Free privacy policy generator for restaurants and cafes

A restaurant collects more personal data than most owners realise: phone numbers for orders, delivery addresses, loyalty points, WhatsApp marketing lists, CCTV footage and guest WiFi logins. Customers, payment providers and delivery platforms all expect a privacy policy that explains it.

Generic generators are written for online shops. This one is written for food businesses. Pick the countries where your customers are, tick what you actually collect, and get a plain-English policy in about 5 minutes.

1. Your business

For example SSM number in Malaysia or UEN in Singapore

Where this policy will be published

Required for many businesses in Malaysia and Singapore

2. Where your customers are

Tick every place you serve or sell to. Each adds the clauses its law asks for.

Other countries (0 selected)

These get general clauses for now. The checklist will remind you to check local law.

3. What you collect

Tick only what you really do. Each one adds a section written for restaurants.

4. Partners and retention

Separate with commas, for example: Stripe, iPay88

For example: GrabFood, foodpanda, Lalamove

For example: your ordering platform, POS, WhatsApp marketing tool

Your privacy policy

Fill in to finish:

  • Trading name
  • Registered company name
  • Business address
  • Country
  • Contact email
  • At least one country or region

Privacy policy

Last updated: 27 October 2026

This policy explains how our business, trading as our business ("we", "us", "our"), collects, uses, shares and protects your personal data when you visit our outlets, order from us, use our website or join our programmes, and the choices and rights you have.

Who we are and how to contact us

  • our business, trading as our business
  • Address:
  • Email:

What we collect and why

We only collect what we need. Here is what we collect in each situation, and what we use it for.

When you order from us (online, pickup, delivery or at the table)

What we collect:

  • your name, phone number and email address
  • your delivery address and any delivery notes
  • what you ordered, when, and any special requests

Why we use it:

  • to prepare, deliver or hand over your order
  • to contact you about your order, for example if an item is unavailable or your rider is on the way
  • to issue receipts and handle refunds or complaints

When you pay

What we collect:

  • the amount, payment method and payment status
  • payment details you enter are handled by our payment provider; we do not see or store your full card number

Why we use it:

  • to take payment and issue refunds
  • to detect and prevent fraud
  • to keep the tax and accounting records the law requires

When you agree to hear from us

What we collect:

  • your name, phone number (including WhatsApp) and email address
  • what you buy and which messages you open or click, so our offers are relevant

Why we use it:

  • to send you promotions, new menu items and event news by WhatsApp, SMS or email

When you visit our website

What we collect:

  • cookies and similar technologies on your device
  • pages visited, device and browser type, approximate location from your IP address, and how you arrived

Why we use it:

  • to make the website work, such as keeping your basket
  • with your consent where required, to measure visits and show you relevant ads on other sites (for example Google Analytics and Meta Pixel)

Allergy and dietary information

If you tell us about an allergy or dietary need, we use it only to prepare your food safely, with your consent, and we do not use it for marketing. Please also tell our staff in person: we cannot guarantee that any dish is free from allergens.

Who we share your data with

We do not sell your personal data. We share it only with:

  • payment providers that process your payments
  • other service providers that host our website, ordering, messaging and IT systems, under contracts that require them to protect your data and use it only for us
  • professional advisers, such as accountants, auditors and lawyers
  • the police, regulators, courts or other authorities, when the law requires it or to protect our rights, customers or staff
  • a buyer or successor, if our business or part of it is sold or reorganised

Transfers outside your country

Some of our service providers store or process data in other countries. When we transfer your personal data abroad, we make sure it receives a comparable level of protection, for example by using providers in countries with adequate data protection laws or by contract terms that require them to protect it.

How long we keep your data

  • orders, invoices and payment records: 7 years, because tax and accounting laws require it
  • marketing preferences: until you unsubscribe; we keep a record of your opt-out so we do not contact you again
  • anything else: only as long as needed for the purpose we collected it for, or as the law requires

How we protect your data

We use reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including encrypted connections, access limited to staff who need it, and service providers bound by confidentiality. No system is completely secure, so please keep your account login details private.

If a data breach is likely to put you at risk, we will tell you and the relevant authority as the law requires.

Marketing and how to stop it

We only send marketing messages if you agreed to them or if the law otherwise allows it. You can stop them at any time: use the unsubscribe link in an email, reply STOP to a WhatsApp or SMS message, change your account settings, or contact us. Stopping marketing does not affect messages about your orders.

Cookies

Some cookies are needed for our website to work and cannot be switched off. We only use analytics and advertising cookies with your consent where the law requires it, and you can change your choice at any time in your browser or in our cookie settings.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or limit how we use it, and to withdraw your consent. Contact us and we will help.

To use any of these rights, email us at . We may need to confirm your identity before we act on your request. We will not treat you less favourably for using your rights.

Children

Our services are not aimed at children. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you think a child has given us personal data, please contact us and we will delete it.

Complaints

If you are unhappy with how we handled your personal data, please contact us first at so we can try to put it right.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date, and tell you directly about important changes where the law requires it.

Before you publish

  • Read the whole policy and remove anything that does not match what you really do. A policy that describes practices you do not follow is worse than none.
  • Have a lawyer qualified in each country you selected review it before you rely on it. This generator is a drafting aid, not legal advice.
  • Publish it where customers can find it before they give you data: your website footer, online ordering page, WiFi sign-in page and loyalty sign-up.

Nothing you type here is sent to or saved by EatsVenture: the policy is put together in your browser. This tool is a drafting aid, not legal advice, and does not guarantee compliance with any law.

Privacy policy generator by country

Questions restaurant owners ask

Is this privacy policy generator really free?

Yes. There is no sign-up and no watermark. Copy the text or download it as HTML, Markdown or PDF and use it on your own website.

Do you store the details I type in?

No. The policy is put together in your browser. Your business details are not sent to or saved on our servers.

Which countries does it cover?

It has specific clauses for Malaysia (PDPA), Singapore (PDPA), the European Union (GDPR) and the United Kingdom (UK GDPR). You can also select other countries, which get general clauses and a reminder to check local law.

Is the generated policy legal advice?

No. It is a restaurant-specific draft to save you time. Check that it matches what you actually do, and have it reviewed by a lawyer in each country where you operate.

Keep it up to date without thinking about it

EatsVenture runs your own online ordering, loyalty and WhatsApp marketing, with your privacy policy, terms and refund policy filled in from your business details and published on your ordering site.

Talk to us on WhatsApp