Privacy Policy

What we collect

When you place an order we record only what is needed to deliver it:

• your name and mobile number, so the restaurant and the rider can reach you;
• your building, unit number and — if you choose to share it — a map location, so the rider can find you;
• the items you ordered, any note you added, and the amount due;
• your chosen payment method (cash or card machine on delivery).

We do not take card numbers or bank details. Payment happens in person, at your door, between you and the restaurant.

Where it goes

Your order details are sent over WhatsApp to the restaurant, and to the rider assigned to your delivery, so that it can be prepared and delivered. Order records are stored on our database provider (Supabase) and the site runs on Vercel; both may store data outside the UAE. WhatsApp messages are delivered through a messaging provider on our behalf.

We do not sell your information, and we do not share it with anyone beyond the restaurant you ordered from, the rider delivering to you, and the providers named above.

What stays on your own device

Your name, phone number, building and unit are also saved in your own browser so that the next order is quicker to place. That copy never leaves your device, is kept separately for each restaurant, and is cleared when you clear your browser data. We never look up a saved address by phone number.

How we measure visits (analytics)

We run our own, first-party measurement of how our pages are used — there are no third-party trackers, no advertising networks, and nothing follows you to other websites. When you browse any page we operate (a restaurant's ordering page or our own site), we record:

• the pages you view and when — the page address only, never anything typed into it and never the codes or tokens a link may carry;
• the site you arrived from (the referrer), if your browser reports one;
• your IP address;
• the kind of browser and device you use (for example "Chrome on Android") — derived from, but never keeping, your browser's technical identifier;
• a count of how many times this browser has visited before, using a randomly generated first-party cookie. The cookie identifies your browser to us alone and contains nothing about you.

We use this to understand how the service is used and to help restaurants understand their visitors. We never sell it or share it with advertisers. If you place an order, the visit record of that browser is linked to your customer record, so the restaurant and we can see that this visitor became a customer.

After four months the identifying parts are removed automatically: the IP address and the full referrer address are erased and the page-by-page history is deleted, leaving only anonymous totals. If you ask to have your details deleted (see below), the link between your browser's visit history and you is removed as part of the same erasure.

How long we keep it

Four months after an order, we automatically remove the parts that were only useful for the delivery itself: the map location, any note you added, and the content of the WhatsApp messages that carried the order (which quote your name and address).

Your name, phone number, building and unit stay with the order record, so the restaurant can recognise you when you order again, and the financial record of the order (the items and the amounts) is kept to satisfy tax and accounting rules. These are deleted when a restaurant leaves the platform — or sooner, if you ask us to remove your details (see below).

Having your information deleted

You can ask for your personal details to be removed at any time. Email hello@getmenu.ae from any address, or send a WhatsApp message to the restaurant, telling us the mobile number you ordered with. We will remove your name, phone number, address and map location within 30 days.

A restaurant may still have to keep the financial record of an order (the items and the amount) to satisfy tax and accounting rules. Those records are stripped of anything that identifies you.

You can also ask us what we hold about you, or ask us to correct it, using the same address.

Keeping it safe

Access to customer details is restricted to the restaurant you ordered from and to us as the platform operator; the database enforces that separation, so no restaurant can see another restaurant's customers. Traffic to the site is encrypted.

Children

The service is not intended for children under 18, and we do not knowingly collect their information.

Changes

If this policy changes we will update the date at the top of the page. Continuing to use the service after a change means you accept the updated policy.