Privacy Policy
Last updated: September 2026
This Privacy Policy describes how WebPlaza.pk ("we", "us", "our") collects, uses, and protects information when you use QR-Restaurant (the "Service"). By using the Service, you agree to the collection and use of information as described here.
1. Information We Collect
Restaurant Owners:
When you register for an account, we collect your email address and password (managed securely through our authentication provider, Supabase), along with restaurant details you provide such as restaurant name, address, contact/WhatsApp number, menu content, and images.
Customers (guest ordering):
When you place an order as a guest, we collect your name, phone number, and delivery address solely to create and fulfill your order. No account or password is required. For your convenience, this information may be cached in your browser's local storage so it can autofill on future orders on the same device.
We do not collect or store any payment card information. The Service does not process online payments; payment is arranged directly between you and the Restaurant.
2. Automatically Collected Information
Like most web services, our infrastructure providers (Supabase, Vercel) may automatically log technical information such as IP address, browser type, device information, and timestamps, for security, diagnostics, and service reliability purposes.
3. How We Use Information
- To create and manage Restaurant Owner accounts
- To create, save, and track Customer orders in real time
- To enable communication between Customers and Restaurants (e.g. via the WhatsApp contact button)
- To maintain the security and reliability of the Service
- To comply with applicable law
4. How We Share Information
A Restaurant Owner can only see orders and customer details belonging to their own restaurant - our database enforces strict tenant isolation between restaurants. We do not sell your personal information to third parties. We share information only with the infrastructure providers necessary to run the Service (Supabase for database, authentication, and storage), or where required by law.
5. Data Retention
We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this Policy, unless a longer retention period is required by law.
6. Security
We use industry-standard technical measures, including database row-level security and encrypted authentication, to protect your information. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
7. Children's Privacy
The Service is not directed at children under 18, and we do not knowingly collect personal information from children under 18.
8. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at the email below. Restaurant Owners can also review and update most of their information directly from their dashboard.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at qr.webplaza.pk@gmail.com.