Privacy Policy

This Privacy Policy explains how Skailab Ltd (“Skailab”, “we”, “us” or “our”) collects, uses and protects personal information when you visit https://gastrom.io/, contact us or request a demonstration of Gastromio.

Gastromio is a product developed and operated by Skailab Ltd.

1. Who We Are

For the personal information described in this Privacy Policy, the data controller is:

Skailab Ltd
Company No. 16927132
Registered in England and Wales

Registered office:

Stoney Works
8 Stoney Lane
London
United Kingdom
SE19 3BD

Email: info@skailab.tech

Website: https://gastrom.io/

2. Scope of This Privacy Policy

This Privacy Policy currently applies to:

• visitors to the Gastromio Website;
• individuals who contact us;
• individuals who request a demonstration;
• representatives of restaurants, restaurant groups and other potential business customers; and
• individuals who communicate with us in connection with a potential Gastromio pilot or commercial relationship.

Gastromio is currently in a pre-launch stage.

This Privacy Policy therefore primarily covers personal information collected through the public Website and our sales and demo process.

It does not currently describe the processing of restaurant POS data or other customer data through a production Gastromio service.

If Gastromio begins processing customer data as part of pilots, subscriptions or production deployments, additional contractual and data protection terms may apply.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following information.

3.1 Contact information

This may include:

• first and last name;
• business email address;
• telephone number; and
• other contact details you choose to provide.

3.2 Business information

This may include:

• company or restaurant name;
• job title or role;
• number of restaurant locations;
• POS provider;
• technology systems used by your organisation; and
• other information about your business that you provide to us.

3.3 Demo and enquiry information

When you request a demo or contact us, we may collect:

• information included in your enquiry;
• questions you want us to address;
• information relevant to assessing potential compatibility;
• preferred meeting times;
• meeting and communication history; and
• follow-up notes relating to the potential business relationship.

Please do not send us confidential restaurant data, customer data, employee data or POS transaction data through the public demo request form unless we specifically ask you to do so through an appropriate secure process.

3.4 Technical and usage information

When you visit the Website, we may automatically receive information such as:

• IP address;
• browser type and version;
• device type;
• operating system;
• referring page or website;
• pages viewed;
• approximate location derived from IP address;
• date and time of access;
• Website interactions; and
• technical logs used for security and troubleshooting.

3.5 Cookies and similar technologies

The Website may use cookies and similar technologies for:

• essential Website operation;
• security;
• remembering preferences;
• measuring Website performance; and
• analytics.

Where required by applicable law, we will obtain consent before placing or accessing non-essential cookies or similar technologies.

You may be able to manage non-essential cookies through the Website's cookie controls or through your browser settings.

4. How We Collect Personal Information

We may collect information:

Directly from you

For example, when you:

• complete a demo request form;
• email us;
• speak with our team;
• schedule a meeting;
• participate in a demo; or
• otherwise provide information to us.

Automatically

We may collect technical and usage information when you interact with the Website through cookies, server logs and similar technologies.

From your organisation or professional sources

In some cases, we may receive business contact information from your employer, colleagues, business partners or publicly available professional sources where permitted by applicable law.

5. How We Use Personal Information

We may use personal information to:

Respond to enquiries and provide demonstrations

We use contact, business and enquiry information to:

• respond to your request;
• arrange and conduct demonstrations;
• understand your business requirements;
• assess potential POS compatibility; and
• communicate with you regarding Gastromio.

For individuals in the UK or EEA, we generally rely on our legitimate interests in responding to business enquiries, developing customer relationships and operating our business.

Where processing is necessary to take steps at your request before entering into a contract, we may also rely on steps prior to entering into a contract as a lawful basis where applicable.

Manage prospective customer relationships

We may maintain information about enquiries and communications so that we can:

• follow up on requests;
• understand your requirements;
• manage our sales pipeline; and
• avoid requiring you to provide the same information repeatedly.

We rely on our legitimate interests in managing and developing our business relationships.

Operate, secure and improve the Website

We may use technical and usage information to:

• operate the Website;
• detect and prevent misuse;
• maintain security;
• troubleshoot technical issues;
• understand Website performance; and
• improve the Website and our communications.

We rely on our legitimate interests in operating and securing our Website and improving our services.

Where non-essential cookies or similar technologies require consent, we rely on consent.

Send marketing communications

Where permitted by law, we may contact business prospects about Gastromio or related Skailab products and services.

