Privacy Policy

Data Controller Information

neuroprotrixum S.A. is the data controller responsible for your personal information. We are a Portuguese company registered under number 963258741, with our registered office at Avenida de Roma 202, 4077-569 Porto, Portugal.

For any privacy-related enquiries, you can contact us at privacy@neuroprotrixum.world or by telephone at +351 222 264 834.

Data We Collect

We collect various types of personal information to provide and improve our restaurant analytics services. The data we collect includes information you provide directly to us and information we collect automatically when you use our website and services.

Information You Provide

When you contact us, request information, or use our services, we may collect the following personal data:

• Contact information including your name, email address, telephone number, and company name
• Business information about your restaurant including location, size, and operational details
• Communication preferences and marketing consent
• Any other information you choose to provide in your communications with us

Information We Collect Automatically

When you visit our website, we automatically collect certain technical information:

• Device and browser information including IP address, browser type, and operating system
• Website usage data including pages visited, time spent, and navigation patterns
• Cookies and similar tracking technologies as described in our cookie policy
• Referral information about how you arrived at our website

How We Use Your Information

We use the personal data we collect for legitimate business purposes related to providing our restaurant analytics services and improving our offerings. The specific ways we use of your data include the following purposes:

• Service Provision: To provide our analytics services, respond to your enquiries, and fulfil our contractual obligations
• Communication: To communicate with you about our services, send updates, and provide customer support
• Service Improvement: To analyse website usage, improve our services, and develop new features
• Marketing: To send you relevant marketing communications about our services (with your consent where required)
• Legal Compliance: To comply with legal obligations and protect our legitimate business interests
• Security: To protect the security and integrity of our website and services

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our cookie policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Legitimate Interests: For business development, service improvement, and marketing to existing clients
• Contract Performance: To provide our services and fulfil contractual obligations
• Consent: For marketing communications and non-essential cookies (where required)
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of business assets
• Consent: With your explicit consent for specific purposes

All third-party service providers are contractually required to protect your information and use it only for the specified purposes.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Our typical data retention periods are:

• Contact Information: Retained for up to 7 years after last contact for business development purposes
• Website Analytics: Anonymised after 26 months in accordance with Google Analytics settings
• Marketing Data: Retained until consent is withdrawn or for 3 years after last engagement
• Legal Records: Retained as required by applicable law and regulation

When we no longer need your personal information, we will securely delete or anonymise it.

Your Rights

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal information:

• Access: The right to request a copy of the personal data we hold about you
• Rectification: The right to request correction of inaccurate or incomplete information
• Erasure: The right to request deletion of your personal data in certain circumstances
• Restriction: The right to request that we limit how we use your personal data
• Portability: The right to receive your data in a portable format
• Objection: The right to object to our processing of your personal data
• Withdraw Consent: The right to withdraw consent where we rely on consent for processing

To exercise any of these rights, please contact us at privacy@neuroprotrixum.world. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure hosting and backup procedures

While we strive to protect your personal information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions
• Standard contractual clauses
• Binding corporate rules
• Other legally recognised transfer mechanisms

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this privacy policy or our data handling practices, please contact us using the following information:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) if you believe we have not handled your personal data in accordance with applicable law.