Privacy Policy

1. Who we are

PARstok is operated as a business based in the Republic of Cyprus.

2. Information we collect

We collect the following types of information:

• Personal details of restaurant staff and suppliers (e.g. names, email addresses, phone numbers).
• Business data such as invoices, supplier information, and costs.
• Account information used to create and manage your account.
• Payment information processed by Stripe. We do not store card details.
• Analytics and usage data collected through PostHog.

3. How we use your information

We use your data to:

• Provide and improve our services.
• Process payments and manage subscriptions.
• Provide customer support.
• Analyse usage patterns and improve the platform.
• Generate aggregated and anonymised insights.

4. Legal basis

We process data in accordance with the EU General Data Protection Regulation (GDPR) and the Processing of Personal Data (Protection of the Individual) Law of 2001 (Law 138(I)/2001) as amended. Our legal bases include: contract performance (to provide the service), compliance with legal obligations (accounting, tax, and Cyprus statutory requirements), and legitimate interests (improving our service and business operations).

5. Data storage and location

Your data is stored on Heroku and AWS servers, which may be located within or outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with EU GDPR requirements, including standard contractual clauses and adequacy decisions.

6. Data retention

If you cancel your subscription, we may retain your data for up to 12 months. Certain information may be kept longer if required for legal, accounting, or tax purposes in accordance with Cyprus law, including requirements under the Tax Procedures Law and other applicable legislation.

7. Sharing of information

We share your data only with:

• Stripe (for payments).
• PostHog (for analytics).
• Hosting providers (Heroku and AWS).

We do not sell your data to third parties.

8. Your rights

Under EU GDPR and Cyprus data protection law, you have the right to:

• Access your data.
• Request correction of inaccurate data.
• Request deletion of your data (right to erasure).
• Object to certain processing.
• Request restriction of processing.
• Request transfer of your data to another provider (data portability).
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

We will respond to requests within one month of receipt. In complex cases, this may be extended by a further two months, and we will inform you of any such extension.

9. Security

We use appropriate technical and organisational measures to protect your information. However, no system is fully secure, and we cannot guarantee absolute security.

10. Changes

We may update this Policy from time to time. If changes are significant, we will notify you by email or through the service.

11. Contact

If you have questions about this Privacy Policy or your data, please contact us at: hello@parstok.com