Restaurant terms of service

1. The parties

These terms are an agreement between Nollby Group OÜ, a private limited company (osaühing) registered in Estonia with registry code 17549825, Maakri tn 36-66, 10145 Tallinn, Estonia (“Nollby Mat”, “we”) and the business that signs up a restaurant on Nollby Mat (“the restaurant”, “you”). The person who signs up confirms that they may enter into agreements on the restaurant’s behalf.

You can reach us at hej@nollby.com or on +46 72 013 14 76.

2. The service

Nollby Mat gives the restaurant its own online ordering page, a restaurant app to receive and handle orders, links, QR codes and the other tools described on our website. Depending on the plan and add-ons: a listing in the diner directory, texts to diners about their order, delivery with the restaurant’s own staff and AI phone ordering, which Qallio OÜ provides for us.

Diners order from the restaurant and pay the restaurant directly, at pickup or on delivery. The restaurant sells the food; Nollby Mat is not a party to the sale and takes no commission on orders.

We work to keep the service running around the clock, but we can’t promise it is never interrupted. We tell you about planned maintenance in advance when we can.

3. Fees, billing and leaving

The plans cost SEK 490 (Bas) or SEK 990 (Pro) a month. The add-ons cost SEK 490 a month (delivery with your own staff) and SEK 990 a month (AI phone ordering with Qallio). The phone add-on is billed only from the day we have connected the restaurant’s number to Qallio. Nollby Mat takes no commission on your orders.

Prices are in Swedish kronor, excluding VAT. Nollby Group OÜ is not VAT-registered and adds no VAT to its invoices. A VAT-registered restaurant accounts for any VAT on our fee itself (reverse charge).

There is no setup fee.

You pay by card through Stripe, with a card you add yourself in the restaurant app. We charge monthly in advance, only once your free period has ended, and never without a card you added.

If you haven’t added a card, we remind you by email 7 days before your free period ends. If there is still no card 7 days after it ended, your ordering page stops taking orders until you add one. If a payment fails, Stripe tries again and we email you; if it still doesn’t go through, orders pause the same way until the card works.

There is no lock-in: you can cancel in any month, and the service then runs until the end of the month you have paid for.

If you invite another restaurant with your link in the app, it gets an extra free month when we approve it, and you get one once it has paid its first invoice. You can earn up to 12 months this way. A free month comes off your next invoice if you already pay by card; otherwise it is added to your free period.

Launch offer: the restaurant uses Nollby Mat free of charge for 3 months from the day we approve it, and restaurants approved before 1 December 2026 at least until 28 February 2027. The first 100 restaurants approved in Sweden keep the plan prices of SEK 490 (Bas) and SEK 990 (Pro) for 24 months from their approval, even if prices go up; the add-ons are not included. You can leave before your free period ends without paying anything.

4. Your responsibilities as a restaurant

• You run a food business that is registered with your municipality (a registered food establishment), and it stays registered while you use Nollby Mat.
• You follow food law for everything you sell through Nollby Mat, including hygiene, your own checks (egenkontroll) and traceability.
• You give correct and complete allergen information for every dish (the 14 allergens in EU Regulation 1169/2011) and update it when a recipe changes. Dishes without it tell diners to ask you, and you then answer correctly.
• The allergen information and labels such as vegetarian, vegan, gluten-free or lactose-free are your responsibility, also when allergens were suggested from a scanned menu: only the ones you tick are saved. Nollby Mat shows what you enter but doesn’t check that it is right.
• You don’t sell wine, spirits, strong beer or other alcoholic drinks for takeaway or delivery through Nollby Mat. A serving licence covers serving on your premises, not takeaway or delivery.
• You ring up every order that is paid at pickup or on delivery in your own certified cash register, as Swedish law requires, and offer the diner a receipt.
• You give diners the information consumer law asks of a seller: who you are and how to reach you, prices including VAT, what the food contains and how to complain. Your ordering page shows your name, address and phone number: keep them correct.
• Your menu, prices, pictures and texts are correct, and you have the right to use them. You handle diners’ questions and complaints about the food and your service.
• You keep your log-in details safe and tell us at once if you think someone else has used your account.

5. Diners’ personal data

For your diners’ order data (name, phone number, delivery address, the order and any note to the kitchen), you are the controller and Nollby Mat is your processor. The data processing agreement in the appendix applies. For your own account details and our website, Nollby Mat is the controller, as our privacy policy describes.

6. The diner directory: how restaurants are ranked

Restaurants on the Pro plan are listed in the diner directory unless they switch the listing off in Settings. A restaurant is shown while it is active (not suspended) and has at least one dish that can be ordered. Restaurants on Bas are not listed: that is the only way the plan affects the directory.

The main factors that decide the order, most important first:

• Open now. Restaurants taking online orders right now (by their opening hours, a pause or the open and closed switch) come before restaurants that are closed.
• Distance. When a diner shares their location or types an area, nearer restaurants come first. The location stays in the diner’s browser and is only used for sorting. Diners can also sort by distance alone.
• Name. Otherwise, restaurants are in alphabetical order.

Diners can narrow the list by cuisine (the 1 to 3 cuisines you choose in Settings), open now, pickup, delivery to where they are (your delivery radius), their favourites, and a search of names, cuisines, areas and cities.

Nobody can pay for a better place. Reviews, ratings, the number of orders and the fees a restaurant pays play no part in the order.

