Privacy, transparency, and GDPR information for Nutrico

Nutrico acts as the data controller for the personal data collected when you create an account, use the platform, contact support, or subscribe to optional communications.

For GDPR purposes, you can contact our privacy team at [email protected] for any request related to data protection, data subject rights, or this privacy policy.

We collect account data such as your name, business email address, encrypted authentication credentials, restaurant or organization details, and user preferences needed to provide the service.

We also process operational data you upload into the platform, such as ingredient prices, recipe structures, supplier information, margins, analytics events, and consent preferences linked to your account.

We process your personal data to create and manage your account, secure access to the platform, deliver subscription services, provide customer support, and send essential transactional communications.

If you separately opt in, we may also use your email address for marketing messages and use product interaction data for profiling, such as tailored product suggestions, feature recommendations, or account health insights.

We rely on contract necessity to provide the service you request, including account creation, authentication, billing-related administration, and core platform functionality.

We rely on legitimate interests for fraud prevention, service security, and limited product analytics that are strictly necessary to improve reliability. We rely on consent for marketing emails and for optional profiling aimed at personalization or commercial optimization. You can withdraw those optional consents at any time without affecting the lawfulness of prior processing.

We keep account and subscription data for as long as your account remains active and for the period reasonably necessary to comply with legal, tax, accounting, and dispute-resolution obligations after closure.

Optional marketing and profiling consents are stored until you withdraw them, your account is deleted, or the data is no longer needed for the stated purpose.

If you are in the European Economic Area, you may request access, rectification, deletion, restriction, portability, or objection to processing in accordance with Articles 15 to 21 GDPR.

You also have the right to withdraw any optional consent at any time and to lodge a complaint with your local supervisory authority if you believe your personal data has been processed unlawfully.

We share data only with carefully selected processors that help us host the service, secure infrastructure, process payments, deliver support, or send communications. Those providers act under written data processing terms.

Where data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or equivalent lawful transfer mechanisms.

For privacy requests, contact [email protected]. For general contractual questions, contact [email protected]. We may ask you to verify your identity before processing certain requests to protect account security.