Privacy notice

Last updated: October 15, 2026

The restaurant whose menu you are using is responsible for your personal data. Octopus Menu runs the menu for the restaurant and handles the data on its behalf.

Contact the restaurant

For any question about your data, or to use your rights, contact the restaurant directly.

If you cannot reach the restaurant, email privacy@octopusmenu.com and Octopus Menu will pass your message on.

What is collected and why

  • Feedback: if you send the restaurant feedback, your rating and comment, the menu you were reading and, if you scanned a table’s QR code, your table number. Your name, email and phone only if you choose to give them, so the restaurant can reply to you.
  • Loyalty card: if you join the restaurant’s loyalty card, your first name, your email (to send you a link to your card) and your stamps and rewards.
  • Email sign-up: if you sign up for the restaurant’s news and offers, your email address, so it can send you them.
  • Your visit: a cookie that remembers which table’s QR code you scanned, and one that lets the menu welcome you back. Neither holds your name.
  • Analytics, only if you accept analytics cookies: which menus and dishes are viewed, so the restaurant can see what is popular. If the restaurant has added its own analytics or advertising tags (such as Google Analytics or the Meta Pixel), accepting also lets them load, and they may share data with those companies.
  • Technical data: your IP address and browser details, used to show you the menu and protect it from abuse. The menu loads fonts from Google, which receives your IP address.

How long it is kept

  • Your name, email, phone and table number on feedback: deleted 90 days after you send it. The rating and comment stay with the restaurant.
  • Loyalty card: your first name and email are deleted after 12 months without a stamp, as soon as you delete your card, or when the restaurant stops using Octopus Menu.
  • Email sign-up: until you ask the restaurant to remove you, or the restaurant stops using Octopus Menu.
  • Visit cookies: the table for 4 hours, the welcome-back cookie for 30 days.
  • Analytics: between 7 days and as long as the restaurant uses Octopus Menu, depending on the restaurant’s plan.

Your rights

You can ask the restaurant to see, correct or delete your data, to stop using it, or to give you a copy. Where you gave consent, you can withdraw it at any time.

You can delete your loyalty card yourself at any time, from the card.

You can change your cookie choice at any time:

If you are unhappy with how your data is used, you can complain to your data protection authority (in the UK, the Information Commissioner’s Office, ico.org.uk).

Who else handles it

Octopus Menu, and the service providers it uses to run menus. Octopus Menu uses your data only to run the menu for the restaurant and to keep the service secure, and never sells it. Octopus Menu’s service providers