Privacy

What My Quick Menu stores, why, for how long, and who else sees it. Plain language.

Last updated 5 October 2026.

Who is responsible

My Quick Menu is built and run by 4CS. Each restaurant using it decides what happens with its own guests' orders, bookings and feedback. We store and process that data for the restaurant, and only to run these features. For your account as a restaurant owner or team member, we are responsible ourselves.

Questions about a booking, order or feedback you gave a restaurant: ask the restaurant first. Anything else: contact 4CS (see Questions).

You don't need an account to read a menu. We don't ask for your name, email or location.

"Your list", your dietary and allergen filters, and the orders you sent from your table in the last 12 hours are kept only in your own browser on your device. Your phone also keeps a copy of menus you opened and their photos, so they still open when the Wi-Fi drops. Clearing your browser data removes all of it.

So restaurants can see how their menu is used, we count anonymous events: that the menu was opened, that a dish was opened or added to a list, and which language was chosen, with the time. We don't use cookies for this and store nothing about you: no IP address, device, browser or identifier. Search engines, link previews and signed-in staff aren't counted. Counts are deleted after about 13 months.

Ordering from your table

If the restaurant lets you order from the table, sending your list creates an order with the dishes and choices, the table number, the language and your note, if you wrote one. It appears on the restaurant's kitchen screen and in its sales figures. Orders contain no name or contact details, and they are deleted after about 13 months.

Booking a table

To book, you give your name, phone number, the party size, date and time, and optionally an email address and a request. The restaurant uses these to hold your table, confirm or cancel it and remind you shortly before. Its staff can add their own note to the booking. To spot repeat guests, the restaurant sees how many times your phone number has booked with them before, and whether you came. It never sees bookings you made with other restaurants.

Confirmations and reminders are sent by text message and, if you gave one, by email (see Services we use). The link in those messages lets you see or cancel the booking. Bookings are deleted about 13 months after their date.

Rating your visit

If you rate your visit from the menu, we store the stars, your comment, the language and the table number if you came from a table code. With 1 to 3 stars you can leave a way to reach you; only the restaurant sees it, and the restaurant may be emailed about it. That contact detail is removed after a year; the rating and comment stay. If you choose to review the restaurant on Google, that happens on Google's site, under Google's terms.

Protecting against abuse

To stop anyone from flooding a restaurant with fake orders, bookings, ratings or statistics, your connection's address is used briefly in the server's memory to limit how many can be sent. It is never written to the database. Our hosting provider keeps short-lived technical logs of requests, as every website host does.

Restaurant owners and their teams

To run your account we store your name, email, password (scrambled, never readable), your role and, for owners, the company tax number (NIPT). We also store what you publish (branch details, logos, banners, dishes, prices, photos, translations and the restaurant website) and what you enter to run the restaurant: tables, stock, recipes, shift rotas (including the names of people on them), end-of-day sales and who recorded each change.

A sign-in cookie keeps you logged in, and a security cookie protects forms from being sent by other sites. We don't use advertising or tracking cookies.

When you delete a branch, category or dish it is hidden right away rather than erased, so a mistake can be undone. The same applies when an administrator removes an account. Ask us if you want your account and data erased for good.

Services we use

We don't sell data or use it for advertising. These providers handle data only to deliver their part of the service:

Render hosts the app and its database.
Resend or Brevo deliver email: booking messages to guests who gave an email, new-booking and low-rating notices to restaurants, and invites and password resets to staff.
Twilio, or an SMS provider the restaurant chooses, delivers booking text messages to the guest's phone.
Google Gemini suggests translations when a restaurant asks for them. Only dish and category text that will appear on the public menu is sent, never anything about guests or staff. On Google's free tier, Google may use that text to improve its products.
Google Fonts and unpkg serve the typefaces and icons. Like any website, they receive your device's address when your browser loads them.
Google Maps loads on a restaurant's website only when you tap the map. Until then, no request is made to Google.

Your rights

You can ask to see, correct or delete the data held about you, or object to how it is used. For guest data, the restaurant can do most of this directly; we help when needed. You can also complain to the data protection authority in your country (in Albania, the Commissioner for the Right to Information and Protection of Personal Data).

Questions

Contact the restaurant or the team that runs your account, or 4CS, who build and operate My Quick Menu.