The short version
We collect the minimum we need to run Carte, we never sell your data, and your menus belong to you. This page explains the detail in plain English; where it can't avoid legal language, we've tried to keep it brief.
Who we are
Carte Ltd ('Carte', 'we') operates the Carte menu management platform at cartelier.app. We are the data controller for account information and the data processor for the menu content you create. You can reach us about anything in this policy at hello@cartelier.app.
What we collect
Account data: your name, email address, venue name and billing details when you create an account. Content data: the menus, dishes, wines, prices and images you add to the platform. Usage data: pages visited and features used within the app, collected to improve the product. Technical data: IP address, browser type and device information, collected for security and performance.
What we use it for
To provide the service you're paying for; to respond when you contact support; to send essential service emails (billing, security, downtime); to improve the product based on aggregate usage patterns; and to send occasional product news, which you can switch off with one click and we won't take personally.
What we never do
We never sell your data. We never share your menus, prices or commercial information with other venues or third parties for marketing. We never use your content to train AI models. We never email your guests — guests who scan your QR menus are not tracked or profiled by us.
Where your data lives
Your data is stored in UK and EU data centres, encrypted in transit (TLS 1.2+) and at rest (AES-256). Daily backups are retained for 30 days. Our infrastructure subprocessors are listed in our subprocessor register, available on request.
Your rights
Under UK GDPR you can access, correct, export or delete your personal data at any time. Most of this is self-service in your account settings; for anything else, email us and we'll action it within 30 days, usually much faster. You can also complain to the ICO, though we'd appreciate the chance to fix things first.
Cookies
The marketing site uses no tracking cookies. The application uses strictly necessary cookies for login sessions and a single first-party analytics cookie to understand feature usage. There is no cross-site tracking and no advertising pixel anywhere on Carte.
Changes to this policy
If we make material changes we'll email account holders before they take effect and keep previous versions available on request. The 'last updated' date above always reflects the current version.