Privacy policy
What we hold, why we hold it, and how to make us delete it. Short, because we collect very little.
This text is not finished. What is written below is true and is what we actually do today; the parts that still need a lawyer are marked, and nothing on this page is presented as a contract until they are settled. If something here matters to you before then, ask us and you will get a straight answer.
Status: Draft — being reviewed before any signup opens.
Who holds the data
As there is no incorporated company yet, the controller is for now the person who does the work — reachable at the email address and the WhatsApp number in the footer. That is why this is one of the parts marked as unfinished below: it changes the day there is a company.
What we collect
- An email address, and the name of your restaurant, when you ask us to make a menu.
- The menu itself: dish names, descriptions, prices, ingredients and allergens — plus whatever file or link you send us to work from.
- The messages you send us, on WhatsApp or by email, and our replies.
What we do not collect
- No card details. There is no checkout anywhere on this site.
- No tracking or advertising profiles, and nothing sold or handed to an advertiser — ever, under any circumstances.
- Nothing about the diners who read a published menu.
The menu a diner reads collects nothing
A diner scans a code and reads a page. There is no account, no form, no login and no advertising cookie. The language they pick and the text size they choose are kept on their own phone so the page remembers them, and they never reach us.
Who else touches it
Three kinds of supplier, and no others: the company that hosts the site and the database, the AI vendors that read the menu and generate the images, and email delivery. They process it to do that work and for nothing else.
- Hosting and database — where the menu lives.
- AI vendors — reading the menu you send, translating the dishes and generating the images.
- Email — so a message from us arrives.
Naming each supplier, and saying where each one processes the data, is one of the parts still being written. We are not withholding it; it has not been reviewed yet.
Getting it corrected or deleted
Write to us and say so. We will correct anything wrong, and if you ask us to delete, we unpublish the menu and delete what we hold the same day — the same promise as stopping the service. You do not need a reason and you do not need a form.
hello@restaba.comStill being written
The controller's legal identity
The registered name, number and address of the company responsible, plus how to reach it about data. Unwritten until there is an incorporated company.
Legal basis and retention periods
Which lawful basis covers each thing we hold, and exactly how long each is kept. We know what we do; the wording that states it bindingly has not been reviewed.
The named list of suppliers
Each supplier by name, what it does, and the country it processes in — including any transfer outside the EU and what covers it.
Complaining to a supervisory authority
How to complain about how we handle your data, and to whom. Being drafted rather than guessed at.