived (WhatsApp, QR scan, counter, delivery app), and the payment method and status
2.3 Notification messages we sent you
One record per message, kept so a failed or duplicated send stays traceable. Each holds the recipient phone number, which message it was (order confirmed, ready, out for delivery, delivered, or a feedback request), the template and language used, the values filled into it such as your name, the branch and the order reference, whether it was delivered, WhatsApp’s own message id, and the timestamps.
2.4 Marketing consent and opt-outs
- Whether you have opted out of marketing on that restaurant’s customer record
- If you unsubscribed from a marketing email, your email address on that restaurant’s suppression list, with the reason and date
- A record of each campaign message: a snapshot of the number or address it went to at the time of sending, the exact text you received, the delivery status, and the timestamp
2.5 If a restaurant keeps you as a customer
- Name, phone number, and email or birthday if you gave them
- Loyalty points, tier, and the ledger of how they were earned and spent
- Total spend, number of orders, and last visit
- A saved delivery address for faster reordering
- Notes staff added to your profile
- Reservations, and feedback ratings or comments you left
3. Who your request goes to
The restaurant you ordered from decides what happens to guest data — it is the data controller. wdpw runs the software and processes that data on the restaurant’s instructions. In practice this means you can go either way: email us and we will act on the request and involve the restaurant, or ask the restaurant directly. You do not have to work out which is correct before you write — send it to us and we will route it.
4. How to request deletion
Email [email protected] with “Data deletion request” in the subject line. There is no form to fill in, no account to create, and no charge. Please include:
- The phone number you used to order, in international format (for example +20 1X XXX XXXX). This is the key that ties the records together — without it we cannot find anything.
- The restaurant and branch, if you want a specific restaurant’s records dealt with rather than all of them
- Roughly when you last ordered
- Whether you want everything deleted, or only to stop marketing messages
Send the request from the email address you gave at checkout if you gave one. If you did not, that is fine — it just means we will verify you through the phone number instead, as described next. Sending us a WhatsApp message from the number itself is the fastest way to prove it is yours.
5. How we check it is really you
We verify every request before acting on it, and this protects you rather than us. If we deleted records for any phone number that arrived in an email, anyone could erase a stranger’s order history and saved address — and worse, our reply would tell them whether that number had ever ordered from a particular restaurant. An unverified deletion is itself a data leak.
So we will ask you to show control of the number, usually by:
- Replying to a message we send to that number on WhatsApp, or messaging the business number from it; or
- Confirming details only the person who placed the order would know — the restaurant and branch, the rough date, or what was on the last order.
We will not ask you for a national ID number, a photo of an identity document, or a password. Until control of the number is verified, we will not confirm or deny that it appears in any restaurant’s records.
6. How long it takes
We will acknowledge your request and complete it within 30 days of receiving a verified request. If a request is unusually complex — several restaurants, or records held by a restaurant we have to contact — we will tell you inside that same 30 days, with what is outstanding and why. There is no charge for a deletion request.
7. What is deleted, and what is kept
We would rather be exact here than reassuring. Some of this is unfinished, and it is better that you know before you decide what to ask for.
7.1 What is removed
- Your customer profile is removed from the restaurant’s live records. It stops appearing in staff search, in the customer list, and in every future marketing audience.
- Your saved delivery address, staff notes, email and birthday stop being used and are removed from the profile.
- You are excluded from every campaign sent after that, on every channel.
- Any in-progress conversation with the ordering bot expires on its own within 30 minutes.
7.2 What is kept, and why
Completed orders are kept: line items, totals, taxes, payment and receipt data. A restaurant is legally required to keep its sales and tax records — under the Egyptian Tax Authority’s e-receipt rules, and equivalent accounting obligations elsewhere — and deleting a settled sale would break its books. This is a normal limit on the right to erasure, not a wdpw policy choice.
7.3 What we do not yet erase
Today, deleting a customer is an archive: the record leaves the restaurant’s live CRM and every marketing audience, but the phone number on historical rows is not yet erased or overwritten. That means the number you ordered with can still be present on:
- past orders, and the reservation or feedback records tied to them;
- the delivery records of notification messages we sent you about those orders; and
- the send records of marketing campaigns you received before opting out.
We are building an automated erasure step that strips those identifiers from retained records while leaving the financial figures accounting requires. Until it ships, this page will not tell you your phone number has been erased everywhere, because it has not been. If you want to know exactly what is still held about you before deciding what to ask for, email us and we will tell you.
7.4 What is outside our reach
Two copies of your data are not ours to delete. Meta holds the WhatsApp conversation itself under its own privacy policy, and requests about that go to Meta. Payment processors keep their own transaction records for the periods financial regulation requires. Deleting your data on our side does not reach either of them.
8. Removing your data from one specific restaurant
Each restaurant on wdpw keeps its own separate records. Ordering from two restaurants means two independent sets of data, and opting out of one has no effect on the other — deliberately, so a restaurant can never see or act on another’s guest list.
Name the restaurant and branch in your email and we will limit the request to that restaurant. You can also go to the restaurant directly: every wdpw restaurant can archive a customer record and switch marketing off from its own dashboard, without involving us. If you have asked a restaurant and had no response, tell us and we will act on the request as its processor.
9. If you are a restaurant using wdpw
To delete your wdpw account and its data, email [email protected] from the account owner’s address. Export your data first — Settings has a full account export — because after cancellation your data is kept for 180 days to allow reactivation and is then deleted, unless a legal hold or a tax-retention obligation applies. See the Privacy Policy for the full retention schedule.
For your own guests, you are the data controller. If a guest asks you directly, you can archive their customer record and set their marketing opt-out from your dashboard without contacting us. Section 7 applies to your guests’ data too, so pass it on accurately rather than promising a guest more than the system does.
10. Questions and complaints
Send anything about this page, or about a request already in progress, to [email protected]. The Privacy Policy covers the full picture of what we collect, where it is stored, and who we share it with. If you are unsatisfied with how we handled your request, you have the right to complain to your local data protection authority.