7. Suspension and ending the agreement

We may suspend a restaurant’s ordering page or listing, or close its account, if:

• it sells alcohol for takeaway or delivery, or anything else that may not be sold this way;
• there is a risk to diners’ health, for example missing or wrong allergen information, or an authority has stopped the business;
• it gives false information about itself, or Nollby Mat is used for fake orders, spam or fraud;
• it seriously or repeatedly breaks these terms, or repeatedly leaves orders unanswered;
• after the pilot, fees are still unpaid 30 days after a reminder; or
• the law or an authority requires it.

We tell you our reasons in writing (by email), before the suspension starts or at the latest when it starts, with the facts behind the decision. You can ask us to look at it again through the complaints address in section 10, and we lift the suspension as soon as the reason is gone.

If we end the agreement for good, we give you our reasons and at least 30 days’ notice, unless the law requires otherwise or you have seriously or repeatedly broken these terms.

You can leave at any time, as section 3 describes. When the agreement ends, we send you your orders if you ask, and delete diners’ data as the data processing agreement says.

8. Liability

Nollby Mat is liable for direct loss caused by our negligence, up to the fees you have paid us in the 12 months before the loss. We are not liable for lost profit or other indirect loss. These limits don’t apply to loss caused intentionally or by gross negligence.

You are responsible for the food you sell and the information you give diners, and you compensate Nollby Mat if a diner or an authority makes a claim against us because of them.

9. Changes to these terms

We tell you about changes by email and in the app at least 15 days before they take effect, or longer if the change means work for you. If you don’t accept a change, you can end the agreement, free of charge, before the change takes effect. Changes that the law requires of us, or that are needed to deal with an unforeseen and imminent danger to diners or the service, can take effect sooner.

10. Complaints

Complaints about Nollby Mat, including a suspension or the directory, go to hej@nollby.com. You can also call us on +46 72 013 14 76. We confirm that we have received a complaint within 2 working days, and answer within 14 days with our decision and the reasons for it, in plain language.

11. Law and disputes

Swedish law applies to these terms. Disputes are settled by Swedish courts, with Stockholm District Court (Stockholms tingsrätt) as the first instance.

A. Roles

The restaurant is the controller of its diners’ order data. Nollby Mat processes that data on the restaurant’s behalf, only to provide the service described in the terms.

B. What we process, about whom

Diners’ names, mobile numbers, delivery addresses, their orders and notes to the kitchen (a diner may write about an allergy or other health matter there), the order’s status and times, and the technical data needed to show the tracking page. The data subjects are the restaurant’s diners.

C. Purpose and your instructions

To receive, show and keep orders, let diners follow their order, confirm a diner’s mobile number with a code, and text diners about their order when the restaurant’s plan includes it. These terms and the restaurant’s settings in the app are the restaurant’s instructions. We tell you if we think an instruction breaks the GDPR.

The processing lasts as long as the agreement, and until the data is deleted afterwards (point H).

D. Our obligations

• We process the data only on your instructions, unless EU or Swedish law requires otherwise; we then tell you first, if the law allows.
• Everyone with access to the data is bound by confidentiality.
• We protect the data: it is stored in the EU (a Cloudflare D1 database with EU jurisdiction) and sent encrypted, tracking links and codes are stored only as hashes, and only people who need access have it.
• We help you answer diners who use their rights (access, correction, deletion and objection), and with security, impact assessments and prior consultation when needed.
• We tell you without undue delay, and within 48 hours of finding out, about a personal data breach affecting your diners’ data, with what we know about it.
• We give you the information needed to show that this agreement is followed, and allow audits by you or an auditor you appoint, with reasonable notice.

E. Sub-processors

You give us general authorisation to use the sub-processors below. Each is bound by contract to the same data protection obligations as we are, and we remain responsible to you for them.

• Cloudflare, Inc. (USA): hosting, the database (stored in the EU) and the network the service runs on, including Turnstile, the bot check on our sign-up and call-back forms.
• Vonage (Vonage Holdings Corp., USA, and its group companies): texts to diners, that is codes and order updates. Vonage receives the phone number and the message.
• Qallio OÜ (Estonia): for restaurants with the AI phone ordering add-on, Qallio answers the restaurant’s phone and takes orders. Qallio receives the call, the caller’s phone number and the order.
• Anthropic, PBC (USA): reads photos of a paper menu when you use “Scan your menu”. Menu photos normally contain no diner data, and we don’t keep them.

Order alerts on your own devices travel through your browser’s push service (Google, Apple, Mozilla or Microsoft), encrypted end to end so the push service can’t read them.

When you or your driver tap a delivery address in the app, it opens in Google Maps, which then receives the address. Google isn’t our sub-processor: opening the address there is your choice.

Before a new or replacement sub-processor handles your diners’ data, we tell you by email at least 30 days in advance. You can object within that time. If we can’t resolve your objection, you can end the agreement, free of charge, before the change takes effect.

F. Outside the EU

The data is stored in the EU. Where a sub-processor may process it outside the EU/EEA, we make sure the transfer is lawful under Chapter V of the GDPR, for example through the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

G. Keeping orders

While the agreement runs, orders are kept so you can see your history; nothing deletes them automatically. Tell us if you want older orders deleted. Keeping the records your bookkeeping needs is your responsibility.

H. When the agreement ends

We send you your diners’ order data if you ask, and then delete it within 90 days, unless the law requires us to keep it.