Privacy Policy · HalalQR

This Privacy Policy explains how HalalQR ("HalalQR", "we", "us" or "our") collects, uses, and protects information when you use our QR menu and restaurant management platform (the "Service"). It applies to restaurant owners and staff who hold an account with us ("Customers") and to diners who view a restaurant's menu or make a reservation through the Service ("Diners").

1. Information We Collect

Account information. When a restaurant registers, we collect the business name, contact name, email address, phone number, and a hashed password. We never store passwords in plain text.

Business content. Menus, categories, items, prices, images, table and seating data, and reservation settings that you add to the Service.

Diner information. When a Diner places a reservation we collect the name, email, phone number, party size, and any special requests they provide. This data belongs to the restaurant the Diner is booking with; HalalQR processes it on the restaurant's behalf.

Usage data. Log data such as IP address, browser type, pages viewed, and menu view counts, used to operate and improve the Service.

2. How We Use Information

To provide, maintain, and secure the Service;
To create and manage accounts, including our manual account approval step;
To deliver reservation confirmations and related notifications;
To respond to support and contact requests;
To analyze usage and improve features and performance;
To comply with legal obligations.

3. How We Share Information

We do not sell personal information. We share it only with: service providers who help us run the platform (e.g. hosting, email delivery, and the analytics provider described below) under appropriate confidentiality obligations; the restaurant a Diner interacts with; and authorities where required by law or to protect our rights and users.

4. Cookies

We use cookies and similar technologies to keep you signed in and to operate the Service. See our Cookie Policy for details.

5. Analytics

We use Yandex Metrika, a web analytics service, to understand how the Service is actually used so that we can make it faster and easier to use. It tells us things like which pages are slow, where a menu is hard to read on a phone, and where people give up part-way through booking a table — the problems we would otherwise never hear about.

For this purpose Metrika sets cookies and collects usage data: pages viewed, approximate location derived from your IP address, device and browser type, the site you arrived from, and on-page activity such as clicks and scrolling. It also records session replays (Webvisor), which play back that on-page activity so we can see where a page is confusing or broken.

We hide what you type into the reservation form. The name, email, phone number, special requests and confirmation code fields are marked so their contents are not captured in recordings — we can see that a field was filled in, but not what was written in it. We do not use analytics to identify individual visitors, and we never sell this data.

You can stop this collection at any time by blocking cookies in your browser, or by using Yandex's opt-out.

6. Data Retention

We retain account and business data for as long as your account is active and as needed to provide the Service. Reservation data is retained according to the restaurant's needs and applicable law. You may request deletion of your data as described below.

7. Security

We use industry-standard measures including encrypted password storage, encrypted connections (HTTPS), and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. Diners should also contact the restaurant they interacted with, as that restaurant controls their reservation data.

9. International Transfers

Your information may be processed in countries other than your own. Where required, we put appropriate safeguards in place for such transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date above.

12. Contact Us

For privacy questions or requests, contact us at [email protected] or via our contact page.