Privacy Policy

This privacy policy explains how spitefizhu S.A. collects, uses, and protects your personal information when you use our restaurant analytics platform and website.

Last updated: 15 January 2026

Data Controller Information

The data controller for your personal information is:

Data Collection

We collect various types of personal data when you use our services. The data we collect includes:

  • Contact Information: Name, email address, phone number, company name, and business address when you register for our services or contact us
  • Account Data: Username, password, and account preferences for accessing our analytics platform
  • Business Information: Restaurant details, menu information, ordering data, and revenue metrics that you provide or authorise us to collect
  • Technical Data: IP address, browser type, device information, and website usage patterns collected through cookies and similar technologies
  • Communication Data: Records of correspondence when you contact our support team or participate in surveys

Data collection occurs through direct interactions with our website, analytics platform, API integrations with your restaurant systems, and third-party services that you authorise us to access.

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, and your consent where required. Specifically, how we use your information includes:

  • Service Provision: To provide our restaurant analytics platform, process your orders, and deliver the services you have requested
  • Account Management: To create and manage your account, authenticate your access, and provide customer support
  • Analytics and Insights: To analyse your restaurant data and provide revenue insights, performance metrics, and business intelligence reports
  • Communication: To send service updates, respond to enquiries, and provide technical support
  • Platform Improvement: To enhance our services, develop new features, and improve user experience
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Marketing: With your consent, to send promotional materials and information about our services

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to control them, please see our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with:

  • Service Providers: Trusted third-party companies that help us operate our platform, such as cloud hosting providers, payment processors, and technical support services
  • Integration Partners: POS systems, ordering platforms, and payment services that you authorise us to connect with
  • Legal Authorities: When required by law, court order, or to protect our rights and interests
  • Business Transfers: In the event of a merger, acquisition, or sale of our business assets

All third parties are required to maintain appropriate security measures and use your data only for the specified purposes.

Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes outlined in this privacy policy. Specific retention periods include:

  • Account Data: Retained while your account is active and for up to 3 years after account closure
  • Analytics Data: Retained for up to 5 years to provide historical insights and trend analysis
  • Communication Records: Retained for up to 2 years for customer service and legal purposes
  • Marketing Data: Retained until you withdraw consent or for up to 3 years from last engagement

We may retain certain data for longer periods where required by law or for legitimate business purposes such as fraud prevention.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request that we limit how we use your personal data
  • Right to Data Portability: Request a copy of your data in a structured, machine-readable format
  • Right to Object: Object to our processing of your personal data for certain purposes
  • Right to Withdraw Consent: Withdraw your consent for processing where we rely on consent

To exercise any of these rights, please contact us at privacy@spitefizhu.world. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication systems
  • Employee training on data protection and security
  • Incident response procedures and breach notification protocols

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU. When we transfer data outside the EU, we ensure appropriate safeguards are in place, such as:

  • European Commission adequacy decisions
  • Standard contractual clauses approved by the European Commission
  • Binding corporate rules for multinational companies

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Contact Information

If you have any questions about this privacy policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) if you believe we have not handled your personal data in accordance with applicable law.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this policy and notify you through our platform or by email if the changes are significant.

We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.