In short
- We never sell personal data.
- Your restaurant owns its customer data — we process it only to run your ordering, loyalty and marketing.
- We use your details to set up, support and bill your account, and to reply to enquiries.
- You can ask to access, correct or delete your data at any time.
- Questions? Email hello@zapiomenu.com.
Who we are
This Privacy Policy explains how Zapio Menu (“we”, “us”) collects, uses, shares and protects personal data when you visit zapiomenu.com, contact us, start a trial, create an account, or use the Zapio Menu platform (the “Services”). We are based at #3001D Aspin Tower, Financial Center, Dubai, United Arab Emirates.
We aim to handle personal data in line with applicable UAE law, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and any other data-protection laws that apply to you.
Two kinds of data we handle
| Whose data | Our role | Examples |
|---|---|---|
| Restaurant owners, staff, website visitors and people who contact us | We decide how this data is used (controller). | Your name, email, phone, restaurant details, account and billing information, messages you send us. |
| Your customers (people who order from your restaurant) | We process this data on your behalf and on your instructions (processor). Your restaurant is responsible for it. | Guest names, phone numbers, delivery addresses, order history, loyalty points, marketing preferences. |
If you are a guest who ordered from a restaurant using Zapio Menu, please contact that restaurant first about your data. We will help them respond to your request.
What we collect
Information you give us
- Contact and trial forms: name, restaurant name, mobile/WhatsApp number, email, emirate, number of branches, plan of interest and your message.
- Account information: login email, password (stored securely in encrypted form), business details, staff users.
- Billing information: plan, invoices and payment status. Card details are handled by our payment providers; we do not store full card numbers.
- Content you upload: menus, prices, photos, logos and other restaurant content.
- Communications: emails, WhatsApp messages, calls and support requests.
Information collected automatically
- Device and usage data: IP address, browser type, pages visited, and actions in the dashboard, used to keep the Services secure and working.
- Cookies and similar technologies: see “Cookies” below.
Information about your customers
When guests order through your ordering page, app or QR menu, we process the details needed to complete and manage their orders and your loyalty and marketing programs, on your behalf.
How we use data
- To provide, set up and support the Services, including building your menu, ordering pages and apps.
- To respond to enquiries, demo requests and trial sign-ups, including by WhatsApp, phone and email.
- To manage your account, subscription and billing.
- To keep the Services secure, prevent fraud and fix problems.
- To improve our products and understand how they are used, using aggregated or de-identified data where possible.
- To send you service messages and, where permitted, news and offers about Zapio Menu — you can opt out at any time.
- To comply with legal obligations and enforce our Terms of Service.
We process personal data where it is necessary to perform our contract with you, where you have given consent, where we have a legitimate business interest that is not overridden by your rights, or where the law requires it.
International transfers
Some of our service providers may store or process data outside the UAE. Where this happens, we take steps to make sure the data receives an adequate level of protection in line with applicable law, for example through contractual safeguards.
How long we keep data
- Enquiries and trial requests: for as long as needed to respond and follow up, and normally no longer than 24 months if you do not become a customer.
- Account and restaurant data: for as long as your account is active, and for up to 30 days after it ends so you can request an export.
- Billing records: for the period required by UAE tax and commercial law.
- Your customers' data: as instructed by your restaurant, and deleted or returned when your account ends unless the law requires us to keep it.
How we protect data
We use technical and organisational measures to protect personal data, including encryption in transit, access controls, secure password storage and working with reputable infrastructure and payment providers. No system is completely secure, so please keep your login details safe and tell us straight away if you think your account has been compromised.
Your rights
Depending on the law that applies to you, you may have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, or to restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent — including unsubscribing from marketing.
To exercise these rights, contact us using the details below. We may need to verify your identity before responding, and we will reply within the time required by law. If you are not satisfied, you may have the right to complain to the relevant data-protection authority.
Children
Our Services are designed for businesses and are not directed at children. We do not knowingly collect personal data from children under 18 for our own purposes.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last updated” date. If changes are significant, we will let account holders know by email or in the dashboard.
Contact us
For any privacy question or request, contact us:
#3001D Aspin Tower, Financial Center, Dubai, United Arab Emirates
Email: hello@zapiomenu.com · WhatsApp / phone: +971 52 708 1010