Privacy Policy

1. Introduction

Welcome to sbmenu.com. We provide digital menu creation services for restaurants, cafes, hotels, and similar establishments worldwide. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: including first name, last name, username or similar identifier
• Contact Data: including email address (required for account creation) and telephone numbers
• Financial Data: including payment information processed and stored by our payment processor (Stripe)
• Authentication Data: information received from third-party authentication providers like Google when you choose to sign in using those services
• Transaction Data: including details about payments to and from you and other details of products and services you have purchased from us
• Technical Data: including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform
• Usage Data: including information about how you use our website and services

3. How We Use Your Data

We use your data to:

• Process your orders and manage your account
• Create and host your digital menus
• Provide you with the digital menu creation services you have requested
• Improve our website and services
• Recommend products or services that may interest you
• Comply with legal obligations
• Authenticate your identity through email verification or third-party services like Google

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Payment information is encrypted and securely processed by our payment processor.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

6. Legal Basis for Processing

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Performance of contract – processing necessary for the performance of a contract with you
• Legitimate interest – to improve our services and provide better user experience
• Consent – where you have explicitly given consent for specific processing activities
• Legal obligation – where we need to comply with a legal or regulatory obligation

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

We use the following types of cookies:

• Essential cookies: Required for the operation of our website
• Analytical/performance cookies: Allow us to recognize and count users and see how they move around our website
• Functionality cookies: Enable us to personalize content for you
• Targeting cookies: Record your visit to our website, pages visited and links followed

8. International Data Transfers

We may transfer, store, and process your information in countries other than your own. Our servers may be located outside your country or region. If you are located in the European Union, please note that we take additional measures to protect your personal data when transferred outside the EU, including using Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us so that we can take necessary actions.

10. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Right to withdraw consent

11. Third-Party Services

Our service uses the following third-party services:

• Stripe: We use Stripe for payment processing. When you make a payment, your payment information is sent directly to Stripe and is subject to their privacy policy. We do not store your full payment details on our servers.
• Google Sign-In: We offer Google Sign-In as an authentication option. When you choose to sign in with Google, we receive information from Google in accordance with your Google account settings and Google's privacy policy.

We recommend reviewing the privacy policies of these third-party services for more information on how they handle your data.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at: [email protected]

14. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and relevant authorities without undue delay, when feasible within 72 hours of becoming aware of such breach, in accordance with applicable laws. The notification will include information about the nature of the breach and recommendations to mitigate potential adverse effects.

15. How to Exercise Your Rights

To exercise any of your rights as outlined in this Privacy Policy, please submit a request by:

• Emailing us at [email protected]
• Using the "Privacy Settings" section in your account dashboard

We will respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made multiple requests. We may also need to verify your identity before proceeding with your request.

You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.