Terms of Service

Effective date: 24 September 2026

Services

Smart Menu Solutions provides digital QR menu design, setup and support services as described in the selected order package.

Customer responsibilities

You are responsible for providing accurate business information, menu content, prices, branding assets and permissions for submitted materials.

Payment and delivery

Prices, included features and delivery expectations are shown with each package. Work begins after the order and required materials are received.

Intellectual property

You retain rights to materials you provide. Smart Menu Solutions retains rights to its platform, templates and underlying implementation.

Data processing on behalf of the customer (Art. 28 GDPR)

When your guests use your QR menu and the add-ons Smart WeeklyReport™ or Smart ServiceHub™, we process personal data of your guests and staff on your behalf. You are the controller for this data and we are your processor. This section forms the data processing agreement between us under Art. 28 GDPR.

• Subject, purpose and duration: providing your public menu, counting anonymous menu visits, and receiving, routing and displaying guest orders on your staff screens – for the duration of our contract.
• Types of data and data subjects: guests (order contents, quantities and notes, table, random session code, technical connection data) and your staff (settings stored on their devices). Visit statistics are anonymous.
• Instructions: we process the data only as described in these terms and according to the settings you choose, unless required otherwise by law. We will tell you if we believe an instruction is unlawful.
• Confidentiality and security: only persons bound to confidentiality have access. We protect the data with appropriate technical and organisational measures, including encrypted connections, restricted administrator access with two-factor authentication and long random secret codes for staff and table links.
• Sub-processors: you authorise us to use Supabase, Inc. (database and server functions), GitHub, Inc. (hosting) and jsDelivr (delivery of a program library). We will inform you in advance of any new sub-processor; you may object for important reasons. Transfers outside the EU are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
• Support: we help you respond to requests from data subjects and to meet your obligations regarding security, data breaches and data protection impact assessments. We notify you without undue delay if we become aware of a personal data breach affecting your data.
• End of the contract: we delete your guests’ order data after the contract ends, unless the law requires us to keep it. On request we give you an export beforehand.
• Proof and audits: we provide the information you need to demonstrate compliance and allow reasonable checks on request.
• Your part: you inform your guests about the processing (for example by referring to our Privacy Policy) and make sure you only use the services in a lawful way.

Contact

Questions about these terms can be sent to info@smartmenusolutions.com.