Privacy Policy

01Who we are

Wonder Things Ltd, trading as MenuSync, registered in England and Wales, company number 15197334. Registered office: 142-143 Parrock Street, Gravesend, England, DA12 1EY.

We are the data controller for the personal data described here. Contact: info@menusync.co.uk.

02What we collect

• Account information: your name, email address, phone number and business name.
• Restaurant details: your restaurant name, address and which delivery platforms you use.
• Communications: the messages you send us containing menu change instructions - text, photos or voice notes - sent via WhatsApp or by email, and our replies including the confirmation screenshots.
• Website usage: aggregated, anonymous page statistics from Simple Analytics, plus standard server logs (IP address, page requested, time, browser user-agent).
• Payment records: handled by our payment providers - we never see or store your card details.

03How access to your platforms actually works

This is the part people most want a straight answer on, so here it is per platform.

• Deliveroo: you invite us from your own Restaurant Hub account. We get our own login. You can remove us at any time and access ends immediately. We never hold your password.
• Uber Eats: you add us as a Staff user. Uber's own role limits mean Staff cannot see Payments, Tax, Users, Settings or Marketing. We never hold your password.
• Just Eat: works differently - it has no staff-login feature, so there is no user to invite or remove. Where a shared login is the only option, we agree it with you directly, hold it encrypted at rest (AES-256) and transmit it only over TLS 1.2 or above, and your off switch is changing that password.

04Why we can process it

• Contract performance (Article 6(1)(b)) - we need your data to run the menu update service you asked for.
• Legitimate interests (Article 6(1)(f)) - to keep the service working, prevent fraud, and understand in aggregate how the website is used.
• Legal obligation (Article 6(1)(c)) - keeping payment records for tax.

05Who your data goes to

We do not sell, rent or share your personal data for anyone else's marketing. Your data reaches the following categories of recipient, and only to run the service:

• The delivery platforms (Just Eat, Deliveroo, Uber Eats, and any other platform you ask us to manage) - we sign in with the access you grant and make the changes you request.
• WhatsApp / Meta - if you message us on WhatsApp, that conversation passes through their service under their own terms. If you would rather not use it, email us instead.
• Stripe (Stripe Payments Europe, Ltd) - payment processing.
• GoCardless (GoCardless Ltd) - Direct Debit processing.
• Our hosting provider - the server that runs this website and holds its logs.
• Simple Analytics - aggregated, cookieless website statistics.

We may also disclose data where the law requires it.

06International transfers

Stripe processes some data in the United States. That transfer is protected by the UK-US Data Bridge, the UK extension of the EU-US Data Privacy Framework, under which Stripe is certified.

WhatsApp is operated by Meta, which processes data outside the UK under its own transfer safeguards. Using WhatsApp to message us is your choice; email is always available.

The typefaces on this site are served from our own server rather than a font CDN, so simply loading a page does not transfer your IP address abroad for that purpose.

07How long we keep it

• Account and restaurant data: for the length of your subscription plus 30 days.
• Any shared platform credential: deleted within 30 days of cancellation.
• Payment records: 7 years, as UK tax law requires.
• Messages between us: up to 2 years, so we can check what was asked for and when.
• Server logs: rolled and deleted on a short cycle as part of normal server operation.

08Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, port it elsewhere, or object to processing based on legitimate interests. Email info@menusync.co.uk and we will respond within one month.

09Cookies

This website sets no cookies at all. Our analytics are cookieless. Full detail is in our Cookie Policy.

10Complaints

If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. ico.org.uk