QR Food Menu is a Software-as-a-Service (SaaS) digital menu platform operated by Needinfotech, with offices at E-557, Budh Nagar, Inderpuri, New Delhi — 110012, India. In this policy, "we", "us", and "our" refer to Needinfotech. For privacy-related questions, contact us at support@needinfotech.com.
We collect the following categories of information when you use the Service:
We use your information to:
We do not sell your personal information or your customers' data to third parties, and we do not use your menu data to train artificial intelligence models.
If you are located in the European Economic Area, the United Kingdom, or Thailand, we rely on the following lawful bases under the EU GDPR, UK GDPR, and Thailand's Personal Data Protection Act (PDPA):
We use strictly necessary cookies at all times, and analytics cookies only with your consent. Strictly necessary cookies are required for the Service to function — keeping you signed in, securing forms against cross-site request forgery, and remembering basic display preferences.
For analytics we use Google Analytics 4. In line with India's Digital Personal Data Protection Act, 2023 we ask first: nothing is loaded and no analytics cookie is set until you accept on the cookie banner. If you reject, or simply close the banner without choosing, no request is made to Google at all. Rejecting costs you nothing — every part of the site works the same either way. You can change or withdraw your choice at any time from the Cookie Preferences link in the footer of any page; withdrawing also deletes the analytics cookies already stored on your device. We load no advertising or marketing trackers (no Google Tag Manager, no Meta Pixel) and we do not track you across other websites.
| Category | Examples | Purpose | Typical duration |
|---|---|---|---|
| Analytics (consent required) | _ga, _ga_<id> |
Google Analytics 4 — which pages are used, so we can improve them. Set only if you accept; deleted if you withdraw. | Up to 2 years |
| Strictly necessary | QRFM_SESSID, CSRF token |
Login sessions, security and core functionality. Cannot be switched off. | Session / up to 2 hours |
| Preferences | googtrans, menu_lang |
Remembers your chosen menu language. Your cookie choice itself is stored in your browser's local storage, not a cookie. | Up to 12 months |
Public restaurant menus (the pages diners reach by scanning a QR code) carry no third-party advertising or analytics tags — only our own first-party, anonymous visit counts, which set no advertising cookies. In line with India's Digital Personal Data Protection Act, 2023, we do not use your data for cross-context behavioural advertising.
We use a small set of trusted sub-processors that may process your data on our behalf:
Our servers and some of our sub-processors are located outside India and the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or the recipient country's adequacy decision, as applicable.
We take reasonable technical and organisational measures to protect your information, including:
No system is 100% secure. If we become aware of a personal-data breach affecting you, we will notify you without undue delay as required by law.
When a diner places an order from a restaurant's menu, we store the order itself — items, quantities, total, table number, an optional first name and an optional note — on behalf of that restaurant.
We do not ask a diner for a phone number, and we do not store one. Orders are handed off through WhatsApp from the diner's own device, so the diner's number goes directly to the restaurant's WhatsApp inbox and never reaches our systems. We hold no contact list of diners and send diners no marketing of any kind.
For the order data we do hold, the restaurant is the data controller and we act as its processor. A diner who wants an order record corrected or erased should contact the restaurant directly; you may also contact us using the details below and we will pass the request on.
Order records are automatically deleted after 180 days.
We retain your account and menu data for as long as your account is active. If you cancel your subscription, your data is retained for up to 90 days to allow reactivation, after which it is permanently deleted from active systems. Backups are rotated and overwritten in the normal course of operations. Billing records may be kept for longer where required by tax or accounting law.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, email support@needinfotech.com. We will respond within 30 days.
United States (California, Virginia, Colorado, Connecticut and other states). If you are a US resident, you have the right to know what personal information we collect, to access and delete it, and to correct it. We do not sell or share personal information, and we do not use it for targeted (cross-context behavioural) advertising: we set no marketing or advertising cookies and load no advertising trackers. There is therefore no "sale" or "sharing" to opt out of. We do not discriminate against you for exercising any of these rights.
Australia. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You may request access to or correction of your personal information, and may complain to us or to the Office of the Australian Information Commissioner (OAIC). Where we disclose information to overseas recipients (Section 7), we take reasonable steps to ensure it is handled consistently with the APPs.
The Service is intended for restaurant operators and is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be communicated by email and reflected in the "Last updated" date at the top of this page. Your continued use of the Service after the effective date of any change indicates your acceptance of the updated policy.
For questions about this Privacy Policy or to exercise your data rights, contact:
Needinfotech — QR Food Menu
E-557, Budh Nagar, Inderpuri,
New Delhi — 110012, India
Email: support@needinfotech.com