hellozlou is a QR-menu and table-service system built for restaurants and beach clubs. This policy explains how we handle information in our role as a data processor on behalf of the venues that use our service.
1. Who we are
[Company details to be added] operates the hellozlou platform. For any privacy questions, please contact us at info@hellozlou.com.
2. What we collect and why
We process only the minimum information needed to run an order:
- Order details — items ordered, quantities, notes, price snapshots, table or session identifiers, and the time the order was placed.
- Session identifiers — the table QR code or session number a guest is using, so staff can deliver to the right place.
- Contact form submissions — name, venue name, phone number and message when a prospective venue writes to us through the website.
Guests never create accounts, log in, or provide an email address to place an order.
3. Our role as a processor
The venue is the data controller for guest order data. hellozlou processes that data on the venue's instructions and under a data-processing relationship. Venues decide how long they need operational records; we delete guest order data after the season ends unless the venue requests a different retention window in writing.
4. How long we keep data
Guest order and session data is deleted after the season closes, typically by 31 October each year. Contact form data is kept for as long as needed to respond and follow up, then removed.
5. Sharing and security
We do not sell guest data. Order data is shared only with the venue's own staff and the notification channels (such as Telegram groups) the venue has configured. We use encryption in transit, access controls, and row-level security in the database to protect information.
6. Your rights
Under GDPR, data subjects may ask the venue in question to access, correct, delete, or restrict their data. If you need our help with a request, or if you have questions about how we process data, please write to info@hellozlou.com.
7. Cookies
The marketing site and ordering flow do not set non-essential cookies. We may use a single functional cookie or localStorage value to remember a guest's language preference, but this is not used for tracking or advertising.
8. Changes
We may update this policy as the service evolves. If the changes are material, we will note the update date at the top of this page.