Privacy Policy

1. 🏢 Who We Are

RestoMenu Pro ("we", "us", "our") operates the website at https://quickbites.online and provides an online restaurant ordering and management platform ("the Service").

We are registered as a digital services business operating under Digitech Creative Marketing, Islamabad, Pakistan.

For privacy-related enquiries, contact us at: support@quickbites.online

2. 📊 Data We Collect

We collect different types of data depending on how you interact with our platform:

A. Restaurant Owners (registered accounts)

• Account information: Restaurant name, email address, password (encrypted), phone number, physical address
• Business information: Menu items, prices, categories, restaurant description
• Usage data: Login times, dashboard activity, settings changes
• Payment context: Plan type (Free, Basic, Pro) — we do not store credit card details

B. End Customers (people placing orders)

• Order information: First name, last name, phone number, email address (optional), delivery address (if applicable), order items, special instructions
• Transaction data: Order reference number, order total, order type, timestamp

C. Website Visitors

• Technical data: IP address, browser type, pages visited, time spent — collected automatically via server logs
• Contact data: Name, phone number, message — only if you use the chat widget

3. ⚙️ How We Use Your Data

We use the data we collect for the following purposes:

• To provide the Service: Creating and managing restaurant accounts, processing and displaying orders, generating order tracking pages
• To send notifications: Order confirmation emails to restaurant owners via EmailJS integration
• To respond to support requests: Messages sent via the chat widget are used solely to respond to your enquiry
• To improve the platform: Analysing usage patterns to fix bugs and add features
• To enforce our Terms: Detecting abuse, fraud, or violations of our Terms of Service
• To comply with legal obligations: Responding to lawful requests from authorities

We do not use your data for advertising profiling, automated decision-making, or selling to third parties.

4. 🤝 Data Sharing

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

• With restaurant owners: When you place an order at a restaurant on our platform, your name, phone, order details, and delivery address are shared with that restaurant so they can fulfil your order. By placing an order you consent to this.
• With EmailJS: We use EmailJS (emailjs.com) to send order notification emails. Order details pass through their service. EmailJS is GDPR compliant.
• With Hostinger: Our hosting provider stores all data on their servers. Hostinger is ISO 27001 certified.
• With legal authorities: If required by law, court order, or government authority in Pakistan or applicable jurisdiction.

5. 🍪 Cookies

We use a minimal number of cookies to operate the platform:

• Session cookie: Keeps restaurant owners logged into their dashboard. This is essential for the platform to function. It expires when you close your browser or after 7 days.
• CSRF token cookie: Protects your account from cross-site request forgery attacks. Essential for security.

We do not use advertising cookies, tracking pixels, Facebook Pixel, Google Analytics, or any third-party tracking technology on this platform currently.

If we add Google AdSense or Analytics in the future, this policy will be updated and users will be notified.

6. 🗓 Data Retention

• Restaurant accounts: Retained for as long as the account is active. Deleted within 30 days of account closure request.
• Order data: Retained for 12 months then automatically purged, or sooner upon request.
• Chat messages: Retained for 90 days then deleted from our support records.
• Server logs: Automatically deleted after 30 days by our hosting provider.

Backups may retain data for an additional 30 days after deletion from the live system.

7. ✅ Your Rights

Regardless of your location, we respect the following rights:

• Right to access: Request a copy of all data we hold about you
• Right to correction: Ask us to correct inaccurate data
• Right to deletion: Request that we delete your personal data ("right to be forgotten")
• Right to portability: Request your data in a machine-readable format
• Right to object: Object to how we use your data
• Right to withdraw consent: For any processing based on consent

To exercise any of these rights, email us at support@quickbites.online with the subject line "Data Request". We will respond within 7 business days.

8. 👶 Children's Privacy

Our platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at support@quickbites.online and we will delete that information promptly.

9. 🔒 Security

We take data security seriously and implement the following measures:

• All passwords are hashed using bcrypt — we cannot see your password
• All data transmission is encrypted via SSL/HTTPS
• CSRF protection on all forms and API endpoints
• Database credentials are stored in server-side config files not accessible via browser
• Super admin panel is protected by separate credentials and a secret URL

However, no system is 100% secure. In the event of a data breach that affects your personal data, we will notify affected users within 72 hours of becoming aware of it.

10. 📝 Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered restaurant owners
• Display a notice on the platform dashboard

Your continued use of the platform after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

11. 📬 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: