Privacy Policy

Introduction

Xyvorant AS ("we", "our", or "us") is committed to protecting your privacy and personal information. This privacy policy explains how we collect, use, and safeguard your data when you use our website and services. We are the data controller responsible for your personal information.

Data We Collect

We collect various types of personal data collection to provide and improve our culinary guide services:

• Personal identification information (name, email address, phone number)
• Booking and reservation details
• Payment information (processed securely through third-party providers)
• Dietary requirements and preferences
• Website usage data through cookies and analytics
• Communication records (emails, messages, support requests)
• Location data when you use our services

How We Use Your Information

We use of your data is based on legitimate business interests and your consent. Specifically, we use your information to:

• Process bookings and provide our culinary guide services
• Communicate with you about your reservations and experiences
• Personalise your experience based on preferences and dietary requirements
• Process payments and manage billing
• Improve our services through analytics and feedback
• Send you relevant updates and promotional offers (with your consent)
• Comply with legal obligations and protect our business interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Restaurant partners and local vendors to facilitate your experiences
• Payment processors for secure transaction handling
• Analytics and advertising partners (Google Analytics, Google Ads)
• Legal authorities when required by law or to protect our rights
• Service providers who assist in delivering our services

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Booking information is typically retained for 7 years for accounting purposes. Marketing consent data is kept until you withdraw consent. Website analytics data is retained for 26 months in accordance with Google Analytics settings.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal information:

• Right to access your personal data
• Right to rectify inaccurate information
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Contact Information

For any questions about this privacy policy or to exercise your rights, please contact us:

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of our services constitutes acceptance of the updated policy.

Legal Basis for Processing

We process your personal data under the following legal bases: (a) Performance of a contract when providing our services, (b) Legitimate interests for business operations and improvement, (c) Consent for marketing communications and non-essential cookies, and (d) Legal obligation for accounting and regulatory compliance.