Does GDPR apply to my restaurant if I'm outside the EU?
Updated 16 October 2026
It can. The GDPR covers organisations in the EEA, and also organisations outside it that offer goods or services to people in the EEA or monitor their behaviour.
- A restaurant that only serves customers in its own country is usually not in that group.
- If you take orders from people in the EEA, ask a local adviser about your duties.
- This is general information, not legal advice.
- The European Data Protection Board has a plain guide for small businesses.
Know what customer data you hold
Orders from your Menuthere ordering website are kept in your own dashboard, so you can see what customer details you hold.
Next questions
Sources (1)
- European Data Protection Board source, European Data Protection Board, read 30 September 2026
