CedMenu Privacy Policy

1. Who is responsible

CedMenu operates in Ontario, Canada.

CedMenu provides restaurant workspaces, digital menu-board services, billing administration, and related services. In this Policy, “CedMenu,” “we,” “us,” and “our” refer to that operator.

Our privacy contact is responsible for receiving privacy questions, access and correction requests, deletion requests, consent-withdrawal requests, and complaints.

Privacy contact: CedMenu Privacy Contact Email: Cedmenuhq@gmail.com

2. Scope

This Privacy Policy explains how CedMenu collects, uses, discloses, retains, and protects personal information when someone uses a CedMenu account, acts as a restaurant representative or billing contact, receives or pays a payment request, communicates with CedMenu, connects a supported business service, or uses CedMenu-related screens or devices.

Personal information means information about an identifiable individual. Restaurant and operational information may also constitute personal information when it identifies or relates to an individual.

The information processed depends on the person’s role, the services used, the permissions granted, and the information submitted.

CedMenu does not sell personal information.

3. Account and profile information

CedMenu may collect names, email addresses, restaurant and location memberships, account roles and permissions, invitation and account status, restaurant positions, account-setup information, dates of birth for minimum-age administration, optional profile information, and sign-in, authentication, and security information.

This information may be provided directly by the individual, supplied by an authorized restaurant representative, or generated through account activity.

CedMenu uses it to authenticate users, administer restaurant access, enforce permissions, provide support, and investigate suspected unauthorized activity.

Optional profile information should be limited to information relevant to the person’s use of the service.

4. Legal acknowledgements

CedMenu records the Terms and Privacy Policy versions presented, whether they were accepted or acknowledged, the relevant restaurant or payment context, the date and time, and information reasonably necessary to demonstrate the acknowledgement or authorization.

A person may accept the Terms and acknowledge this Policy when submitting payment without creating or completing a CedMenu account.

Acknowledging this Policy confirms that it has been presented for review. It does not waive privacy rights or provide unrestricted permission to use personal information for unrelated purposes.

Where consent is required, CedMenu obtains the appropriate consent for the relevant collection, use, or disclosure.

5. Restaurant content

CedMenu processes restaurant menus, prices, descriptions, photographs, logos, videos, generated boards, screen assignments, schedules, publishing history, and related instructions.

This information is used to create, review, schedule, publish, and deliver restaurant content and provide associated support.

Content approved for publication may be visible on the restaurant’s designated screens or other authorized publishing destinations. Restaurants should review content carefully before approving it for public display.

Restaurants should not upload unrelated customer records, complete payment-card information, card security codes, or unnecessary sensitive information.

Where submitted content includes someone else’s personal information, the restaurant is responsible for having appropriate authority to provide it. This does not remove CedMenu’s own obligations under applicable privacy law.

6. Billing and transaction information

CedMenu may process the following information:

• Billing and order information: Billing-contact names and email addresses, billing-account relationships, covered restaurants and locations, ordered services, plans, boards, quantities, standard and agreed prices, and reasons recorded for approved pricing adjustments. • Payment arrangements: Subscription and cancellation dates, deposit percentages and amounts, remaining balances, scheduled collection dates, and payment-request status. • Transaction administration: Transaction amounts, currencies, dates and results, failed-payment information, refund-request records, and related billing communications.

CedMenu receives limited payment information needed to match, administer, and reconcile transactions. This may include transaction references, payment status, payment-method type, and limited identifying details such as card brand and final digits.

Complete card numbers and card security codes are entered through a secure payment-processing provider and are not stored by CedMenu.

7. Saved payment methods

When a payer authorizes CedMenu to save a payment method, the payment-processing provider may retain it for recurring subscriptions, scheduled balances, and future one-time CedMenu services that the restaurant requests or approves at an agreed or disclosed price.

CedMenu uses the resulting customer and payment-method references, authorization version and time, limited card details, transaction results, and related order information to submit authorized charges, reconcile transactions, send payment notices and receipts, address failed payments or authentication requirements, maintain accounting and audit records, and resolve disputes.

Complete card numbers and card security codes remain with the payment-processing provider and are not stored by CedMenu.

