Draft. These texts have not been checked by a lawyer and are not legal advice — they need review, along with the real company details, before publication.
Privacy policy
How we collect, use and protect personal data. The short answer: we collect no personal data at all from the guests who open your menu.
01 Roles
For your own account data, Tapmenu is the controller. For what you enter into the menu, your business is the controller and we are the processor.
02 The public page
The menu page has no forms, no cookies and runs no JavaScript. We do not log the visitor, we do not store IP addresses in identifiable form and we build no usage profiles.
03 What we collect
Only what the service needs to run:
- Account details: name, email, business, role
- Menu content: items, prices, photos, logo
- Aggregate scan statistics, with no visitor identifier
- Billing data, through our payment provider — we never store card numbers
04 Legal basis
Processing of account data relies on performance of the contract and, for billing, on compliance with tax obligations. We neither request nor process special categories of data.
05 Where data is stored
All data is hosted in a data centre inside the European Union. We do not transfer data outside the EU/EEA without appropriate safeguards.
06 Retention
Menu content is kept for as long as the subscription lasts. Account data is deleted 30 days after termination, except invoices, which are kept for the period tax law requires.
07 Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Requests are answered within 30 days at privacy@tapmenu.gr. You may also lodge a complaint with the Hellenic Data Protection Authority.
08 Sub-processors
We use a small number of providers for hosting, email delivery and payments. An up-to-date list is available on request, and each is bound by equivalent terms.
09 Security
Encryption in transit, per-tenant data isolation, role-based access control and maintained backups. In the event of a breach we notify you without undue delay.