karnovetia.top

Data Privacy Policy

Last updated: 15th January 2026

Introduction

karnovetia.top Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and protect your personal data when you visit our website karnovetia.top or use our restaurant menu engineering analytics services.

Data Controller Information

The data controller for your personal information is:

  • Company: karnovetia.top Ltd
  • Registration Number: 96325841
  • VAT Number: GB962514387
  • Address: 101 The Avenue, Cardiff, CF3M 4UH, Wales, United Kingdom
  • Email: [email protected]
  • Phone: +44 2916619453

Data We Collect

We collect and process various types of personal data depending on how you interact with our services. The data we collect includes:

  • Contact Information: Name, email address, phone number, company name, and job title when you contact us or request our services
  • Website Usage Data: IP address, browser type, operating system, pages visited, time spent on pages, and referring websites
  • Communication Data: Records of correspondence when you contact us via email, phone, or contact forms
  • Restaurant Data: Menu information, sales data, customer patterns, and operational data provided by restaurant clients for analysis
  • Technical Data: Device information, browser settings, and technical identifiers for website functionality

How We Use Your Information

We use the personal data we collect for the following purposes and under the following legal bases:

  • Service Provision: To provide menu engineering analytics services, process enquiries, and deliver consultations (Legal basis: Contract performance)
  • Communication: To respond to your enquiries, provide customer support, and send service-related communications (Legal basis: Contract performance and legitimate interests)
  • Business Operations: To manage client relationships, process payments, and maintain business records (Legal basis: Contract performance and legal obligations)
  • Website Improvement: To analyse website usage, improve user experience, and optimise our services (Legal basis: Legitimate interests)
  • Marketing: To send relevant information about our services, with your consent (Legal basis: Consent)
  • Legal Compliance: To comply with legal obligations and protect our legitimate business interests (Legal basis: Legal obligations and legitimate interests)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please see our cookie policy.

Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our business, subject to confidentiality agreements
  • Legal Requirements: When required by law, court order, or to protect our legal rights and interests
  • Business Transfers: In connection with any merger, acquisition, or sale of company assets, with appropriate data protection measures
  • Consent: With your explicit consent for specific purposes

International Data Transfers

As we operate across the EU, your personal data may be transferred to and processed in different EU member states. All transfers are conducted in accordance with GDPR requirements and appropriate safeguards are implemented to protect your data.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including:

  • Client Data: For the duration of our business relationship plus 7 years for legal and tax compliance
  • Website Data: Analytics data is retained for up to 26 months
  • Communication Records: Retained for 3 years for business continuity and dispute resolution
  • Marketing Data: Until you withdraw consent or for 2 years of inactivity

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Request transfer of your data to another organisation
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication systems
  • Staff training on data protection principles
  • Secure backup and disaster recovery procedures

Third-Party Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Contact Information

If you have questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Legal Basis Summary

We process personal data under the following legal bases as defined by GDPR:

  • Consent: Where you have given clear consent for specific processing activities
  • Contract: Where processing is necessary for contract performance or pre-contractual steps
  • Legal Obligation: Where processing is required to comply with legal requirements
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, balanced against your rights