Retention of a payment method does not authorize unrelated, unrequested, or undisclosed charges. If a saved payment method cannot be used, CedMenu may send a secure payment request instead.

Requests to change a payment method or withdraw automatic-payment authorization may be sent to Cedmenuhq@gmail.com. Related transaction and authorization records may still need to be retained as described in Section 16.

8. Forwarded payment links

A payment link may be forwarded to another authorized payer.

The link may display information about the identified restaurant, billing account, order, and charges. Recipients should protect payment links and share them only with people authorized to review and pay the request.

Information submitted by the payer is processed in connection with that restaurant, billing account, and order.

Paying does not create a CedMenu account, grant restaurant access, or automatically make the payer a billing manager.

Contact CedMenu promptly if a payment link has been sent to the wrong person or appears to contain incorrect information.

9. Connected business information

When a restaurant connects a supported business service, CedMenu may receive information permitted by the connection, including merchant and location identifiers, business details, menu items and prices, order information, quantities, totals, timestamps, and other information necessary for enabled features.

CedMenu uses this information for requested functionality such as menu imports, location mapping, operational insights, and support.

The information received depends on the connected service, enabled features, and permissions granted. Restaurants should authorize only connections and information sharing appropriate for their requested services.

Where CedMenu processes personal information on a restaurant’s behalf, we may coordinate with the restaurant when responding to requests concerning that information, while meeting our own applicable legal obligations.

Disconnecting a service does not automatically erase information already received. Retention is addressed in Section 16.

10. Device and technical information

CedMenu may process device identifiers, screen and location assignments, pairing information, connection timestamps, playback reports, software information, downloaded-content state, IP addresses, browser and request information, diagnostic events, and security logs.

This information supports content delivery, troubleshooting, reliability, security, and prevention of unauthorized activity.

The information collected depends on the device or service being used and its interaction with CedMenu.

11. Communications

CedMenu may use contact information to send invitations, account-setup messages, authentication and recovery messages, security communications, and support messages.

We may also send payment requests, payment confirmations, upcoming-charge reminders, failed-payment notices, payment-method update requests, remaining-balance messages, and subscription or cancellation notices.

Receiving account, billing, or service communications does not automatically enrol someone in optional promotional marketing.

Any promotional communications are handled in accordance with applicable consent and unsubscribe requirements. Requirements for individual messages depend on their content and the applicable law.

12. How information is used

CedMenu uses information as reasonably necessary to:

• Provide the service: Maintain restaurant workspaces, authenticate users, enforce permissions, support connected features, and create and deliver restaurant content. • Administer billing: Process and record authorized transactions, manage subscriptions and deposits, collect agreed remaining balances, charge authorized saved payment methods for requested or approved one-time services at the agreed or disclosed price, and address payment issues. • Support and protect the service: Communicate about accounts, billing, service, and security; diagnose errors; improve reliability; and prevent fraud, abuse, and unauthorized access. • Meet obligations: Maintain necessary accounting, tax, audit, authorization, and contractual records; resolve disputes; comply with legal requirements; and protect the rights and safety of CedMenu, restaurants, users, and payers.

Before using personal information for a new purpose that was not previously identified, CedMenu will provide appropriate notice and obtain any required consent, unless applicable law permits or requires otherwise.

13. Service providers and disclosures

CedMenu uses service providers for payment processing, authentication, hosting, data and file storage, email delivery, monitoring, customer support, and enabled automated features.

We limit information shared with providers acting on our behalf to what is reasonably necessary for their functions. We require appropriate confidentiality, security, and use restrictions for that information.

Some providers may also handle information for their own legal, security, or payment-processing obligations under their applicable privacy notices. This does not remove CedMenu’s responsibility for personal information under its control.

CedMenu may disclose relevant information to authorized restaurant representatives, billing contacts, and billing managers according to their roles and responsibilities.

We may also disclose information where authorized or required by law, including to respond to lawful demands, investigate fraud or security incidents, address misuse, protect rights or safety, or complete a lawful business transaction subject to appropriate protections.

CedMenu does not make personal profiles available to unrelated restaurants.

14. Processing locations

CedMenu and its service providers may process or store information outside the individual’s province or country, including outside Canada.

Information processed elsewhere may be subject to the laws of that jurisdiction, including lawful access by courts, law-enforcement bodies, or government authorities.

