Data Privacy Policy

Introduction

MetroNexis Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and safeguard your personal information when you visit our website, use our services, or interact with our food waste analytics platform.

As the data controller, metronexis is responsible for ensuring your personal data is processed lawfully, fairly, and transparently in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Data We Collect

We may collect and process various types of personal data about you, including information you provide directly and data we collect automatically through your use of our services. The specific data we collect includes:

Information You Provide

• Contact details (name, email address, phone number, postal address)
• Company information (restaurant name, business type, operational details)
• Account credentials and login information
• Communication preferences and marketing consents
• Enquiry details and support requests
• Payment and billing information for our services

Information We Collect Automatically

• Website usage data and analytics information
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Platform usage statistics and performance metrics
• Food waste data and operational analytics from your restaurant

How We Use Your Information

We process your personal data for specific purposes based on legitimate legal grounds. How we use your data depends on the services you use and your relationship with metronexis:

Service Delivery

• Providing our food waste analytics platform and related services
• Processing and responding to your enquiries and support requests
• Managing your account and billing for our services
• Delivering technical support and platform maintenance

Business Operations

• Improving our services and developing new features
• Conducting analytics to enhance user experience
• Ensuring security and preventing fraud
• Complying with legal and regulatory requirements

Marketing and Communications

• Sending service updates and important notifications
• Providing marketing communications (with your consent)
• Conducting market research and customer feedback surveys

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to control them, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary for performing our services contract with you
• Legitimate Interests: For business operations, security, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• With trusted service providers who assist in delivering our services
• When required by law or to protect our legal rights
• In connection with a business transfer or acquisition
• With your explicit consent for specific purposes

All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Account and service data: For the duration of your service contract plus 7 years for business records
• Marketing communications: Until you withdraw consent or 3 years of inactivity
• Website analytics: Up to 26 months as per Google Analytics retention settings
• Legal compliance: As required by applicable laws and regulations

After the retention period expires, we securely delete or anonymise your personal data.

Your Rights

Under GDPR and UK data protection law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct any inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for marketing
• Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us using the details provided in the contact section below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and staff training
• Secure data centres and infrastructure
• Incident response procedures

International Data Transfers

We primarily process data within the UK and European Economic Area (EEA). When we transfer data outside these regions, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with sufficient data protection
• Binding corporate rules for intra-group transfers

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Contact Information

If you have questions about this privacy policy, wish to exercise your data protection rights, or need to contact us regarding data protection matters, please reach out using the following details:

We will respond to your enquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will notify you by email (if you have provided your email address) and/or by posting a notice on our website.

The updated policy will be effective from the date specified at the top of the document. We encourage you to review this policy periodically to stay informed about how we protect your information.