01
Who We Are
BM Menu is a digital menu service operated by Benchmark Digital Solutions, based in the United Arab Emirates. We provide online menu creation, QR code ordering, and digital presence services for cafés, restaurants, and stores.
Service: BM Menu · Operator: Benchmark Digital Solutions · Jurisdiction: United Arab Emirates
02
Information We Collect
When you use BM Menu or submit our order form, we collect the following information:
- Contact details: Full name, email address, phone/WhatsApp number
- Business information: Business name, address, Instagram handle, business type
- Order details: Selected plan, product count, menu categories, preferred language
- Uploaded files: Logo image and product photos shared via Google Drive
- Payment data: Processed securely by Stripe — we do not store card numbers
- Usage data: IP address, browser type, pages visited, time on site (via cookies)
03
How We Use Your Information
We use your information strictly to deliver and improve our services:
- To process your order and build your digital menu
- To contact you regarding your order status and delivery
- To send transactional emails (order confirmation, delivery notification)
- To process payments securely via Stripe
- To improve our website and service based on usage analytics
- To comply with legal obligations under UAE law
We do not use your data for unsolicited marketing without your explicit consent.
04
Payment Processing (Stripe)
All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. When you enter your payment details:
- Card information is transmitted directly to Stripe's secure servers
- We never see, store, or have access to your full card number
- We only receive a transaction confirmation and payment reference ID
Stripe's privacy policy is available at stripe.com/privacy. By making a payment, you also agree to Stripe's terms of service.
05
Cookies & Tracking
Our website uses cookies to improve your experience and analyse traffic. We use the following types of cookies:
- Essential cookies: Required for the website to function (session management, form state)
- Analytics cookies: Help us understand how visitors use our site (pages visited, time spent), including Google Analytics.
- Functionality cookies: Remember your language preference (Arabic/English)
You can control or disable cookies through your browser settings at any time. Disabling essential cookies may affect the functionality of the order form.
06
Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We may share data only in these limited cases:
- Stripe: Payment processing (card data only)
- Google: Google Drive for image sharing; Google Analytics for usage statistics
- Email providers: To send order confirmations and notifications
- Legal authorities: If required by UAE law or a valid legal process
All third-party providers are contractually required to handle your data securely and in compliance with applicable data protection laws.
07
Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Order records: Minimum 5 years for accounting and legal purposes
- Contact information: Duration of service + 2 years after
- Analytics data: Typically 26 months (Google Analytics default)
- Uploaded media: Retained while your service is active
You may request deletion of your data at any time by contacting us (see Section 10).
08
Your Rights
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Objection: Object to the processing of your data for certain purposes
- Portability: Request your data in a machine-readable format
To exercise any of these rights, contact us at the email address below. We will respond within 30 days.
09
Security
We implement appropriate technical and organisational measures to protect your personal data:
- HTTPS encryption on all pages
- Payment data handled exclusively by PCI-DSS certified Stripe
- Access to order data restricted to authorised personnel only
- Regular review of our data handling practices
No method of transmission over the internet is 100% secure. While we strive to protect your data using commercially acceptable means, we cannot guarantee absolute security.
10
Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:
This Privacy Policy was last updated in June 2025 and may be updated periodically. Continued use of BM Menu after any changes constitutes acceptance of the updated policy.