Privacy Policy

Effective Date: September 4, 2026 Last Updated: September 4, 2026

1. Introduction

INTIQAA FOR INVESTMENT & MULTI ACTIVITIES ("Loqma Menu," "we," "us," or "our"), operating the digital menu and point-of-sale (POS) platform available at loqmamenu.com and through our related applications (collectively, the "Service"), respects your privacy and is committed to protecting the personal data you share with us.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights available to you. It applies to:

• Restaurant, café, and hospitality business owners and staff who subscribe to and use our Service ("Business Customers");
• Diners and end customers who interact with a digital menu, place an order, or scan a QR code powered by our Service ("End Customers");
• Visitors to our website and marketing channels.

By using our Service, you agree to the collection and use of information as described in this Privacy Policy.

2. Who We Are

Loqma Menu is a product of INTIQAA FOR INVESTMENT & MULTI ACTIVITIES, a company registered in the Sultanate of Oman under Commercial Registration No. 1520944.

Registered address: P.O. Box 120, P.C. 111, Al Azaiba, Muscat, Sultanate of Oman Email: intiqaaoman@gmail.com Phone / WhatsApp: +968 9703 6176

We operate the following services, all of which are covered by this Privacy Policy:

• Loqma Menu (loqmamenu.com) — digital menus, online ordering and point-of-sale for restaurants and cafés.
• Prodics (prodics.com) — the same platform adapted for retail shops.
• Websites with messaging automation built for service providers, including health centres.

INTIQAA LAB is the technical and developer identity of INTIQAA FOR INVESTMENT & MULTI ACTIVITIES. It is the name under which we publish our applications and developer integrations — including our WhatsApp Business Platform integration — and it refers to the same legal entity described above.

3. Information We Collect

3.1 Information from Business Customers

When you create an account or subscribe to Loqma Menu, we may collect:

• Business name, brand name, and business registration/commercial registration number
• Owner and staff contact details (name, email address, phone/WhatsApp number)
• Billing and subscription information (plan, billing cycle, transaction history), processed by our payment partner, Paddle.com, acting as Merchant of Record
• Menu content you upload (item names, descriptions, prices, categories, calorie information, photos/images, translations)
• Branch, location, and operating-hours information
• Login credentials and account activity logs

3.2 Information from End Customers (Diners)

When an End Customer views a digital menu or places an order through our Service, we may collect:

• Order details (items selected, order type — dine-in, delivery, or pickup)
• Table, session, or QR-code identifiers
• Name and/or phone number, where voluntarily provided for order pickup, delivery, or the waiter-call feature
• Device, browser, and IP address information
• Interaction data such as items viewed, click behavior, and time spent on the menu (used for the menu analytics feature made available to Business Customers)

End Customers are not required to create an account to browse a digital menu.

3.3 Automatically Collected Information

Like most websites and applications, we automatically collect certain technical information when the Service is used, including IP address, browser type, device identifiers, operating system, referring pages, and general usage data through cookies and similar technologies.

3.4 Information from Third Parties

We may receive information from:

• Payment and billing partners (e.g., Paddle.com) confirming subscription and payment status
• Communication providers (e.g., WhatsApp Business API, SMS providers) confirming message delivery status
• AI service providers used to process uploaded images for our optional photo/image enhancement add-on

4. How We Use Your Information

We use the information we collect to:

• Create and manage Business Customer accounts and subscriptions
• Deliver the core Service: digital menus, order management, and, where subscribed, POS functionality
• Process billing and payments through our Merchant of Record, Paddle.com
• Provide customer support, including through WhatsApp and email
• Send service-related communications (billing notices, delivery confirmations, feature updates)
• Generate menu analytics and usage reports for Business Customers
• Enhance or generate images for the optional AI photo-enhancement add-on, at the Business Customer's request
• Maintain the security, integrity, and proper functioning of the Service
• Comply with legal obligations and enforce our Terms & Conditions
• With your consent, send marketing communications, which you may opt out of at any time

We do not sell personal information to third parties.

5. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal data, we rely on one or more of the following:

• Performance of a contract (delivering the Service you subscribed to)
• Legitimate business interests (improving the Service, preventing fraud, analytics)
• Your consent (e.g., optional marketing communications, AI image processing)
• Compliance with a legal obligation

6. How We Share Information

We share information only as necessary to operate the Service:

• Payment processing: Subscription and billing data is shared with Paddle.com, our payment provider and Merchant of Record, which processes payments on our behalf and handles related tax and compliance functions.
• Business Customers: End Customer order data (e.g., items ordered, table number, optional name/phone) is shared with the specific restaurant/café the order was placed with, so it can be fulfilled.
• Service providers: We share limited data with hosting providers, messaging providers (WhatsApp Business API, SMS providers), and AI image-processing providers, strictly to deliver the features in use.
• Artificial intelligence providers: Where a business customer has enabled automated replies, the content of messages exchanged with that business may be processed by an artificial intelligence provider solely in order to draft a reply on the business's behalf. This content is not used to train artificial intelligence models, and is not retained by us beyond the retention period stated in this policy.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Loqma Menu, our customers, or others.
• Business transfers: If Loqma Menu is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this Privacy Policy or a policy at least as protective.

