Privacy policy
Who we are
Cartejour ([legal entity name], New Zealand) builds and hosts websites for restaurants. This policy covers the Cartejour service itself: this site, the owner portal and the operator tools. Each restaurant's own website shows that restaurant's information and is covered here too, under "restaurant websites".
What we collect, and why
- Account details - a username, and for restaurant owners a name, email and phone number, so we can run your account and contact you about your site.
- Sign-in records - each sign-in attempt is logged with its network address to protect accounts from repeated guessing. These records are kept for 30 days, then deleted.
- Restaurant content - menus, prices, photos, reviews and opening hours, which exist to be published on the restaurant's website. Menu content may be imported from the restaurant's public Uber Eats listing at the restaurant's request.
What we don't do
- No advertising, and no sale of personal information to anyone.
- No tracking cookies. The only cookies we set are the sign-in session and one-time messages, on the sign-in hosts only. Restaurant websites set no cookies at all.
- No analytics scripts on restaurant websites today. If that changes, this policy will change first.
Who else touches the data
Traffic to every site we host passes through Cloudflare, which provides our network security and holds standard server logs. We host the service itself on [hosting arrangement]. We don't share personal information with anyone else except where the law requires it.
Your rights
Under the New Zealand Privacy Act 2020 you can ask for a copy of the personal information we hold about you, and ask us to correct or delete it. Email [contact email] and we'll sort it out. If you're not satisfied, you can complain to the Office of the Privacy Commissioner.
Changes
If this policy changes in a way that matters, we'll tell account holders by email before the change takes effect.