Privacy Policy
Last updated: 18 October 2026
At EasyMenu, operated by SkySoft Solutions (“EasyMenu”, “we”, “us” or “our”), we are committed to protecting the privacy and security of the people who use our website and service. This Privacy Policy explains how we collect, use, share and protect personal information when restaurants and their staff use EasyMenu, and when guests view a restaurant's menu, place an order or pay through it. It should be read together with our Terms & Conditions.
1. Information we collect
Restaurants and staff
- Business details such as the restaurant's name, address, phone numbers, email, website, logo, opening hours and tax settings.
- Staff account details: name, email address, mobile number, role and an encrypted (hashed) password.
- Menus, tables, orders, bills, promotions and reports created in the restaurant portal.
- Billing information for subscriptions, and the bank account details a restaurant enters to receive card payment payouts.
Guests
- Your mobile number, which you verify with an SMS code before your first order, and your name if you provide it.
- The orders you place: items, special requests, the table or order type, times, totals and payment status.
- When you pay by card, the email address you give for your receipt and the payment reference and status returned by PayHere. Card numbers and security codes are entered on PayHere's secure checkout and are never received or stored by EasyMenu.
Website visitors
- The name, restaurant name, email and phone number you submit through the Request a Callback form.
- Technical information collected automatically, such as IP address, browser and device type, pages visited and the time of your visit, used for security, fraud prevention and to keep the service working.
2. Use of information
We use the information we collect to:
- provide the service: show menus, send orders to the restaurant, keep bills, and show guests the status of their orders;
- verify guests' mobile numbers and keep restaurant and staff accounts secure, including detecting suspicious sign-ins;
- process card payments, pay restaurants out, and issue and collect subscription invoices;
- respond to callback requests, enquiries and support requests, and send service messages such as sign-in details, password resets and invoices;
- translate menus into the languages a restaurant offers, and improve and develop EasyMenu; and
- prevent fraud and misuse, and meet our legal obligations.
We do not use guests' information for our own marketing, and we do not sell personal information.
3. Information sharing
We do not sell, trade or otherwise transfer your personal information to third parties without your consent, except as described below:
- The restaurant you order from. When you order or pay at a restaurant, that restaurant and its authorised staff can see your name, mobile number and orders so they can serve you. Each restaurant is responsible for how it uses that information.
- Trusted service providers who help us run EasyMenu and are bound to keep the information confidential: PayHere (Payable (Pvt) Ltd) for card payments, our SMS provider for sign-in codes, our email provider, our hosting providers, and machine translation providers, which receive menu text only (never guest information).
- When required by law, or to protect the rights, property or safety of EasyMenu, our users or others, for example in response to a court order or to investigate fraud.
4. Data security
We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS), hashed passwords, encryption of sensitive settings, short-lived sign-in sessions, rate limiting and audit logs. Each restaurant's data is kept separate and is only accessible to that restaurant's authorised staff, and to our support staff when needed to operate the service. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
5. Data retention
We keep personal information only for as long as needed for the purposes above. Orders, bills and payment records are kept for as long as the restaurant's account is active and as long as required for accounting and tax purposes. When a restaurant closes its account, we delete or anonymise its data within a reasonable period, except where we must keep it by law. Callback requests are kept while we are in contact with you about EasyMenu.
6. Cookies and tracking technologies
We use only the cookies and similar browser storage the service needs to work: a secure cookie that keeps restaurant staff and guests signed in, a cookie that remembers the menu language you pick, and browser storage that remembers, for example, the email for your card payment receipt. We do not use advertising cookies. You can choose to disable cookies through your browser settings, but signing in, ordering and paying may then not work.
7. Your rights
You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by contacting us using the details below. Guests can also contact the restaurant they ordered from. We may need to verify your identity first, and we may keep some information where the law requires it.
8. Children
EasyMenu is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.
9. Changes to the Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with a revised “Last updated” date. For material changes, we will notify restaurants by email or in the restaurant portal.
10. Contact us
If you have any questions or concerns about this Privacy Policy, or want to exercise your rights, please contact us:
- Email: support@easymenu.lk
- Phone: +94 76 619 7793
- Address: No. 16/59, Rafalwatta Road, Yakkala, Sri Lanka