Legal

Privacy Policy

Menu-all is a reference site with no accounts and no advertising profiles, so there isn't much to collect. This policy sets out exactly what we do collect, why, and what you can ask us to do about it.

Last updated Version 1.2

1. Who we are

Menu-all (“Menu-all”, “we”, “us”) operates menu-all.com, a website that collects restaurant menus, prices and related details from public sources and republishes them as readable pages. For the purposes of data protection law, Menu-all is the controller of the personal information described in this policy.

You can reach us at privacy@menu-all.com or through the contact form.

2. What this policy covers

This policy covers personal information we handle through this website: what a visitor's browser sends us, what you type into a form, and what our analytics records. It does not cover the restaurants listed on Menu-all - if you contact or visit a restaurant, that relationship and any data it collects are entirely between you and them.

It also does not cover third-party websites we link to. Following an external link takes you outside our control, and that site's own policy applies from that point on.

3. What we collect

Information you give us

When you use the contact form or the restaurant claim form, we receive what you type into it. That typically means your name, your email address, and the content of your message. The claim form also asks for a phone number, your role at the restaurant, and the restaurant's name, city and website, because we need those to verify that you speak for the business.

Information collected automatically

Like most websites, our servers record basic technical details of each request: IP address, browser and device type, the page requested, the referring page, and a timestamp. This is used for security, troubleshooting and aggregate traffic statistics.

What we do not collect

  • No user accounts, passwords or login history - there is nothing to sign up for.
  • No payment details. Menu-all never takes payments, orders or reservations.
  • No advertising profiles, and no selling or sharing of personal information for cross-context behavioural advertising.
  • No special-category data (health, religion, political opinions and similar) is ever requested.

4. How we use it

We use the information above only for these purposes:

  • Answering you. Replying to a message, question or correction you send us.
  • Verifying claims. Confirming that someone submitting a claim genuinely represents the restaurant.
  • Correcting listings. Acting on reports of wrong prices, hours or closures.
  • Keeping the site working. Diagnosing errors, preventing abuse and protecting the service.
  • Understanding usage. Aggregate statistics about which pages and locations are popular, so we know where to add menus next.

We do not use your information to build a profile of you, and we do not use automated decision-making that produces legal or similarly significant effects.

5. Legal bases for processing

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

  • Legitimate interests - running and securing the website, responding to messages, verifying restaurant claims, and keeping listings accurate. We have considered your rights and freedoms and believe this processing is proportionate and expected.
  • Consent - for non-essential cookies and analytics, where consent is required. You can withdraw it at any time; see the Cookie Policy.
  • Legal obligation - where we must retain or disclose information to comply with the law.

6. Cookies and analytics

Menu-all uses a small number of cookies and similar technologies - essential ones that make the site work, and analytics that tell us, in aggregate, which pages people read. We do not use advertising or cross-site tracking cookies.

Analytics data is aggregated and is not used to identify individual visitors. The Cookie Policy lists each cookie, what it does, how long it lasts and how to refuse it.

7. Who we share it with

We do not sell personal information. We share it only in these circumstances:

  • Service providers who host the site, deliver our email and provide analytics. They act on our instructions, under contract, and may not use the data for their own purposes.
  • A restaurant, where you have asked us to pass on a message or correction that concerns it, and only to the extent needed to resolve the matter.
  • Legal and safety - where disclosure is required by law, a court order or a regulator, or is necessary to investigate abuse or protect our rights or someone's safety.
  • A successor in the event of a merger, acquisition or transfer of the business, subject to the same protections as this policy.

8. Restaurant and business information

Most of what Menu-all publishes is business information rather than personal information: a restaurant's trading name, address, business phone number, opening hours and menu. This material is collected from public sources and published in the public interest of helping people find accurate menus.

Where a business detail is also personal information - for example, a sole trader whose business name is their own name - you can ask us to correct or remove it. Write from an email address connected to the business through the contact form and tell us which page is affected.

9. How long we keep it

Retention periods by type of information
Information Kept for
Contact form messages 24 months from the last reply
Claim submissions and verification records For as long as the claim is active, then 24 months
Server request logs 90 days
Aggregate analytics 26 months, in aggregate form only

We delete or anonymise information once it is no longer needed for the purpose it was collected for, unless a longer period is required by law.

10. Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

  • Access - ask for a copy of what we hold about you.
  • Rectification - have inaccurate information corrected.
  • Erasure - ask us to delete information where we no longer have a good reason to keep it.
  • Restriction and objection - ask us to pause processing, or object to processing based on legitimate interests.
  • Portability - receive information you gave us in a machine-readable format.
  • Withdraw consent - where processing relies on consent, withdraw it at any time.
  • Complain - to your local data protection authority if you believe we've handled your data badly. We'd rather you told us first so we can put it right.

To exercise any of these, email privacy@menu-all.com. We respond within 30 days and never charge for a reasonable request.

11. International transfers

Menu-all is served from infrastructure in more than one country, and our service providers may process data outside your region. Where information leaves the UK or the European Economic Area, we rely on an adequacy decision or on standard contractual clauses, together with appropriate technical safeguards.

12. Security

The site is served over HTTPS, access to form submissions is limited to the people who need it, and our providers are chosen for their security practices. No system is perfectly secure, so please don't send us sensitive documents or financial details - we never need them.

13. Children

Menu-all is a general-audience reference site and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we'll delete it.

14. Changes to this policy

We update this policy when our practices change or the law requires it. The “last updated” date at the top of the page always reflects the current version. Material changes are announced on the site before they take effect.

15. Contact us

Questions about this policy, or a request about your data: