Overview
One Menu is a Restaurant Management System operated by OneMenu Pvt Ltd, a company registered in Pakistan with its registered office at 278, Jalilabad Colony, Multan, Pakistan. It is available at onemenu.pk and through our associated mobile applications and software services. In this policy, "we", "our", or "us" refers to OneMenu Pvt Ltd. We are committed to protecting the privacy of restaurant owners, their staff, and their customers who interact with our platform.
This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have regarding your information. By using One Menu's services, you agree to the collection and use of information in accordance with this policy.
This policy applies to all users of One Menu including restaurant owners, managers, staff members, and end customers who interact with systems powered by One Menu (such as WhatsApp ordering bots or QR ordering interfaces).
Information We Collect
Information You Provide Directly
When you register for One Menu or use our services, we may collect:
- Business name, owner name, and contact details (phone number, email address)
- Physical address of your restaurant or business location(s)
- Menu items, categories, pricing, and related content you upload
- Staff account information including names and assigned roles
- Vendor and supplier details entered into the purchases module
- Payment and billing information for your One Menu subscription
Information Collected Automatically
When you or your staff use One Menu, we automatically collect:
- Order data: items ordered, quantities, timestamps, order types, and amounts
- Transaction data: payment methods used, amounts received, discounts applied
- Device information: device type, operating system, browser type, and IP address
- Usage logs: which modules are accessed, actions taken, and system activity per user
- Location data from rider devices when the Fleet Management module is active (with rider consent)
Customer Data (End Users)
When customers interact with your restaurant through One Menu-powered channels (WhatsApp bot, QR ordering, or branded app), we may collect on your behalf:
- Customer name and WhatsApp or phone number
- Delivery address for delivery orders
- Order history and preferences
- Payment transaction references (we do not store full card numbers)
As a restaurant owner using One Menu, you are the data controller for your customers' information. One Menu acts as a data processor on your behalf. You are responsible for ensuring your customers are aware their data is being processed.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the One Menu platform and all its modules
- Process orders, generate invoices, and produce financial reports
- Send you service-related communications such as account updates or billing notices
- Improve and develop new features based on how the system is being used
- Provide technical support and respond to your queries
- Detect, prevent, and address fraud, security breaches, or system misuse
- Comply with applicable laws and legal obligations in Pakistan
We do not use your data or your customers' data for advertising purposes, and we do not sell data to third parties.
Sharing of Information
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:
Service Providers
We may share data with trusted third-party vendors who assist us in operating our platform, such as cloud hosting providers and SMS/WhatsApp API services. These providers are contractually obligated to keep your data confidential and use it only to provide the services we've requested.
Third-Party Integrations You Enable
If you choose to integrate One Menu with third-party delivery networks, payment gateways, or other services, data necessary for those integrations may be shared with those platforms under their own privacy policies.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities in Pakistan.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
Data Storage & Security
All data collected by One Menu is stored on secure cloud servers. We implement industry-standard security measures including:
- Encryption of data in transit using HTTPS/TLS protocols
- Role-based access controls so staff can only access the data they need
- Regular security assessments and vulnerability monitoring
- Audit logs of all user activity within the platform
- Automatic cloud backups to prevent data loss
While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and to restrict access to your One Menu accounts to authorized personnel only.
Your data is retained for as long as your subscription is active and for a reasonable period afterward as required for legal, accounting, or dispute resolution purposes. You may request deletion of your data by contacting us.
Cookies
Our web-based dashboard and ordering websites use cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device that help us:
- Keep you logged in to your One Menu dashboard
- Remember your preferences and settings
- Understand how the platform is being used to improve it
- Ensure security and prevent unauthorized access
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of the One Menu dashboard may not function properly.
Third-Party Services
One Menu integrates with or may link to the following categories of third-party services. Each has its own privacy policy and we encourage you to review them:
- WhatsApp Business API — Used to power the WhatsApp ordering bot. Customer messages are processed through Meta's infrastructure.
- Payment Gateways — Online payment links may be processed through third-party payment processors. We do not store full card details.
- Delivery Networks — If you integrate with third-party delivery platforms, order data is shared with them to fulfil deliveries.
- Biometric Devices — Attendance data from biometric devices is synced to the cloud through secure APIs.
We are not responsible for the privacy practices of third-party services and recommend reviewing their policies before enabling integrations.
Your Rights
As a user of One Menu, you have the following rights regarding your personal data:
- Access — You may request a copy of the personal data we hold about you or your business.
- Correction — You may request that we correct any inaccurate or incomplete information.
- Deletion — You may request deletion of your account and associated data, subject to any legal retention requirements.
- Portability — You may request an export of your data in a machine-readable format.
- Objection — You may object to certain uses of your data, such as analytics.
- Withdrawal of Consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the details in the Contact section below. We will respond to all requests within 30 days.
Children's Privacy
One Menu is a business management platform intended for use by adults (18 years and older). We do not knowingly collect personal information from individuals under the age of 18.
If you believe that a minor has provided us with personal information, please contact us immediately and we will take steps to delete such information from our systems.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify active subscribers via email or an in-app notification
- Where required by law, seek your consent before applying changes
We encourage you to review this policy periodically. Continued use of One Menu after changes are posted constitutes your acceptance of the revised policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please reach out to us:
OneMenu Pvt Ltd — Privacy Team
We take all privacy-related inquiries seriously and aim to respond within 5 business days.