Privacy Policy

Last updated: 1st January 2026

Data Collection

MetroLuxium S.A. ("we", "our", or "us") collects personal data when you visit our website, contact us, or use our restaurant analytics services. The data we collect includes:

  • Contact Information: Name, email address, phone number, and company details when you submit enquiries or register for our services
  • Website Usage Data: IP address, browser type, device information, pages visited, and interaction patterns on our website
  • Communication Data: Records of correspondence, support requests, and feedback you provide
  • Business Information: Restaurant details, operational data, and customer analytics information for service delivery
  • Technical Data: Login credentials, account preferences, and platform usage statistics

How We Use Your Information

We use your personal data for legitimate business purposes and with your consent where required. How we use your information includes:

  • Service Delivery: Providing our restaurant customer retention analytics platform and related services
  • Customer Support: Responding to enquiries, providing technical assistance, and resolving service issues
  • Business Communication: Sending service updates, important notices, and relevant business information
  • Platform Improvement: Analysing usage patterns to enhance our services and develop new features
  • Marketing: With your consent, sending promotional materials about our services and industry insights
  • Legal Compliance: Meeting regulatory requirements and protecting our legitimate business interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

  • Service Providers: Trusted third-party vendors who assist in delivering our services, such as cloud hosting providers and analytics tools
  • Legal Requirements: When required by law, court order, or to protect our rights and the safety of our users
  • Business Transfers: In connection with mergers, acquisitions, or sale of business assets
  • With Consent: When you explicitly authorise us to share your information for specific purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:

  • Access: Request access to your personal data and information about how we process it
  • Rectification: Request correction of inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request limitation of processing in specific situations
  • Portability: Request transfer of your data to another service provider
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this privacy policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for which it was collected. Generally, we retain contact information for active business relationships and for up to seven years after the relationship ends for legal and regulatory compliance purposes.

International Data Transfers

As a company based in Portugal, we primarily process data within the European Union. If we transfer your personal data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are intended for business use and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.

Contact Information

If you have questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Data Controller Information

MetroLuxium S.A. is the data controller for personal data processed through our website and services. Our company is registered in Portugal with registration number 586937152 and VAT number PT583614297. We are committed to processing your personal data in accordance with applicable data protection laws and regulations.