1. Who we are
QR Menu (“we”, “us”) runs the QR Menu service in Cambodia. For the details of business owners and their staff, we decide how the information is used. For information about a business's own customers, such as orders and bookings, the business decides how it is used and we handle it on the business's behalf.
2. Information we collect
From business owners and staff
- Account details: name, email address, phone number, business name and address, and a password (stored only in scrambled, hashed form).
- Business content: your menu, photos, logo, opening hours, location and settings.
- Sales and finance records that you enter: point-of-sale receipts, income and expenses, and employee and payroll details such as names, phone numbers and salaries.
- Billing: your plan, invoices, and the transaction reference and approval code from ABA PayWay. We never receive your bank login or card details.
From customers who use a menu
- Orders and bookings: what was ordered and any details the customer types in, such as a name, phone number, delivery address, note, date and number of guests.
- Location, only when ordering: if a business limits orders to customers nearby or charges delivery by distance, the phone asks permission to share its location. We use it to check the distance and store it with that order.
- Menu usage: scans, dishes viewed, the language chosen and the table, linked to a random ID that lasts for one visit. We do not use it to identify anyone.
Automatically
- Technical information such as IP address, browser type and the time of requests, kept in server logs for security and to fix problems.
3. How we use it
- to run the service: show menus, send orders to the business, run the point of sale and produce reports;
- to create and secure accounts, including emailing sign-up codes;
- to bill paid plans, confirm payments with the bank and email receipts;
- to answer support requests and tell you about important changes to the service;
- to prevent fraud and abuse, and to meet legal and tax obligations;
- to improve QR Menu, using combined statistics that do not identify individuals.
We do not sell personal information, and we do not show advertising.
5. If you are a customer of a business
When you order or book through a business's QR menu, that business receives your order details and is responsible for how it uses them. To see, correct or delete your information, please contact the business first. If you cannot reach them, email us and we will help.
6. Cookies and storage on your device
We do not use advertising or tracking cookies. Our website and apps store a few things in your browser so they work properly:
- your language and light or dark theme;
- your sign-in session in the merchant app;
- on a point-of-sale device, the menu and any sales made while offline, until they are sent;
- on a public menu, your language choice, a random ID for the visit, and whether you have already seen a promotion.
Clearing your browser data removes them. Do not clear it on a till that still has unsynced offline sales.
7. How long we keep it
- Account, menu and sales information: while the account is open. When an account is closed, we delete or anonymise it within 90 days.
- Invoices and payment records: for as long as tax and accounting law requires.
- Unfinished sign-ups and expired sign-up codes: deleted automatically.
- Server logs: for a limited time, normally no more than 90 days.
8. Security
Information is sent over encrypted connections (HTTPS). Passwords and sign-up codes are stored only in hashed form. Each business can only see its own data, and staff only see what their role allows, for example cashiers only see their own sales. No system is completely secure, so please use a strong password and remove staff who leave.
9. Your choices and rights
You can see and update most of your information in the merchant app. You can also ask us to:
- give you a copy of your information;
- correct information that is wrong;
- delete your account and information, unless we must keep it by law;
- stop sending you non-essential emails.
Email [email protected] from your account email address. We reply within 30 days.
10. Children
Merchant accounts are for adults running a business. Menus are open to everyone, but we do not knowingly collect personal information from children beyond what a business needs to take an order.
11. Changes to this policy
We will show the new date at the top of this page when we update this policy, and tell account owners by email or in the app about important changes.
This policy is available in English, Khmer and Chinese. If the versions differ, the English version applies.
12. Contact us
Questions or requests about your privacy: [email protected].