We believe in transparency. This policy explains exactly what data we collect, why we collect it, and what rights you have over it.
GDPR compliant. Menu247 is operated from Italy (EU) and fully complies with the General Data Protection Regulation (GDPR) and the Italian Personal Data Protection Code (D.Lgs. 196/2003 as amended).
The data controller for personal data processed through Menu247 is:
We collect different categories of data depending on how you interact with Menu247:
| Category | Data | Source |
|---|---|---|
| Account data | Name, email, password (hashed), restaurant name | You, at registration |
| Billing data | Payment method (handled by Stripe), invoice address | You, at subscription |
| Menu content | Dish names, photos, prices, descriptions you upload | You, in the builder |
| Usage data | Pages visited, features used, session duration, clicks | Automatically |
| Device data | IP address, browser type, OS, screen size | Automatically |
| Guest scan data | Anonymous scan counts, language detected, dish views (no personal data) | Automatically |
We do not collect personal data from your guests when they scan your QR code. Guest analytics are fully anonymised.
We use your data under the following legal bases:
We use the following categories of cookies:
You can manage your cookie preferences at any time via the Cookie Settings link in the footer.
We do not sell your personal data. We share data only with trusted processors who help us deliver the service:
All processors are bound by data processing agreements and comply with GDPR. We may disclose data if required by law or to protect the rights and safety of Menu247 and its users.
Under GDPR, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Correct any inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Receive your data in a machine-readable format.
Request that we limit processing of your data.
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email info@menu247.online. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
We implement appropriate technical and organisational measures to protect your personal data, including:
In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Article 33.
Menu247 is not intended for use by children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@menu247.online and we will delete it promptly.
Your data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g., some sub-processors may have US-based systems), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs).
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice within the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
For any privacy-related questions, requests, or concerns: