Last updated: October 2026
We collect the data you provide at sign-up (email address, venue name) and usage data (menu view counts, access times, viewing language). We do not collect or store payment card data – all payments are processed entirely by Paddle.com Market Limited.
We use your data solely to provide the service – managing your digital menu, showing view statistics, and communicating about your account. We do not sell your data or share it with third parties for advertising purposes.
We share data only with service providers necessary to run the platform: hosting and database (servers in the European Union), payment processing, technical error monitoring and transactional email delivery. We provide the list of specific providers on request. Each processes data solely to provide their service to us.
Data is stored on servers in the European Union. Your account and menu data remain active while your account is active. After you cancel your subscription, data is retained for up to 30 days in case you wish to restore your account, then permanently deleted.
When a guest books a table through a venue's digital menu, we collect their name, phone number, email address, party size, date and time of arrival, the chosen table and any note they add. To prevent abuse we also store a cryptographic hash of the IP address, from which the IP address itself cannot be recovered. The venue where the booking is made is responsible for this data (the data controller); QR Menio processes it on the venue's behalf (as a processor), solely to provide the reservation service. The data is used to process and confirm the booking, to send email notifications (an email verification code, confirmation, decline or cancellation, and a reminder on the day of the booking) and for the venue to contact the guest about the booking. Alongside a booking, the venue can see how many earlier visits and no-shows the same guest had, and can block a phone number or email address from future online bookings. The legal basis is carrying out the guest's booking request and the venue's legitimate interest in preventing fake bookings and abuse. Please do not enter sensitive information in the note beyond what is truly needed (e.g. allergies).
Reservation data is visible only to the owner and staff of the venue where the booking was made, and to our hosting and email delivery providers. It is not used for advertising and is not shared with other venues. Bookings are automatically and permanently deleted 12 months after the booking date, and requests whose email address was never verified after 7 days. A phone number or email address on a venue's blocklist stays there until the venue removes it. Guests can cancel a booking at any time via the link in their email. To access, correct or delete their data, guests can contact the venue directly or email us at support@qrmenio.com; we will forward the request to the venue or carry it out on its behalf.
You have the right to access, correct, export or delete your data. Send requests to support@qrmenio.com – we respond within 5 business days.
We use only technical cookies required for the app to function. See our Cookie Policy for details.
We may update this policy from time to time. We'll notify you by email of significant changes.
Questions about privacy? Email us at support@qrmenio.com.