Privacy Policy

This Privacy Policy explains how Menulisa collects, uses, and protects personal information when restaurants ("Customers") and their guests use the Service.

For data that restaurants collect from their guests through the Service, the restaurant is the controller and we act as a processor on their behalf.

• Account data: name, email, phone, business details, and staff profiles you create.
• Operational data: menus, orders, table activity, and reporting generated as you run the Service.
• Guest data: items ordered and, where provided, contact details, loyalty identifiers, and reviews — collected on behalf of the restaurant.
• Payment data: handled by our payment processors; we receive limited transaction metadata, not full card numbers.
• Technical data: device, browser, IP address, and usage events used to operate and secure the Service.

We use personal information to provide and improve the Service, process orders and payments, prevent fraud and abuse, provide support, and comply with legal obligations.

We do not sell personal information. We use cookies and similar technologies as described in our Cookie Policy.

We share information with service providers who help us run the Service (such as hosting, payment processing, and analytics), with the relevant restaurant for its own orders, and where required by law or to protect rights and safety.

We require providers to protect personal information and to use it only for the purposes we specify.

We keep personal information for as long as needed to provide the Service and for legitimate business or legal purposes, after which we delete or anonymise it.

We use technical and organisational measures — including encryption in transit, access controls, and staff PIN protection — to safeguard personal information. No method of transmission or storage is completely secure, but we work to protect your data.

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing.

Guests should direct requests about their data to the restaurant they ordered from; we will assist that restaurant in responding.

We may process information in countries other than your own. Where we do, we use appropriate safeguards consistent with applicable data-protection laws.

We may update this Policy from time to time and will note the effective date above. For privacy questions or requests, contact us through the contact page.