Get the full power of VoiceMenu

Join the Academy - learn setup, events, loyalty programs, and automated marketing.

Enroll in the Academy

Privacy Policy

How we collect, use, store and protect personal information when you use our website and services.

Last updated: 10 Jan 2026

1. Introduction

VoiceMenu (“we”, “us”, “our”) provides a hospitality operations and direct-revenue platform for food businesses (including takeaways and restaurants): public venue websites, online ordering, bookings, payments, staff tools, operator administration, and optional add-ons such as voice-assisted ordering where you enable them.

This Privacy Policy explains how we handle personal information when you visit our marketing website, enquire about the product, book a call with us, or use our platform and related services (together, the “Services”). It is designed to be clear and to reflect how we work in practice. It does not replace any venue-specific privacy notices your business may publish to your own customers.

If you do not agree with this policy, please do not use our website or Services.

2. Data controller

For personal data we collect and decide how to use for our own purposes (for example, marketing-site visitors, sales enquiries, and our own account administration), VoiceMenu is the data controller under UK data protection law.

Contact details appear in section 15 below.

3. Venue operators and your customers’ data

If you run a venue or group on our platform, you will usually be the controller of personal data relating to your guests, registered customers, and staff in connection with your business. We provide the platform and related hosting and support as a processor (or similar role under applicable law), acting on your instructions and in line with our agreement with you, except where we must use data for our own legal, security, or billing purposes as controller.

You are responsible for providing appropriate privacy information to your customers and staff and for having a lawful basis for your processing. If you need a data processing agreement or details for a transfer impact assessment, please contact us.

4. Information we collect

4.1 Information you give us

We collect information you voluntarily provide, including:

  • Contact and enquiry forms: Name, email, phone, company or venue name, website, and the content of your message when you contact us or request information.
  • Meeting scheduling: Details you enter when booking or rescheduling a call (such as name, email, phone, company, product interest, tier, and chosen time) so we can send confirmations and calendar invitations.
  • Accounts and the platform: Login identifiers, profile and role information, and content you upload or configure while using the Services (including menus, operational data, and communications sent through the product where applicable).
  • Support and communications: Messages and feedback you send to us by email, in-product tools, or other channels.

4.2 Information collected automatically

When you use our website or Services we may automatically collect:

  • Usage data: Pages or screens viewed, approximate navigation paths, and timestamps.
  • Technical data: Browser type, device type, operating system, and IP address.
  • Cookies and similar technologies: As described in section 7.

4.3 Voice-assisted and telephony features

Where you enable optional voice or telephony features, we (and subprocessors we use) may process call-related data needed to run those features (for example, audio or transcripts, depending on configuration). The scope is determined by the product settings you use and our agreement with you; your venue should ensure your own customer-facing notices cover that processing where required.

5. How we use information and lawful bases

We use personal information for the following purposes, as permitted by UK GDPR:

  • To provide and administer the Services (lawful bases: performance of a contract; legitimate interests in operating a reliable platform).
  • To respond to enquiries, schedule meetings, and manage our relationship with you (contract; legitimate interests in sales and client care).
  • To secure, monitor, and improve the Services and our website (legitimate interests; legal obligation where applicable).
  • To comply with law and enforce our terms (legal obligation; legitimate interests in protecting our business and users).
  • Where we ask for your consent (for example, certain cookies or marketing), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. Storage and security

We use appropriate technical and organisational measures designed to protect personal data. No transmission or storage system is completely secure; we work to safeguard information using measures appropriate to the risk, but we cannot guarantee absolute security.

7. Cookies and similar technologies

We use cookies and similar technologies for essential operation, security, analytics, and (where applicable) preferences or marketing measurement. You can control cookies through your browser settings. Where we show a cookie banner or notice, the options presented there also apply. By continuing to use the site where such tools are shown, you agree to non-essential cookies only to the extent you have accepted them through those controls.

8. Third parties, subprocessors, and international transfers

We use carefully selected service providers (for example hosting, email delivery, analytics, calendar and meeting scheduling, payments, telephony or AI voice providers where enabled, and security tooling). They process personal data only on our instructions or as otherwise required to deliver their service to us, and we expect them to protect your data appropriately.

Some providers may process data outside the UK. Where we transfer personal data outside the UK, we use safeguards recognised under UK law (such as the UK International Data Transfer Agreement / Addendum, or adequacy regulations) where required.

9. Sharing and disclosure

We may share personal information:

  • With service providers who assist us under written terms (including confidentiality and data-protection obligations where appropriate).
  • If we are required to do so by law, regulation, court order, or a competent authority.
  • In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice where practicable.
  • To protect our rights, property, or safety, or that of our users or the public, where permitted by law.
  • With your consent, where we have asked for it.

10. Automated decisions

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals as part of our standard marketing website or sales process. If that changes in a way that affects you, we will provide further information as required by law.

11. Children

Our Services are aimed at businesses and adults acting in a professional capacity. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

12. Your rights and complaints

Under UK data protection law you may have the right to request access, rectification, erasure, restriction of processing, objection to certain processing, and data portability, and to withdraw consent where processing is based on consent. These rights depend on the circumstances and may be limited by law (for example, where we need to retain records).

To exercise your rights or ask questions, please contact us using the details in section 15. We will respond within the timeframes required by law and may need to verify your identity.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

13. Retention

We retain personal data only for as long as necessary for the purposes described in this policy, to meet legal, accounting, or reporting requirements, and to resolve disputes or enforce agreements. When data is no longer needed, we delete or anonymise it where practicable.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the current version on this page and update the “Last updated” date. For material changes we may provide additional notice where appropriate. Please review this page periodically.

15. Contact us

For privacy-related questions or requests, please contact us:

We aim to respond as soon as reasonably practicable and in line with applicable law.