Privacy Policy

Scope and data roles

This Privacy Policy applies to Fyko Menu's websites, public landing pages, branch pages, menu pages, table menu pages, restaurant onboarding forms, admin portals, WhatsApp-connected workflows, KOD displays, Restaurant TV pairing and playback functions, billing workflows, add-on requests, support flows and related services.

Fyko Menu may act in more than one data role depending on the activity:

• as controller for its own business, support, security, subscription, billing and platform-operations data
• as service provider or processor-like operator for restaurant-managed data processed to route menus, orders, WhatsApp alerts or branch workflows
• together with a restaurant or branch, where each party independently determines aspects of customer communication or order fulfilment

If your request or complaint relates mainly to a food order, the relevant restaurant or branch may be the first operational contact. If the issue relates to the Fyko Menu platform itself, this policy applies directly to Fyko Menu's handling of your data.

Data we collect

Depending on the workflow, Fyko Menu may collect or generate the following categories of data:

• Restaurant account data: restaurant name, branch details, branding, legal/business contact details, account owner details, admin user data, usernames and password hashes, support records and subscription details.
• Public ordering data: customer name, phone number, address, payment method selection, table code, order reference, order items, quantities, timestamps, and order status history.
• CRM and support data: repeat-order history, branch-level customer history, incoming and outgoing WhatsApp message logs, contact names and related operational notes.
• Uploaded content: menu images, restaurant logos, PDFs submitted for fulfilment add-ons, video files for Restaurant TV, and other files uploaded by authorised users.
• Billing and request data: plan assignments, add-on requests, branch requests, request IDs, statement entries, payment references, audit logs and billing notes.
• Security and device data: IP address, browser/user agent, session data, cookies, local storage entries, branch magic-link records, TV device pairing tokens, pairing attempts and security events.

In the current build, Fyko Menu records payment method selection but does not natively store full card numbers within the platform.

How we use data

Fyko Menu uses data to operate the service, including to:

• create, approve and manage restaurant, branch and user accounts
• publish menus, branch pages, QR flows, table ordering and restaurant showcase pages
• route customer orders to branches and branch users
• send or log WhatsApp alerts, support messages and operational responses
• support branch login recovery, secure magic links and TV pairing
• generate statements, recurring billing entries, add-on entitlements and audit records
• detect misuse, investigate fraud, protect the platform and maintain service integrity
• comply with legal obligations, respond to rights requests, and defend legal claims where necessary

Where required by applicable law, Fyko Menu relies on consent. In other cases, Fyko Menu may process data where necessary for service performance, legitimate operational interests, compliance obligations, security, dispute handling, or the exercise or defence of legal rights, subject to applicable UAE law.

Sharing, hosting and cross-border transfers

Fyko Menu may share relevant data with:

• the restaurant or branch to which an order, request or operational workflow relates
• hosting, database, infrastructure, storage, security and developer support providers
• Meta/WhatsApp or connected messaging infrastructure where WhatsApp workflows are used
• service partners involved in manual fulfilment add-ons such as flipbook setup, data entry or media preparation
• professional advisers, auditors, insurers or collection/support partners where reasonably required
• governmental, regulatory, judicial or law-enforcement authorities where legally required

Because Fyko Menu may use internet infrastructure, cloud systems, messaging providers or technical service partners, data may be processed or accessed outside the Emirate or outside the UAE, subject to the safeguards, legal basis and transfer controls required by applicable law.

Restaurants using Fyko Menu remain responsible for providing their own lawful notices and instructions to their customers where the restaurant determines the customer relationship and communication purpose.

Your privacy rights

Subject to applicable law and Fyko Menu's role in a given workflow, you may have the right to request:

• confirmation of whether relevant personal data is being processed
• access to personal data and related processing information
• correction, updating or completion of inaccurate data
• erasure or restriction where retention is no longer justified or consent has been withdrawn, subject to legal and operational exceptions
• withdrawal of consent where processing depends on consent
• objection to certain processing where applicable

If the request mainly concerns restaurant-controlled customer data, Fyko Menu may direct the request to the relevant restaurant or coordinate with that restaurant before acting, because the restaurant may be the primary party deciding how the order relationship is handled.

Retention, cookies, local storage and security

Fyko Menu retains data for as long as reasonably necessary to provide the service, protect the platform, resolve disputes, operate billing, and meet legal, tax, accounting, consumer-protection and evidentiary obligations.

Fyko Menu may use cookies, local storage and similar browser techniques for session handling, saved checkout data, order tracking convenience, branch or TV access continuity, and security functions such as pairing and session control.

Reasonable technical and organisational measures are used to protect data, including access control, hashed credentials, audit records, controlled operational links, single-use branch login tokens, device-bound TV pairing, and related safeguards. No internet-facing platform can guarantee absolute security, and users must also help protect their own credentials and devices.

Fyko Menu is not intended for unsupervised use by young children. Restaurants remain responsible for any age-restricted goods or services they publish through the platform and for lawful customer interaction in their sector.

Updates, complaints and contact

Fyko Menu may update this Privacy Policy when platform workflows, legal obligations, or support arrangements change. Updated versions may be posted on the website or made available through the platform.

If you wish to make a privacy request or complaint about Fyko Menu's own handling of data, you should use the official Fyko Menu support channel or a documented written request through the business contact route used for your account or service relationship. If the issue relates to a restaurant order, you may also need to contact the relevant restaurant or branch directly.

Nothing in this policy limits rights or protections that apply under mandatory law in the UAE, including applicable personal data protection and consumer protection rules.