Privacy Policy

Data controller

This platform provides a digital QR menu service. The platform operator is the data controller for processing that arises from running the platform: [Company name, address, registration/tax number and contact email to be added].

Products, prices and venue information shown in menus are the responsibility of the respective venue.

Data we process

Menu visitors: language and cookie preference; with consent, anonymous menu events (page view, category, table, language). No IP address is stored with these events.
Waiter calls: table, request type, and your location (latitude/longitude) with distance to the venue, to verify the call is made on site.
Contact form: name, business name, email, phone and your message.
Admin panel users: name, email, an irreversible password hash and session data.
Security: IP addresses are kept in short-lived rate-limit counters to prevent abuse.

Purposes and legal bases

Data is processed to provide the service and perform the contract, to keep the service secure under legitimate interest, and for analytics only with your explicit consent, under Turkish KVKK (Law No. 6698) and the GDPR where applicable.

Retention

Anonymous menu events: 14 days.
Waiter calls: kept in the venue's operational records [retention period to be added].
Contact requests: until your request is resolved and legal obligations expire.
Rate-limit counters: only for abuse prevention, as short-lived counters [retention period to be added].

Sharing

Your data is never sold or shared for advertising. It is not disclosed to third parties other than our hosting provider and, where legally required, competent authorities.

Your rights