Privacy policy

Last updated: 11 November 2026

Who is responsible

BHN Consulting is the data controller for the accounts of restaurants using Mondotable and for this website. For the data of guests who use a restaurant’s menu, the restaurant is the controller and we process that data on its behalf, under these rules. Contact: support@mondotable.com.

What we collect, why, and for how long

• Restaurant accounts: email, name, password (stored hashed), team roles, venue details and menu content. To provide the service (contract). Kept while the account exists, erased within 30 days of deletion.
• Billing: chosen plan, billing period and Stripe customer reference. Card details, the billing address and the VAT number are entered on Stripe’s payment page; card details never reach us. Invoices are kept as long as accounting law requires.
• Guest orders: the items, table, and an optional first name or phone number. The name and phone number are erased automatically after 24 hours; the order lines stay in the restaurant’s statistics.
• Guest analytics: only if the guest accepts, a random identifier stored on the guest’s device and the pages and dishes viewed. Refusing changes nothing in how the menu works.
• Guest contacts and loyalty: an email address only when a guest ticks the consent box; every email has an unsubscribe link. Loyalty cards use a code, not a name.
• Demo: trying the demo creates a temporary copy of an example restaurant, linked to a cookie in your browser. An untouched demo is deleted after 2 hours; an edited one is kept 30 days after the last edit so you can keep it when you sign up.
• Menu service requests: the details you send through the request form, to answer you. Kept one year.
• Security logs: sessions with browser type and last activity, to keep accounts safe. Kept while the session is active (up to 30 days of inactivity).
• Backups: a copy of the database and of the photos is made every day so the service can be restored after an incident. Database copies are kept for up to 30 days, and photos that are no longer used leave the backups within 30 days: what you delete, and what is erased automatically, disappears from the backups within that time.

Who processes data for us

• our hosting provider (servers in the European Union): hosting.
• Cloudflare: delivery and protection of the website (traffic passes through its network), and storage of the backups in the European Union (the database copy is encrypted).
• Stripe Payments Europe: subscription payments.
• RevenueCat: subscription and revenue reporting (venue name, owner email, plan and payments; no guest data).
• PostHog (EU cloud): product and service analytics from our servers only: account events such as sign-up, publishing and subscriptions, order counts per venue, and technical health. No tracking script in your browser and no guest is identified.
• Resend: sending emails (account, reports, guest campaigns).
• OpenAI: AI translation of your menu texts into the languages you enable (automatic after each change) and menu import (reading a photo or PDF of your menu); the menu text or file is sent. A note a guest writes with an order in another language is translated automatically by this provider so the staff can read it: only the text of the note is sent, without the guest’s name or table, and the translation is kept with the order. No other guest data is sent.

We do not sell personal data, do not use advertising trackers, and load no third-party scripts on guest menus. Where a provider is outside the European Economic Area, transfers rely on the European Commission’s standard contractual clauses.

Cookies and storage

We use only what the service needs: a sign-in cookie, a demo cookie when you try the demo, and on your device your language choice. On guest menus, the guest’s phone also keeps: the analytics choice, the table, the first name if one was given, the cart (up to 3 hours), this visit’s orders and notes (up to 6 hours) so an order can still be followed after the menu is reopened, and a random code that links the phone to its orders and loyalty card. No advertising cookies.

Your rights

You can access, correct, export and delete your data. Download everything from Settings › Your account › Download my data, and delete your account from Settings. Guests can contact the restaurant or us. You can also object to processing based on our legitimate interest and complain to the Belgian Data Protection Authority (dataprotectionauthority.be).