This policy explains what personal data Restu Menu collects, why, and how you can control it. It is written to follow Saudi Arabia's Personal Data Protection Law (PDPL).
Who we are
Restu Menu ("we") provides digital menus, ordering and review tools for restaurants and cafés at restumenu.com. You can reach us at hello@restumenu.com.
What data we collect
Restaurant owners and staff: your email address, password (stored encrypted, never readable by us), restaurant name, city, menu content and settings.
Guests who order: the name you enter and, for pickup orders, your phone number. Your order details (items, table, time).
Guests who leave feedback: your rating and, if you choose, a private message and contact details.
Website visitors: what you send us through our forms (for example the contact, partner or waitlist forms).
Why we use it
- To provide the service: show menus, pass orders to the restaurant, send account emails.
- To keep the service safe: prevent abuse and fraud (for example, limiting repeated requests).
- To reply to you when you contact us.
- To improve the service, using totals that do not identify you.
We do not sell personal data.
Legal basis
We process data to perform our agreement with restaurants, to provide a service you asked for (such as placing an order), with your consent where required (such as optional cookies), and to meet legal obligations.
Where your data is stored
Our database and files are hosted in Frankfurt, Germany (European Union), with encrypted connections. Some providers listed below may process data in other countries under appropriate safeguards.
Service providers
We use trusted providers to run Restu Menu: Supabase (database and sign-in), Vercel (website hosting), Resend (emails), Upstash (abuse protection), Inngest (background tasks) and ImprovMX (email forwarding). They only process data to provide their service to us.
How long we keep data
We keep account data while your account is open. Order and feedback data is kept for the restaurant's records and deleted when the restaurant's account is deleted, unless the law requires us to keep it longer.
Your rights
Under the PDPL you can ask to access, correct or delete your personal data, ask for a copy of it, and withdraw consent you gave. Guests can also contact the restaurant directly. Email hello@restumenu.com and we will reply within the time the law requires.
Cookies
We use necessary cookies to remember your language, keep you signed in and remember a referral link for 60 days. Optional analytics cookies are only used if you choose "Accept all" in the cookie banner.
Security
We use encrypted connections, access controls, two-factor sign-in for our staff and separation between restaurants' data.
Children
Restu Menu is for businesses. We do not knowingly collect data from children.
Changes to this policy
We will post any changes on this page and update the date above.
Contact
Questions about privacy: hello@restumenu.com.