Privacy Policy
How Menushell Ltd handles personal information across our website, restaurant technology, business accounts and support.
This policy describes general processing practices and should be read with applicable restaurant privacy notices and service agreements.
1. Introduction
Menushell Ltd operates restaurant ordering and management technology. This policy explains how we handle personal information in relation to our website, enquiries, business accounts, support and services.
2. Who Is Responsible for Your Information
Menushell Ltd generally acts as a data controller for its website visitors, enquiries, business accounts, billing administration and support. A restaurant generally determines the purposes for which its customer order information is used. Where Menushell processes that information on the restaurant’s instructions, Menushell acts as a data processor. The exact roles depend on the service and contractual arrangements.
3. Information We Collect
Depending on your interaction with us, we may process names, contact details, business information, account credentials or identifiers, restaurant configuration, correspondence, invoice and transaction records, and technical information such as IP addresses, device information and service logs. Restaurant orders may contain customer contact details, delivery addresses, order contents, instructions and order status.
4. How We Collect Information
Information may come directly from you through forms, account registration, demonstrations and support requests; from restaurants and their authorised users; from service operation and security logs; or from payment providers through transaction status updates.
5. How We Use Personal Information
We use relevant information to answer enquiries, establish and maintain accounts, deliver restaurant services, provide support, process billing, prevent fraud, protect systems, meet legal requirements and improve service reliability. Essential operational notices may be sent to account contacts.
6. Lawful Bases for Processing
Under UK GDPR, the lawful basis depends on the activity. It may include performance of a contract or steps before entering one, compliance with a legal obligation, legitimate interests such as security and service improvement, or consent where legally required, including for certain optional cookies or marketing.
7. Restaurant Customer Information
Restaurants are generally responsible for explaining their own processing of customer orders and responding to customer privacy requests where they are controllers. Menushell may process restaurant customer data to provide technical services on behalf of the restaurant. If you have a question about an order, you may need to contact the restaurant directly.
8. Payments and Stripe
Stripe may be used to facilitate payments. Payment providers may process payment details under their own privacy notices. Menushell may receive limited transaction identifiers, billing details and payment status information for reconciliation, account administration and support. This policy does not claim Menushell stores complete payment-card details.
9. Sharing and Service Providers
We may share information where necessary with authorised personnel, the relevant restaurant, hosting and technical suppliers, email and communication providers, payment providers, advisers and public authorities where required by law. Access should be limited to appropriate purposes and subject to suitable safeguards.
10. International Data Transfers
Some providers or support activities may involve processing outside the United Kingdom. Where UK law requires safeguards, appropriate transfer mechanisms and protections should be used, including adequacy arrangements or approved contractual safeguards as applicable.
11. Data Retention and Deletion
We retain information only for as long as reasonably necessary for the relevant purpose, applicable legal obligations, security and dispute handling. Retention periods vary by data type. Restaurant cancellation and deletion are subject to applicable service controls and terms. Certain accounting or legal records may need separate retention where required by law.
12. Security
We use organisational and technical measures intended to reduce risks of unauthorised access, alteration, loss and disclosure. No internet-based system can guarantee complete security. Please protect account credentials and report suspected unauthorised access.
13. Cookies and Similar Technologies
Our services may use essential cookies or similar technologies for sessions, security and core operation. Optional analytics or marketing technologies, if used, require appropriate information and consent controls where applicable. Browser settings can help manage cookies, although blocking essential cookies may affect functionality.
14. Your UK Data Protection Rights
Subject to applicable conditions and exemptions, you may request access, rectification, erasure, restriction, portability, or object to certain processing. You may withdraw consent where processing relies on it. You may also complain to the UK Information Commissioner’s Office at ico.org.uk. Requests involving restaurant-controlled order data may be referred to the relevant restaurant.
15. Children
Menushell’s business accounts are intended for restaurant operators and authorised business users. Restaurants are responsible for ensuring that their customer-facing services and notices comply with applicable requirements.
16. Changes to This Policy
We may update this policy when our services, data practices or legal obligations change. The latest version will appear here with its updated date.
17. Contact Menushell
For privacy questions or personal-data requests, email [email protected]. Menushell Ltd, company registration 17509252, 20 Wenlock Road, London, England, N1 7GU, United Kingdom.
Privacy questions?
Contact us about personal information or data protection requests.
[email protected]