Legal
Privacy Policy
Menu-all is a reference site with no accounts and no advertising profiles, so there isn't much to collect. This policy sets out exactly what we do collect, why, and what you can ask us to do about it.
1. Who we are
Menu-all (“Menu-all”, “we”, “us”) operates menu-all.com, a website that collects restaurant menus, prices and related details from public sources and republishes them as readable pages. For the purposes of data protection law, Menu-all is the controller of the personal information described in this policy.
You can reach us at privacy@menu-all.com or through the contact form.
2. What this policy covers
This policy covers personal information we handle through this website: what a visitor's browser sends us, what you type into a form, and what our analytics records. It does not cover the restaurants listed on Menu-all - if you contact or visit a restaurant, that relationship and any data it collects are entirely between you and them.
It also does not cover third-party websites we link to. Following an external link takes you outside our control, and that site's own policy applies from that point on.
3. What we collect
Information you give us
When you use the contact form or the restaurant claim form, we receive what you type into it. That typically means your name, your email address, and the content of your message. The claim form also asks for a phone number, your role at the restaurant, and the restaurant's name, city and website, because we need those to verify that you speak for the business.
Information collected automatically
Like most websites, our servers record basic technical details of each request: IP address, browser and device type, the page requested, the referring page, and a timestamp. This is used for security, troubleshooting and aggregate traffic statistics.
What we do not collect
- No user accounts, passwords or login history - there is nothing to sign up for.
- No payment details. Menu-all never takes payments, orders or reservations.
- No advertising profiles, and no selling or sharing of personal information for cross-context behavioural advertising.
- No special-category data (health, religion, political opinions and similar) is ever requested.
4. How we use it
We use the information above only for these purposes:
- Answering you. Replying to a message, question or correction you send us.
- Verifying claims. Confirming that someone submitting a claim genuinely represents the restaurant.
- Correcting listings. Acting on reports of wrong prices, hours or closures.
- Keeping the site working. Diagnosing errors, preventing abuse and protecting the service.
- Understanding usage. Aggregate statistics about which pages and locations are popular, so we know where to add menus next.
We do not use your information to build a profile of you, and we do not use automated decision-making that produces legal or similarly significant effects.
5. Legal bases for processing
Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:
- Legitimate interests - running and securing the website, responding to messages, verifying restaurant claims, and keeping listings accurate. We have considered your rights and freedoms and believe this processing is proportionate and expected.
- Consent - for non-essential cookies and analytics, where consent is required. You can withdraw it at any time; see the Cookie Policy.
- Legal obligation - where we must retain or disclose information to comply with the law.
8. Restaurant and business information
Most of what Menu-all publishes is business information rather than personal information: a restaurant's trading name, address, business phone number, opening hours and menu. This material is collected from public sources and published in the public interest of helping people find accurate menus.
Where a business detail is also personal information - for example, a sole trader whose business name is their own name - you can ask us to correct or remove it. Write from an email address connected to the business through the contact form and tell us which page is affected.
9. How long we keep it
| Information | Kept for |
|---|---|
| Contact form messages | 24 months from the last reply |
| Claim submissions and verification records | For as long as the claim is active, then 24 months |
| Server request logs | 90 days |
| Aggregate analytics | 26 months, in aggregate form only |
We delete or anonymise information once it is no longer needed for the purpose it was collected for, unless a longer period is required by law.
10. Your rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- Access - ask for a copy of what we hold about you.
- Rectification - have inaccurate information corrected.
- Erasure - ask us to delete information where we no longer have a good reason to keep it.
- Restriction and objection - ask us to pause processing, or object to processing based on legitimate interests.
- Portability - receive information you gave us in a machine-readable format.
- Withdraw consent - where processing relies on consent, withdraw it at any time.
- Complain - to your local data protection authority if you believe we've handled your data badly. We'd rather you told us first so we can put it right.
To exercise any of these, email privacy@menu-all.com. We respond within 30 days and never charge for a reasonable request.
11. International transfers
Menu-all is served from infrastructure in more than one country, and our service providers may process data outside your region. Where information leaves the UK or the European Economic Area, we rely on an adequacy decision or on standard contractual clauses, together with appropriate technical safeguards.
12. Security
The site is served over HTTPS, access to form submissions is limited to the people who need it, and our providers are chosen for their security practices. No system is perfectly secure, so please don't send us sensitive documents or financial details - we never need them.
13. Children
Menu-all is a general-audience reference site and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we'll delete it.
14. Changes to this policy
We update this policy when our practices change or the law requires it. The “last updated” date at the top of the page always reflects the current version. Material changes are announced on the site before they take effect.
15. Contact us
Questions about this policy, or a request about your data:
- Email: privacy@menu-all.com
- Form: menu-all.com/contact, choosing “Privacy or data request”