Privacybeleid
Last updated: June 30, 2026
This Privacy Policy explains how YR Menu collects, uses, stores and protects personal data through the website, admin dashboard and customer-facing digital menus.
1. Responsible entity
| Region | Entity | Contact |
|---|---|---|
| Uzbekistan | TESLA KAFA LLC, Registration No. 312477429, Konstitutsiya MFY, Tafakkur ko'chasi, 43-uy, Yakkasaroy tumani, Toshkent, O'zbekiston. | info@teslakafa.com |
| All other customers, including Europe and international orders | İLHAN FIRAT KOÇAK (Koçak Creative Tasarım & Medya Ajansı), Registration No. 5710380690, Fatih Mah. 3351 Sok. No:29 Kat:3 Kepez / Antalya, Türkiye. | info@yrmenu.com |
2. Data we collect
| Data type | Examples | Purpose |
|---|---|---|
| Account data | Name, surname, e-mail, phone, business name, address, user role | Account creation, support, billing and customer management |
| Restaurant content | Menu items, prices, images, descriptions, allergen information, categories | Creating and publishing the digital menu |
| Payment data | Payment status, invoice details, transaction reference | Subscription processing, accounting and payment confirmation |
| Usage data | Menu views, language changes, popular dishes, table number, waiter call, bill request | Analytics, service improvement and restaurant operations |
| Technical data | Browser, device type, hashed IP address, session data | Security, error detection, fraud prevention and basic analytics |
| Signup source and location | How you found us (referring website, landing page, campaign tags) and your approximate country and city, which our network provider (Cloudflare) derives from your IP address when you register | Understanding which channels bring us customers; kept with your account record |
3. How we use data
We use data to provide the service, manage accounts, process payments, provide support, generate restaurant analytics, maintain security, comply with legal obligations and improve the product.
4. AI translation
If requested by the customer, menu descriptions and text may be translated or improved using Gemini or similar AI services. In such cases, relevant text may be sent to third-party AI providers for technical processing. Customers should not enter personal or sensitive data into AI translation fields.
5. Legal basis
Data may be processed for contract performance, legal obligations, legitimate interests, security, billing and, where required, consent.
6. Who we share data with
Personal data may be shared with payment providers, hosting providers, e-mail services, analytics and security tools, accounting services, AI providers and legally authorized authorities. We do not sell visitor data to advertising networks.
7. International data transfers
To operate the service, some data may be processed through infrastructure and service providers located in Uzbekistan, Türkiye, the European Union or other countries. Where international transfer is required, reasonable technical, contractual and organizational safeguards are used.
8. Retention period
Data is retained for as long as necessary to provide the service, meet legal, tax and accounting obligations, resolve disputes and maintain security. When no longer needed, data is deleted, anonymized or access is restricted.
9. QR menu visitors
When restaurant guests open a QR menu, limited technical and usage data may be processed, including language choice, device information, menu views, table number, waiter call or bill request. This helps restaurant owners improve service quality and operations.
10. Security
YR Menu uses access controls, encryption, secure session management, backups and technical security measures. However, no internet transmission can be guaranteed to be completely secure.
11. User rights
Depending on applicable law, users may have rights to access, correct, delete, restrict or object to processing of their personal data, withdraw consent and request other privacy rights. Requests can be sent to info@yrmenu.com.
12. Children
YR Menu is a restaurant technology and business management service. We do not intentionally collect personal data directly from children.
13. Cookies
More information about cookies and similar technologies is available in our Cookie Policy.
14. Changes
We may update this policy due to legal, technical or business changes. Important changes may be announced through the website, e-mail or dashboard.
15. Contact
For privacy and personal data requests, contact us at info@yrmenu.com.
Payment and Advertising Data
To process subscription payments, the data necessary for the payment (payment reference, amount and, where required for fiscalization, receipt details) is transferred to our payment providers and their partner banks and processors: iyzico, and in Uzbekistan ATMOS (AO "NATIONAL INNOVATIVE PAYMENT TECHNOLOGIES") together with the fiscal data operator (OFD) as required by the tax legislation of the Republic of Uzbekistan. How card details are handled depends on the provider: for payments in Turkish lira and international payments through iyzico, card data is entered on the provider's secure payment page and does not reach our servers. For card payments in Uzbek soum through Atmos, the card number, expiry date and SMS confirmation code are entered on our payment page and passed directly to Atmos for authorisation; we do not store, log or display them.
We also share limited advertising conversion data (such as click identifiers and conversion events) with Google to measure the effectiveness of our advertising. This data does not include your name, menu content or payment details.
Your data protection rights
Wherever you are, you can ask us to give you a copy of your personal data, correct it, delete it, export it, restrict or object to how we use it, and withdraw any consent you have given. Withdrawing consent does not affect anything we did lawfully before you withdrew it. Write to info@yrmenu.com and we will answer within one month.
If you are in the European Economic Area, the following also applies.
Why we are allowed to process your data. Account, menu and billing data: to perform our contract with you. Security, fraud prevention, error detection and measuring our own advertising: our legitimate interest in running and protecting the service, balanced against your interests. Tax, accounting and invoicing records: our legal obligations. Analytics and advertising cookies: your consent, which you can withdraw at any time from the “Cookie settings” link in the footer.
How long we keep it. Account and menu content: while the account exists, and afterwards only for as long as we need it to resolve disputes and meet record-keeping duties. Invoices and payment records: for the period the tax and commercial law of the invoicing entity requires. Your cookie choice: 1 year. Advertising click identifiers: 90 days in the browser cookie, and for as long as the enquiry or account record itself exists. Server and security logs: a short rolling period.
Transfers outside the EEA. Our operating entities are established in Türkiye and Uzbekistan, and neither country is the subject of a European Commission adequacy decision. Your personal data is transferred to, and processed in, those countries. You can contact us at info@yrmenu.com about this transfer.
Complaints. You may lodge a complaint with the data protection supervisory authority of the country where you live or work, or where you believe the problem arose. We would prefer you to raise it with us first, but you are not required to.
Automated decisions. We do not make decisions about you that produce legal or similarly significant effects by automated means, and we do not profile you for that purpose.