Privacy Policy

1. Introduction

Menu Enterprises LLC. (“Menu,” “we,” “us,” or “our”) operates an online restaurant discovery and food ordering platform accessible at Menu.com and through our mobile applications (collectively, the “Platform”). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our Platform, create an account, place orders, or otherwise interact with our services.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use the Platform.

2. Information We Collect

We collect several categories of information to provide and improve our services. The types of information we collect depend on how you interact with the Platform.

Personal Information

• Account information — Name, email address, phone number, and password when you create an account.
• Delivery address — Street address, apartment or suite number, city, state, and zip code for order delivery.
• Payment information — Credit or debit card number, expiration date, billing address, and other payment details. Payment information is processed by our third-party payment processors and is not stored on our servers.
• Order history — Records of your past orders, including items ordered, restaurants, order totals, delivery instructions, and timestamps.
• Communications — Messages you send to us through customer support, feedback forms, or email correspondence.

Device and Usage Data

• Device information — Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
• Usage data — Pages visited, features used, search queries, click patterns, referring URLs, time spent on the Platform, and interaction timestamps.
• Log data — IP address, access times, error logs, and server request details.

Location Data

With your consent, we may collect precise or approximate location data from your device to provide location-based services such as showing nearby restaurants, estimating delivery times, and optimizing delivery routes. You can disable location services through your device settings at any time, though this may limit certain Platform features.

3. How We Collect Information

Directly From You

We collect information you voluntarily provide when you create an account, place an order, update your profile, contact customer support, respond to surveys, or participate in promotions.

Automatically

We automatically collect certain information when you access the Platform through cookies, web beacons, pixels, and similar tracking technologies. We also use analytics tools to understand how users interact with the Platform and to improve our services.

From Third Parties

• Restaurant partners — Information related to order fulfillment, menu availability, and delivery status.
• Payment processors — Transaction confirmation, fraud detection signals, and payment status updates.
• Social login providers — If you choose to sign in using a third-party service (e.g., Google, Apple, or Facebook), we receive basic profile information as authorized by you through that service.
• Analytics providers — Aggregated usage data and demographic insights from services such as Google Analytics.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment — Processing, confirming, and delivering your food orders, including communicating order details to restaurant partners and delivery providers.
• Account management — Creating and maintaining your account, authenticating your identity, and managing your preferences and saved addresses.
• Customer support — Responding to your inquiries, resolving disputes, troubleshooting issues, and processing refund requests.
• Personalization — Customizing your experience by showing relevant restaurants, menu recommendations, and promotions based on your order history and preferences.
• Marketing and communications — Sending promotional emails, push notifications, and in-app messages about new features, restaurant openings, special offers, and platform updates. You can opt out of marketing communications at any time.
• Analytics and improvement — Analyzing usage patterns and trends to improve the Platform, develop new features, and enhance the overall user experience.
• Fraud prevention and security — Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.
• Legal compliance — Complying with applicable laws, regulations, legal processes, and government requests.

5. How We Share Your Information

We share your information with the following categories of recipients, only to the extent necessary to provide and improve our services:

• Restaurant partners — We share your name, delivery address, phone number, and order details with restaurant partners to fulfill your orders. Restaurants may use this information only for order preparation and delivery purposes.
• Payment processors — We share payment information with third-party payment processors (e.g., Stripe, Square) to process transactions securely.
• Delivery providers — When third-party delivery services are used, we share your name, delivery address, phone number, and order details to facilitate delivery.
• Analytics and advertising providers — We share aggregated, de-identified usage data with analytics and advertising partners to measure performance and improve our marketing efforts.
• Legal and regulatory authorities — We may disclose your information when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers — In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your interactions with the Platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

• Essential cookies — Required for the Platform to function properly. These cookies enable core features such as authentication, session management, and shopping cart functionality. They cannot be disabled.
• Analytics cookies — Help us understand how visitors interact with the Platform by collecting information about pages visited, time spent, and navigation patterns. We use this data to improve the Platform experience.
• Advertising cookies — Used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. These cookies may track your browsing activity across different websites.
• Preference cookies — Remember your settings and preferences, such as language, location, and display options, to provide a more personalized experience.

Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the Platform. You can also opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Account data — Retained for the duration of your account. Upon account deletion request, your personal data will be deleted or anonymized within 30 days, except where retention is required by law.
• Order records — Retained for 7 years to comply with tax, accounting, and regulatory obligations.
• Payment transaction records — Retained as required by applicable financial regulations and payment processor agreements.
• Usage and analytics data — Aggregated and de-identified data may be retained indefinitely for analytics and research purposes.
• Customer support records — Retained for 3 years following the resolution of your inquiry to ensure quality and for dispute resolution purposes.

8. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

• Encryption in transit — All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at rest — Sensitive data stored on our servers is encrypted using AES-256 encryption.
• Access controls — We enforce strict role-based access controls, ensuring that only authorized personnel can access personal information on a need-to-know basis.
• Regular security audits — We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential risks.
• Incident response — We maintain an incident response plan to promptly address any data breaches or security incidents. In the event of a breach that affects your personal information, we will notify you and applicable authorities as required by law.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access — You may request a copy of the personal information we hold about you.
• Right to correction — You may request that we correct any inaccurate or incomplete personal information.
• Right to deletion — You may request that we delete your personal information, subject to certain legal exceptions (e.g., retention required for tax or legal compliance).
• Right to portability — You may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to opt out of marketing — You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any promotional email or by updating your notification preferences in your account settings.
• Right to restrict processing — You may request that we limit how we use your personal information in certain circumstances.

To exercise any of these rights, please contact us at privacy@menu.com. We will respond to your request within 30 days, or sooner if required by applicable law. We may ask you to verify your identity before processing your request.

California residents may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Please refer to our California Privacy Notice for more information.

10. Children's Privacy

The Platform is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at privacy@menu.com so we can take appropriate action.

11. International Data Transfers

Menu is headquartered in the United States, and your personal information is processed and stored on servers located in the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where required by applicable law, we use appropriate safeguards for international data transfers, including standard contractual clauses approved by relevant authorities, to ensure that your personal information receives an adequate level of protection regardless of where it is processed.

12. Third-Party Links

The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by Menu. This Privacy Policy applies only to our Platform. We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you visit before providing your personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you through one or more of the following methods:

• Email notification to the address associated with your account
• A prominent notice on the Platform prior to the changes taking effect
• Updating the “Last updated” date at the top of this page

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below.