Privacy Policy

ScanEat (“we,” “our,” or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, platform, QR menu system, and related services. This Privacy Policy applies to: • restaurant owners, managers, and staff who create or manage ScanEat accounts; • customers who browse restaurant menus or place orders through ScanEat-powered pages; • visitors who interact with our website or support channels.

Depending on how you use ScanEat, we may collect the following categories of personal data: A. Account and business information • full name • email address • login credentials • restaurant or business details • support communications B. Customer order and interaction data • order details submitted through a ScanEat-powered menu • table number or table identifier • restaurant selection and menu interactions • WhatsApp order routing details where applicable C. Technical and usage data • IP address • browser type and device information • pages viewed and actions taken on the platform • date/time of access • referral and diagnostic information • cookies or similar technologies, where used D. Password recovery and authentication data • email address used for password reset • security-related logs associated with authentication attempts You should review your actual backend and analytics stack and add any extra data categories you collect, such as phone number, billing data, or location data, if applicable.

We collect information: • directly from you when you sign up, sign in, reset a password, submit restaurant information, or contact us; • when customers browse menus or place orders through ScanEat-powered pages; • automatically through the operation of the website, logs, cookies, and platform analytics; • from integrations or third-party services you choose to use, such as WhatsApp-based workflows.

We use personal data to: • create and manage accounts; • provide QR menu, restaurant listing, and ordering functionality; • route or facilitate customer orders; • support restaurant onboarding and account administration; • respond to support requests and service inquiries; • secure the platform, detect abuse, and prevent fraud; • improve performance, usability, and service quality; • maintain operational records and comply with applicable legal obligations; • communicate important product, service, or account-related notices.

Where applicable, we process personal data in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and related implementing regulations. Where required, we will rely on an appropriate lawful basis for processing, including: • performance of a contract or requested service; • compliance with legal obligations; • legitimate business purposes that do not override data subject rights; • consent, where consent is required by applicable law.

We do not sell personal data. We may share personal data only where necessary with: • service providers that help us host, maintain, secure, or operate the platform; • communications providers or integrations used to facilitate ordering workflows, including WhatsApp-related processes where applicable; • restaurant operators using ScanEat, to the extent necessary to process customer menu requests or orders; • legal, regulatory, or governmental authorities where required by law or to protect rights, safety, and security; • professional advisers in connection with legal, compliance, or corporate matters. Any sharing should be limited to what is necessary for the specific purpose.

We may use cookies, log files, pixels, or similar technologies to: • keep users signed in; • remember preferences; • understand traffic and usage patterns; • improve site performance and user experience; • support security and troubleshooting. If you use analytics tools, advertising pixels, session replay, or third-party tracking services, they should be specifically identified here.

We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including service delivery, dispute resolution, security, recordkeeping, and legal compliance. Retention periods may vary depending on: • the nature of the data; • whether the account remains active; • legal or regulatory obligations; • fraud prevention and platform security needs.

We implement reasonable technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. However, no website, platform, or internet transmission method is completely secure. We therefore cannot guarantee absolute security.

If personal data is processed or stored outside the Kingdom of Saudi Arabia, we will take appropriate steps to ensure such transfers are made in accordance with applicable legal requirements and adequate safeguards. If all your infrastructure is hosted inside Saudi Arabia, you can adjust this section accordingly.

Subject to applicable law, individuals may have rights regarding their personal data, including the right to: • request access to personal data; • request correction or updating of inaccurate or incomplete data; • request deletion where legally applicable; • withdraw consent where processing is based on consent; • inquire about how personal data is processed; • submit complaints to the competent authority where permitted by law. To exercise any privacy-related request, please contact us using the details below.

ScanEat may enable restaurants to present menus and facilitate customer ordering workflows. Restaurants using the platform may act as independent controllers of certain customer data they collect through their ScanEat-powered pages. If you are a restaurant customer and have a question about a specific order, item, or restaurant handling of your information, you may also need to contact the relevant restaurant directly.

ScanEat is not intended for children, and we do not knowingly collect personal data from children in violation of applicable law. If you believe that a child has provided personal data through the platform, please contact us so we can review and take appropriate action.

We may update this Privacy Policy from time to time to reflect service changes, legal developments, or operational requirements. When we do, we will update the “Last Updated” date on this page. Your continued use of the service after any updates becomes effective will be subject to the revised policy.

If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact us at: Email: privacy@scaneatksa.com Website: https://www.scaneatksa.com You should replace the email above with your real privacy/support email and add your legal entity name and business address if available.