DRAFT TEMPLATE — replace the [bracketed] details and have a solicitor review before launch.

Privacy notice

Last updated: [date]

Who we are

[Business name] ("we") runs this digital menu service. Contact: [email], [address]. We are registered with the ICO: [registration number].

Customers viewing a menu

You don't need an account and we don't use tracking or advertising cookies. When a menu opens we record an anonymous view (which restaurant, which table, and the time) so restaurants can see how often their menu is used. We do not record your name, phone number or precise location. If you choose to save dietary filters, they are stored only in your own browser.

Restaurants using the dashboard

Each restaurant has one login made of an email address and a password. We don't ask for names, phone numbers or other personal details to sign in. Passwords are stored by our sign-in provider in a protected (hashed) form, so we can't read them. We also hold the restaurant's menu and the business details it chooses to show customers (such as the restaurant's address and phone number).

Billing is handled by Stripe. If you pay by card or direct debit, Stripe collects and holds the billing details it needs (such as name, card and billing address); we see only whether a payment succeeded. We use login and menu information to provide the service and support you (contract), and to keep the service secure (legitimate interests).

Service providers

Supabase (database, sign-in, image storage), Cloudflare (website hosting) and Stripe (payments). Some may process data outside the UK under appropriate safeguards.

Aggregated insights

We may combine menu information across many restaurants into anonymised statistics (for example, average prices by area). These never identify an individual restaurant or person.

How long we keep data

Account data for as long as the account is open and up to [6] years afterwards for accounting records. Anonymous view counts for up to [24] months.

Your rights

You can ask to access, correct or delete your personal data, or object to how we use it, by emailing [email]. You can also complain to the Information Commissioner's Office (ico.org.uk).