Privacy Policy

Last updated: September 6, 2026

QRMenuNow ("we", "us", or "our") operates the qrmenunow.com website and the QR menu and ordering services provided to restaurants, cafes, bars, and hotels ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website or use our Service, and describes your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We may collect the following categories of information:

• Contact information: name, email address, phone number, and business name when you contact us, request a demo, or sign up for the Service.
• Business and menu data: menu items, prices, and related content that a venue owner uploads to operate their digital menu.
• Order and usage data: orders placed through a venue's digital menu, table/session identifiers, and general usage statistics of the Service.
• Payment information: if you subscribe to a paid plan, payment details are processed by our third-party payment processor (e.g. Stripe). We do not store full card numbers on our own servers.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically through standard web server logs and, where enabled, analytics tools.
• Cookies and similar technologies: see Section 5 below.

2. How We Use Your Information

• To provide, operate, and maintain the Service, including digital menus and ordering functionality.
• To communicate with you about your account, support requests, or updates to the Service.
• To process payments and manage subscriptions.
• To improve our website and Service, including analyzing usage trends.
• To comply with legal obligations and enforce our Terms of Service.
• To send you marketing communications, where you have opted in, and always with the option to unsubscribe.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data on the following legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (improving and securing our Service), consent (for optional cookies and marketing communications), and compliance with legal obligations.

4. Data Sharing and Third Parties

We do not sell your personal information. We may share information with:

• Service providers: hosting providers, payment processors (e.g. Stripe), and communication tools (e.g. WhatsApp Business, email providers) that help us operate the Service.
• Legal authorities: where required by law, regulation, or legal process.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality safeguards.

5. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to operate correctly and, where enabled, to understand how visitors use our site. These may include:

• Strictly necessary cookies: required for core site functionality (e.g. session management, security, remembering your cookie preferences). These cannot be disabled.
• Analytics cookies: if enabled, help us understand site usage (e.g. Google Analytics). These are only set with your consent where required by law.

Where required by law (including under the EU ePrivacy Directive and GDPR), we will ask for your consent before setting non-essential cookies, and you can withdraw consent at any time. You can also control cookies through your browser settings, including blocking or deleting them, though this may affect site functionality.

6. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Menu and order data associated with a venue account is generally retained for the duration of the subscription and a reasonable period afterward, unless deletion is requested sooner.

7. Your Rights

Under GDPR (EEA/UK/Switzerland residents)

• Right to access the personal data we hold about you.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten"), subject to legal exceptions.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with your local data protection authority.

Under CCPA (California residents)

• Right to know what personal information is collected, used, shared, or sold.
• Right to request deletion of personal information, subject to exceptions.
• Right to opt out of the sale or sharing of personal information (we do not sell personal information).
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

8. International Data Transfers

Our servers and service providers may be located outside your country of residence, including outside the EEA. Where we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place, consistent with applicable data protection law.

9. Data Security

We use reasonable technical and organizational measures, including encrypted connections (HTTPS/TLS), to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is intended for business use by venue owners and their adult customers. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected] or via our Contact page.