Privacy notice

This notice explains how Giveamenu handles personal data when you visit our website, create or administer a restaurant account, contact us, or connect a third-party service.

Who is responsible

Giveamenu operates giveamenu.com and is responsible for merchant accounts, platform administration, security, service improvement, billing administration, support, and its own marketing activity. Contact us at [email protected].

For orders, reservations, restaurant communications, and reviews submitted to a restaurant storefront, the restaurant normally decides why the data is used. Giveamenu provides the platform and processes that data for the restaurant, except where we must use it for platform security, fraud prevention, legal compliance, or service administration.

Data we handle

• Account and business data, including names, contact details, login identifiers, roles, permissions, restaurant details, and support messages.
• Restaurant content, including menus, prices, images, promotions, posts, design instructions, and AI-assisted drafts.
• Operational data, including orders, reservations, payments status, customer feedback, audit events, and service logs.
• Device and usage data where enabled, including consent choices, page or feature use, approximate technical diagnostics, and security events.
• Google account and Business Profile data only when an authorised merchant deliberately connects Google Business Profile.

Why we use data

We use data to provide and secure the service, authenticate users, create and host restaurant websites, process merchant instructions, support ordering and reservations, respond to support requests, maintain records, prevent abuse, comply with law, and improve the product. Depending on the activity, the basis is performance of a contract, steps requested before a contract, legal obligations, legitimate interests in operating a secure service, or consent for optional storage and marketing.

Google user data

Connecting Google Business Profile is optional. After a merchant starts the Google connection flow and grants access, Giveamenu can identify the connected Google account, list Business Profile accounts and locations the user is authorised to manage, and let the merchant select a restaurant location.

For the selected location, Giveamenu may import reviews and eligible business information. It may prepare menu updates, review replies, and promotion or news posts. Connecting an account does not itself change a Business Profile. A merchant must review and specifically confirm a preview before Giveamenu sends a mutation to Google.

OAuth access and refresh tokens are stored encrypted and are not displayed to restaurant staff. Google-provided Business Profile content cached for performance is deleted within 30 calendar days. A merchant can disconnect Google Business Profile from store settings; disconnection revokes the available token and removes cached Google content and local connection credentials. Giveamenu does not sell Google user data or use Business Profile access for lead generation or advertising.

Sharing and international processing

We share data only where needed with the relevant restaurant, authorised staff, hosting and infrastructure providers, payment and communications providers selected for the service, AI providers used for requested generation or extraction, professional advisers, and public authorities where legally required. Some providers may process data in other countries. Where required, Giveamenu uses an applicable adequacy mechanism or contractual safeguards.

Retention

Google Business Profile content is cached for no more than 30 calendar days. Optional storefront usage events are retained for up to 400 days so restaurants can compare seasonal performance. Consent records are retained for up to 400 days so that choices can be demonstrated and honoured. Other records are kept only for as long as needed for the service, the restaurant relationship, security, disputes, tax, accounting, and other legal requirements, then deleted or anonymised.

Your choices and rights

You may ask for access, correction, deletion, restriction, portability, or object to certain processing where applicable. You can withdraw optional cookie consent at any time using Privacy & cookie settings. Merchants can disconnect Google Business Profile from store settings. Requests concerning an order, reservation, or restaurant communication should normally be sent to that restaurant first.

Contact Giveamenu at [email protected]. You may also complain to the data protection authority that applies where you live or work, including the UK Information Commissioner where applicable.

Automated tools

Giveamenu uses AI to assist with menu extraction, translation, descriptions, images, and website drafts. These tools create proposals for review. Giveamenu does not use them to make solely automated decisions with legal or similarly significant effects about restaurant customers.