Your personal data at Menyu.

Menyu processes information needed to manage its accounts, subscriptions and exchanges with users. The controller and their contact details are given below.

When a restaurant uses Menyu to manage customers, reservations or orders, it determines the purposes relating to its business. Menyu provides the service under the arrangement with that establishment. Address questions about a reservation or order to the restaurant concerned.

Depending on the journey, data may include your identity and sign-in email, establishment information, members and roles, uploaded content, billing information and messages to the team.

Reservation and ordering journeys may process contact details, service selections, products and transaction information. Do not enter sensitive information in a free-text field unless it is needed for the service requested.

A Meta connection may provide identifiers for authorised accounts and Pages, permissions, access tokens, prepared or published content, comments and engagement information needed by the features you use.

A TikTok connection may provide the account identifier, available profile, access and refresh tokens, publishing options, selected videos, publication identifiers and statuses. This information supports actions initiated in Menyu and monitors their execution.

Menyu does not sell data from these integrations. You can withdraw access through the relevant network and request deletion of related data retained by Menyu.

Account access and subscribed functions rely on the contractual relationship. Some records are retained to meet legal obligations. Security and abuse prevention may rely on legitimate interests, subject to individuals’ rights.

Optional uses presented in preferences rely on your choice. Submitting a contact form does not consent to marketing or subscribe you to a newsletter. Replies use the contact details and context you provide.

Data is accessible to authorised people and providers needed for the relevant service. These providers process data on Menyu’s behalf, under their data processing terms.

Some are located outside the European Union, mainly in the United States. These transfers rely on the provider’s certification under the EU-U.S. Data Privacy Framework, recognised by the European Commission on 10 July 2023, or on the European Commission’s standard contractual clauses.

Data is kept for as long as each purpose requires, then deleted or anonymised. Deletion may not cover items that must be kept for a legal obligation or to handle a dispute; the response to your request then explains this limitation.

Subject to applicable legal conditions, you can request access, rectification, erasure, restriction, objection or portability. Email [email protected] with the service concerned. Proportionate verification may be requested to protect your account.

You can withdraw optional-use choices on the cookies page. Withdrawal applies to future processing and does not automatically delete previously processed data. You can also lodge a complaint with the CNIL.