We do not share personal information with third parties for their own independent marketing purposes.

7. Data Storage and Security

We take reasonable technical and organizational measures to protect the information we hold, including access controls, encrypted connections, and restricted internal access on a need-to-know basis. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Business Customer account data is generally retained for the duration of the subscription and a reasonable period afterward for accounting and legal purposes. End Customer order data is retained only as long as needed for order fulfillment, reporting, and the Business Customer's own record-keeping needs.

9. International Data Transfers

Our Service may be accessed by Business Customers and End Customers in different countries. Where we or our service providers (including our payment partner) process or store data outside a user's country of residence, we take reasonable steps to ensure such transfers are conducted in accordance with applicable data protection laws.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal and contractual retention requirements
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent (e.g., marketing communications, AI image processing)
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at intiqaaoman@gmail.com. We will respond within a reasonable timeframe.

11. Cookies

Our website and Service may use cookies and similar technologies to remember preferences, keep users signed in, and understand how the Service is used (menu analytics). Cookies can be controlled through browser settings; disabling cookies may affect certain features of the Service.

12. Children's Privacy

Our Service is intended for business use by restaurant and café operators and for use by their general adult consumer audience. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so it can be removed.

13. Third-Party Links

Our Service may contain links to third-party websites or services (e.g., payment gateways, maps, social media). We are not responsible for the privacy practices of these third parties, and we encourage users to review their privacy policies separately.

14. WhatsApp Business Platform Data

Where a business customer connects its WhatsApp business phone number to the Service, we process the resulting WhatsApp data as a processor acting on that business customer's instructions. The business customer is the controller of that data; we act only on its behalf and only to provide the Service it has enabled.

What we process. The business phone number and WhatsApp Business Account (WABA) identifier; access tokens issued by Meta; the phone numbers of people who message the business; the content, media and delivery status of messages exchanged through the Service; and message templates together with their approval status.

Why we process it. Solely to deliver the messaging features the business customer has switched on — sending order confirmations and order status updates, receiving and displaying customer messages in the dashboard, and creating and managing message templates.

What we never do. We do not use WhatsApp data for our own advertising or marketing. We do not sell, rent or trade it. We do not share it with any third party other than Meta, which operates the messaging platform itself. We do not use it to train artificial intelligence models.

Security and control. Access tokens are stored encrypted and are reachable only by the automated processes required to send and receive messages. A business customer may disconnect its number at any time from its dashboard; on disconnection we delete the stored access token immediately and cease all further processing.

Retention. Message content and delivery status are retained for no more than 90 days and are then deleted automatically, unless the business customer instructs a shorter period. Identifiers needed to keep a connection working are retained only while that connection is active.

Your use of WhatsApp is additionally governed by Meta's terms and by the WhatsApp privacy policy. This Privacy Policy does not replace them.

15. Deleting Your Data

Business customers. To disconnect WhatsApp only, use Dashboard → Settings → WhatsApp → "Disconnect number"; the access token is deleted immediately. To delete your whole account and its data, write to us from the email address registered on your account with the subject "Data deletion request". We verify your identity and then delete the account and its data within 30 days, and confirm to you when it is done. Records we are legally required to keep, such as invoices, are retained for the statutory period and then deleted.

End customers (diners). Your data belongs to the restaurant you ordered from and we process it on its instructions. Contact that restaurant directly, or write to us with the restaurant name and the phone number you used; we forward the request and carry out the deletion once the restaurant confirms it, within 30 days at most.

What is deleted. Account and profile data; phone numbers and addresses; the order history associated with you; WhatsApp conversation content stored by us; third-party access tokens; and images you uploaded.

Step-by-step instructions are published at loqmamenu.com/data-deletion.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last Updated" date at the top of this page indicates when this policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

17. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

INTIQAA FOR INVESTMENT & MULTI ACTIVITIES (Loqma Menu) P.O. Box 120, P.C. 111, Al Azaiba, Muscat, Sultanate of Oman Email: intiqaaoman@gmail.com Phone / WhatsApp: +968 9703 6176 Website: loqmamenu.com