1. Scope of this policy
This policy covers menuindex.net and the reports sold through it. MenuIndex is the data controller for the Site; full controller details and contact are at the end of this policy.
2. What we collect and why
- Request form and email. When you send a report request or write to us, we collect your name, email address, company and the contents of your message, in order to answer you and scope the report. Form submissions are received and stored by Netlify, our hosting provider, and forwarded to us by email. Free documents on the Site are downloaded without a form, so nothing is collected when you read them.
- Purchases. When you buy a report, checkout is handled by Paddle (Paddle.com Market Ltd), our merchant of record. Paddle collects the billing and payment information needed to process your order and acts as an independent controller of that data under Paddle's Privacy Policy. We receive from Paddle your name, email, company details, and order information, in order to deliver your report and provide support. We never see or store your full card details.
- Email. If you correspond with us, we keep the correspondence to provide support and maintain records.
- Analytics. We use Cloudflare Web Analytics to understand aggregate Site usage (pages visited, referral source, country). It sets no cookies, stores nothing in your browser, does not fingerprint you and does not track you across sites. We build no individual visitor profiles and sell nothing to advertisers.
3. What we do not collect
We do not collect special categories of personal data, we do not run advertising trackers, and we do not buy third-party data about you.
4. About the data in our reports
MenuIndex reports are built from open-source data only: menu information (dish names, prices, categories) published by the restaurants, cafés, bars and lounges themselves on their own official websites and publicly accessible to any visitor. We do not use delivery aggregators, reservation or review platforms, purchased or licensed datasets, sales or transaction data, or any information obtained privately. Coverage is limited to Dubai restaurants, cafés, bars and lounges in the $$–$$$$ price segment; menus published without prices are not indexed.
This is business information, not personal data: we do not collect the names, contact details or any other personal data of restaurant staff, owners or customers. Reports contain aggregated market statistics only, do not identify individual restaurants or individuals, and withhold any breakdown drawn narrowly enough to point at one business. If you represent a restaurant and have questions about our data practices, contact team@menuindex.net.
5. Sharing
We share personal data only with the service providers needed to operate the Site and deliver products: Paddle (payments and merchant of record), Netlify (website hosting and form submissions), Cloudflare (Web Analytics), and Google Workspace (email). Each provider processes data under its own terms and appropriate safeguards. We do not sell personal data.
6. International transfers
Our service providers may process data in the United States, the United Kingdom, and the European Economic Area. Where required, transfers rely on recognised safeguards such as standard contractual clauses implemented by those providers.
7. Retention
We keep contact-form data and correspondence for as long as needed to handle your request and maintain business records; order records are retained as required for accounting and tax purposes; analytics data is aggregate and not tied to your identity.
8. Your rights
Subject to applicable law, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021) and, where applicable, the EU/UK GDPR, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise these rights, email team@menuindex.net. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Security
We use reputable providers with industry-standard security, restrict access to personal data, and transmit Site traffic over HTTPS.
10. Children
The Site is a B2B service and is not directed at children under 18. We do not knowingly collect data from children.
11. Changes
We may update this Policy from time to time. The current version is always the one published on this page.
12. Contact
Privacy questions and requests: team@menuindex.net
Data controller: FOP Ragozina N.V., Kyiv, Ukraine, contact team@menuindex.net. Payment data is processed by Paddle.com Market Ltd as merchant of record and independent controller.