Privacy Notice

Aho Media Solutions & Consultancy Limited, a company registered in England and Wales (company no. 14776234, registered office: Office 4, 02 Clockwise, London N22 7DE, United Kingdom, email: hello@clochemenu.com, phone: +44 7400 734583) is the controller for the data of businesses and their staff who use Cloche.

For data that guests leave on a venue's menu (such as feedback), the venue is the controller and Cloche is its processor.

Business users (owners, managers, staff):

• Name and email — to create and run your account, sign you in, send invitations, password resets and service emails. Lawful basis: contract.
• Security data — your password (stored only as a one-way hash), session data and, briefly, IP addresses to prevent abuse. Lawful basis: legitimate interests.
• Billing details — business name, plan and invoices. Lawful basis: contract and legal obligation.

Menu guests:

• No account, name or contact details are needed to view a menu, and we use no tracking or advertising cookies.
• Scans, visits and dish views are counted with language and table, without storing IP addresses or linking them to a person.
• Guests can choose to leave a rating, a comment and, optionally, an email or phone number so the venue can reply.
• Call-the-waiter requests store the table name and time; they close after 30 minutes.

We use these processors only as far as needed to run the service:

• Vercel Inc. — hosting and file storage (US / EU)
• Neon Inc. — database
• Anthropic PBC — AI translation, menu import and calorie estimates (only menu content is sent, never personal data)
• Zoho Corporation — sending email (EU data centre)
• Functional Software Inc. (Sentry) — error logs
• Stripe — payments, once card billing is live; we never store card details

Where data leaves the UK, transfers are protected by the UK International Data Transfer Addendum or an equivalent safeguard.

• Account data: for the life of the account and up to 90 days after closure; invoices for as long as the law requires (6 years in the UK).
• Raw visit records: 90 days; after that only hourly totals remain.
• Guest feedback: until the venue deletes it or closes its account.

You can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time. Email hello@clochemenu.com; we reply within one month. If you are a guest, you can also contact the venue directly.

You can complain to the Information Commissioner's Office (ico.org.uk), but we'd appreciate the chance to help first.