Privacy Policy

At Restory ("we," "us," or "our"), we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines the information we collect, how we use it, and the measures we take to safeguard it. By using our website (restrory.com) or our restaurant management platform (the "Service"), you agree to the practices described in this policy.

1. What data do we collect?

Restory collects several different types of information to provide and improve our Service to you.

2. How do we collect your data?

You directly provide Restory with most of the data we collect. We collect data and process data when you:

• Sign up for a free trial or a paid subscription
• Configure your account and use the platform (e.g., add staff, create menu items, build a customer list)
• Use or view our website via your browser's cookies
• Communicate with us for customer support
• Voluntarily complete a customer survey or provide feedback

3. How will we use your data?

Restory uses the data we collect in various ways, primarily to provide our Service to you:

• To Provide and Maintain Our Service: To create your account, manage your subscription, and operate all features of the platform
• To Process Your Payments: To manage your subscription and process payments
• To Manage Your Account: To identify you as a user, provide customer support, and communicate with you about your account
• To Improve Our Service: We analyze usage data to understand how our platform is used and make improvements
• For Security: To monitor for and prevent fraud, secure our systems, and enforce our policies
• For Marketing: If you agree, to send you information about new features, updates, and special offers

4. Our Role as a Data Processor (GDPR)

For the data you collect about your customers and your staff, you are the Data Controller under the General Data Protection Regulation (GDPR). Restory acts as the Data Processor on your behalf.

This means:

• You own and control this data and are responsible for having a lawful basis to collect it
• We will only process this data in accordance with your instructions
• We will never use your customer or staff data for our own marketing purposes or sell it to any third party
• We will implement appropriate technical and organizational measures to ensure the security of this data

5. How do we store your data?

Restory securely stores your data using industry-standard security measures:

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure Servers: We use trusted cloud infrastructure providers with robust security certifications
• Access Controls: Strict access controls ensure only authorized personnel can access your data
• Regular Backups: Your data is backed up regularly to prevent loss

We retain your data only for as long as necessary to provide our services and comply with legal obligations. See our Data Retention Policy for more details.

6. Marketing

With your permission, we may send you emails about our new features, special offers, and other information we think you may find interesting.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any email we send
• Contacting us at support@restrory.com
• Updating your preferences in your account settings

7. Your Data Protection & GDPR Rights

Every user is entitled to the following rights under GDPR:

• The right to access: Request copies of your personal data
• The right to rectification: Request correction of inaccurate information
• The right to erasure: Request deletion of your personal data
• The right to restrict processing: Request restriction under certain conditions
• The right to object to processing: Object to our processing under certain conditions
• The right to data portability: Request transfer of data to another organization

If you make a request, we have one month to respond. To exercise any of these rights, contact us at support@restrory.com or call +880 133 507 5422.

8. What are cookies?

Cookies are small text files that are placed on your device to help us provide a better service. They allow us to recognize your device and store information about your preferences or past actions.

9. How do we use cookies?

We use cookies to:

• Essential Cookies: Required for the website to function properly (e.g., login sessions)
• Analytics Cookies: Help us understand how visitors use our site to improve user experience
• Preference Cookies: Remember your settings and preferences

10. How to manage cookies

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

11. Third-Party Privacy Policies

Our Service may contain links to other websites. We are not responsible for the privacy practices of other sites. We encourage you to read the privacy statements of each website you visit that collects personal information.

We work with trusted third-party service providers (e.g., payment processors, hosting providers) who may have access to your data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

12. How long do we keep your data?

We retain your personal data only for as long as necessary:

• Account Data: Retained for the duration of your subscription plus 7 years for legal and accounting purposes
• Restaurant Data: Retained for the duration of your subscription plus 90 days after account closure
• Analytics Data: Retained for 24 months, then anonymized or deleted

For more details, please see our Data Retention Policy.

13. Changes to our privacy policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. How to contact us

If you have any questions about this Privacy Policy or would like to exercise your data protection rights:

15. How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Restory has not addressed your concern satisfactorily, you have the right to lodge a complaint with the relevant data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).