Who this policy covers
This development-stage Privacy Policy describes how the Menyra website and web application currently handle personal information.
The final production legal entity acting as data controller, its registered address and any appointed data-protection contact must be confirmed before production launch.
Information we currently receive
At the current development stage, Menyra may receive information that you actively provide through the public contact form and technical information required to operate the website.
- Contact form: name, email address, optional company, optional store count, enquiry topic and message.
- Language preference selected through the website language switcher.
- Theme preference stored locally in your browser.
- Session data required for security controls such as CSRF protection and contact-form anti-spam checks.
- Standard technical request information may also be processed by the hosting and web-server infrastructure as required to deliver and secure the service.
How contact enquiries are used
Contact-form information is used to receive, assess and reply to your enquiry. The current marketing module sends the enquiry through the configured Menyra email transport and does not create a contact or CRM record in the application database.
Your submitted email address is used as the reply address so the Menyra team can respond to you.
Purposes and legal bases
Personal information should only be processed where there is an appropriate legal basis. Depending on the final production context, this may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, or pursuing legitimate interests such as securing and operating the service.
Where consent is the appropriate legal basis, it must be freely given, specific, informed and capable of being withdrawn. Final production processing purposes and legal bases must be reviewed against the deployed service.
Cookies and local storage
The current website does not use advertising or analytics cookies. It uses only storage needed for website operation or preferences, as described in the Cookie Policy.
If optional analytics, advertising or other non-essential tracking is introduced later, the Cookie Policy and consent controls must be updated before those technologies are activated where consent is required.
Sharing and service providers
Information may be handled by infrastructure and service providers that are necessary to host, secure or deliver Menyra, including the configured email service used for contact enquiries.
A final production list of relevant processors, processing locations and transfer safeguards must be confirmed before launch. Menyra does not currently sell personal information to advertisers.
Retention
The current application does not persist public contact submissions in a dedicated database table. Email copies and technical logs may exist within the configured infrastructure according to its operational retention settings.
Final production retention periods for account, billing, support, analytics and operational records must be documented when those modules are deployed.
Your data-protection rights
Depending on the applicable law and circumstances, individuals may have rights such as access, correction, deletion, restriction, objection, portability, withdrawal of consent and the right to lodge a complaint with a competent supervisory authority.
Some rights are subject to legal conditions and exceptions. Requests concerning Menyra can currently be directed to the legal contact shown on this page.
Security
Menyra is being developed with measures such as CSRF protection, strict server-side validation, safe logging practices, access controls and private-file authorization patterns. No internet service can guarantee absolute security.
Changes to this policy
This draft will change as Menyra adds authentication, subscriptions, stores, public menus, analytics and other production features. Material production changes should be reflected in an updated policy and effective date.