Terms of Service

Last updated: June 2026

These Terms of Service govern your use of the Mordu platform (“the Platform”), operated by Mordu, Wexford, Ireland. By using the Platform — whether as a restaurant owner or as a customer placing an order — you agree to these terms.

1. What the Platform does

Mordu provides independent restaurants with a branded online ordering website. The Platform enables customers to browse menus and place orders directly with restaurants, without third-party commission fees.

Mordu is a technology platform only. We are not a food delivery company, restaurant operator, or party to any contract between a restaurant and its customers.

2. Restaurant obligations

Restaurants using the Platform agree to:

  • Provide accurate menu information including prices and allergen details
  • Comply with all applicable Irish and EU food safety and labelling regulations, including EU Regulation 1169/2011 on food information
  • Fulfil all orders accepted through the Platform
  • Handle customer personal data in accordance with GDPR
  • Only send SMS marketing messages to customers who have explicitly opted in
  • Pay the monthly subscription fee on time

3. Payments

Payments from customers are processed by Stripe and routed directly to the restaurant's connected Stripe account. Mordu charges a small platform fee per transaction in addition to the monthly subscription.

Mordu is not responsible for payment disputes between restaurants and their customers. Refund and cancellation policies are set by each individual restaurant.

4. Customer data ownership

Customer data collected through a restaurant's ordering page belongs to that restaurant. Mordu stores and processes this data on behalf of the restaurant as a data processor. Restaurants are the data controller for their own customer data and are responsible for handling it in accordance with GDPR.

5. Platform availability

We aim to keep the Platform available at all times but do not guarantee uninterrupted service. We are not liable for losses arising from downtime, technical faults, or interruption of service.

6. Limitation of liability

To the maximum extent permitted by Irish law, Mordu is not liable for any indirect, incidental, or consequential loss arising from use of the Platform, including but not limited to loss of revenue, loss of customers, or loss of data.

Our total liability to any restaurant shall not exceed the fees paid by that restaurant in the three months preceding the claim.

7. Termination

Either party may terminate the restaurant's use of the Platform with 30 days' written notice. We reserve the right to suspend or terminate access immediately if a restaurant breaches these terms.

8. Governing law

These terms are governed by the laws of Ireland. Any disputes shall be subject to the exclusive jurisdiction of the Irish courts.

9. Data Processing Agreement (GDPR Article 28)

This section constitutes a Data Processing Agreement (“DPA”) between the restaurant (data controller) and Mordu (data processor), as required by GDPR Article 28.

Subject matter and purpose

Mordu processes personal data on behalf of the restaurant for the purpose of operating an online food ordering platform: collecting customer orders, processing payments, storing customer contact details, and enabling SMS marketing where customers have consented.

Types of personal data processed

Customer name, email address, phone number, order history, and total spend. No special category data is collected.

Processor obligations

  • Process personal data only on documented instructions from the restaurant
  • Ensure all personnel authorised to process the data are bound by confidentiality
  • Implement appropriate technical and organisational security measures (Article 32)
  • Not engage subprocessors without prior written consent; current subprocessors include Supabase (database, EU West region), Stripe (payments), Resend (email), and Twilio (SMS)
  • Assist the controller in responding to data subject rights requests (access, rectification, erasure, portability)
  • Notify the controller without undue delay upon becoming aware of a personal data breach
  • Delete or return all personal data on termination of services, at the controller's choice
  • Make available all information necessary to demonstrate compliance with Article 28

Data location

All personal data is stored in the European Union (Supabase EU West region, Dublin, Ireland). No personal data is transferred outside the EEA.

10. Contact

For any questions about these terms, contact us at hello@mordu.ie.

← Back