CedMenu remains responsible for the protection of personal information under its control and uses appropriate contractual or other measures when engaging providers to process it.

Questions about processing locations or service-provider practices may be directed to the privacy contact in Section 1.

15. Cookies and local storage

CedMenu uses cookies and browser storage needed to sign users in, maintain authorized sessions, protect accounts, remember restaurant context, and support normal application operation.

Disabling necessary cookies or storage may prevent some features from working properly.

Screen devices may retain downloaded content to support continued operation during connection interruptions.

These functions do not, by themselves, constitute consent to unrelated advertising tracking. If additional tracking technologies are introduced, CedMenu will explain their purposes and provide any legally required notice, consent process, or choice.

16. Retention

CedMenu retains personal information only for as long as reasonably necessary for the purposes described in this Policy and applicable legal requirements.

Retention periods may differ for account records, legal acknowledgements, transaction and accounting history, orders and payment authorizations, refund and cancellation records, security logs, restaurant content, connected-service imports, and operational history.

In determining retention periods, CedMenu considers the purpose of the information, ongoing service needs, legal requirements, security needs, and unresolved contractual matters or disputes.

Closing an account, removing a user, disconnecting a service, or cancelling a subscription does not automatically erase records still reasonably required for those purposes.

When personal information is no longer required, CedMenu will delete it or make it no longer identifiable, subject to applicable legal requirements.

17. Security

CedMenu uses administrative, technical, and organizational safeguards appropriate to the information to help protect it against loss, theft, unauthorized access, disclosure, copying, use, or modification.

Safeguards include permission controls, separation between restaurant accounts, restricted administrative access, and specialized handling of payment information.

No electronic service can guarantee absolute security. Users should protect their credentials and payment links and promptly report suspected unauthorized access.

If a privacy or security incident occurs, CedMenu will assess and respond to it, maintain required records, and notify affected individuals and appropriate authorities where required by law.

18. Access, correction, deletion, and consent withdrawal

Contact Cedmenuhq@gmail.com to ask whether CedMenu holds personal information about you, request access, ask how information has been used or disclosed, correct inaccurate information, request deletion where applicable, withdraw consent where legally available, or submit a privacy complaint.

CedMenu may request information reasonably necessary to verify identity and authority before releasing or changing records.

We will respond within the time limits required by applicable law. If a request must be limited, declined, or extended, we will provide the explanation and notices required by law.

Some information may need to be retained for legal, accounting, contractual, security, or dispute-resolution purposes. Access may also be limited where necessary to protect another person’s information or comply with a legal restriction.

Withdrawing consent may affect CedMenu’s ability to provide a feature or service that depends on that information. We will explain relevant consequences where appropriate. Withdrawal does not automatically eliminate valid payment obligations or records that must lawfully be retained.

19. Young users

CedMenu accounts are intended for authorized individuals aged 16 or older.

This product requirement does not determine contractual authority or the capacity to give meaningful privacy consent in every situation.

Where legally required, appropriate authorization or parental or guardian involvement must be obtained. CedMenu will take account of the individual’s ability to understand the relevant information practices.

Contact the privacy contact if you believe an account has been created for an ineligible user or that a young person’s information has been provided without required authorization.

20. Policy updates

CedMenu may update this Policy as its services, practices, or legal requirements change. The published Policy will identify its effective date and version.

CedMenu keeps prior published versions and relevant acknowledgement records.

When material changes are made, CedMenu will provide notice through an appropriate channel and may require users to acknowledge the updated Policy before continuing to use their account.

Payment requests may also present the current Policy to payers who do not have a completed CedMenu account.

Acknowledging an updated Policy does not waive privacy rights or substitute for additional consent where that consent is legally required.

21. Complaints

Privacy questions or complaints may be sent to Cedmenuhq@gmail.com. Please provide enough information for CedMenu to understand and investigate the concern, without sending unnecessary sensitive information.

CedMenu will review privacy complaints and respond as required by applicable law.

You may also contact the Office of the Privacy Commissioner of Canada, or another privacy regulator with jurisdiction over the matter.

Nothing in this Policy prevents you from contacting a regulator or exercising an applicable privacy right.