Privacy Policy
Last updated: June 2026
This policy explains what personal data QR Menu processes, why, and the rights you have. We collect only what we need and never sell your data.
Who we are
QR Menu is the data controller for this website. For privacy questions or to reach our Data Protection Officer, email [email protected].
Data we collect
Account details you provide (name, email, restaurant), order and payment metadata, support messages, and basic device and usage data via cookies.
Why we use it
To provide and secure the service, process orders and payments, respond to support, meet legal obligations, and — only with consent — send marketing.
Legal bases
We rely on performance of a contract, our legitimate interests in running and improving the service, your consent, and compliance with legal obligations.
Sharing
We share data only with processors that help us run the service, such as payment providers (iyzico, PayTR) and hosting. We do not sell personal data.
International transfers
Where data leaves your region, we use appropriate safeguards such as Standard Contractual Clauses and follow Schrems II transfer guidance.
Retention
We keep personal data only as long as needed for the stated purpose or as the law requires, then delete or anonymize it through periodic purge jobs.
Your rights
You may access, correct, delete, port, restrict or object to processing, and withdraw consent at any time. Use the Data requests page or email us. You may also complain to your supervisory authority.
Security
We protect data with encryption in transit and at rest, access controls, and audit logging of access to personal data.