Where consent is required, we will obtain it before sending marketing communications.

You may opt out of marketing communications at any time by using an unsubscribe mechanism where provided or by contacting us.

We will not require you to agree to marketing communications in order to request a Gastromio demo.

Comply with legal obligations

We may process information where necessary to:

• comply with applicable law;
• respond to lawful requests from authorities;
• maintain appropriate business records;
• establish, exercise or defend legal claims; or
• prevent fraud or unlawful activity.

Our legal basis may be compliance with a legal obligation or our legitimate interests, depending on the circumstances.

6. No Sale of Personal Information

We do not sell personal information for monetary consideration.

If our practices change in a way that constitutes a “sale” or “sharing” of personal information under an applicable US state privacy law, we will update this Privacy Policy and provide any legally required notices and opt-out mechanisms.

7. Who We Share Personal Information With

We may share personal information with third parties that help us operate our business, including providers of:

• Website hosting and infrastructure;
• email and communications;
• customer relationship management systems;
• meeting scheduling and video conferencing;
• analytics;
• cybersecurity and fraud prevention;
• cloud storage; and
• professional services such as legal, accounting and compliance advice.

These providers may process personal information on our behalf where appropriate.

We may also disclose information:

• where required by law or legal process;
• to protect our rights, users or systems;
• in connection with an actual or proposed merger, financing, restructuring, acquisition or sale of all or part of our business; or
• where you have authorised us to do so.

We do not permit service providers acting on our behalf to use personal information for unrelated purposes.

8. International Data Transfers

Skailab Ltd is established in the United Kingdom, while some of our service providers may operate in the United States or other countries.

As a result, personal information may be transferred to and processed outside the country in which you are located.

Where UK data protection law requires safeguards for an international transfer, we use an appropriate transfer mechanism. Depending on the circumstances, this may include:

• transfers to countries covered by applicable UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved Standard Contractual Clauses; or
• another legally permitted transfer mechanism.

We may also implement additional technical or organisational safeguards where appropriate.

You may contact us for further information regarding applicable safeguards.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

As a general guideline:

Demo requests and prospective customer information

We may retain information relating to a demo request or prospective customer relationship for up to 24 months after our last meaningful interaction with you, unless a longer period is necessary for an ongoing business discussion, legal obligation or legal claim.

Marketing information

Where you have subscribed or where we are otherwise permitted to send marketing communications, we may retain relevant contact information until you unsubscribe or object.

We may retain limited information after an opt-out in order to maintain a suppression record and respect your preference.

Technical and security information

Website logs and similar technical information are generally retained only for the period reasonably necessary for security, troubleshooting and Website administration and are normally deleted or anonymised within 12 months, unless a longer period is reasonably required.

We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.

10. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include access controls, secure hosting, authentication, encryption where appropriate and internal restrictions on access to personal information.

No system or method of transmission over the internet can be guaranteed to be completely secure.

11. Your Privacy Rights — UK and EEA

If UK GDPR or EEA data protection law applies to you, you may have rights including the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• request data portability where applicable; and
• withdraw consent where processing is based on consent.

Withdrawal of consent does not affect processing that occurred before consent was withdrawn.

Some rights are subject to legal conditions and exceptions.

Your right to object

You have the right to object at any time to the use of your personal information for direct marketing.

Where we rely on legitimate interests, you may also object to processing on grounds relating to your particular situation.

To exercise your rights, contact us at:

info@skailab.tech

We may need to verify your identity before fulfilling a request.

12. US Privacy Rights

Depending on the state in which you reside and whether the relevant privacy law applies to Skailab, you may have rights concerning your personal information.

These may include rights to:

• request access to personal information;
• request correction;
• request deletion;
• obtain information about certain disclosures;
• obtain a portable copy of certain information; and
• opt out of certain forms of sale, sharing or targeted advertising where applicable.

These rights vary by jurisdiction and may be subject to exceptions.

You may submit a request by contacting:

info@skailab.tech

We will not discriminate against you for exercising privacy rights provided by applicable law.

13. Children

Gastromio is a business-focused Website and is not intended for children.

We do not knowingly collect personal information from children through the Website.

If you believe that a child has provided us with personal information, please contact us so that we can review and, where appropriate, delete it.

14. Third-Party Websites and Services

The Website may contain links to third-party websites or refer to third-party products and platforms.

Those third parties operate under their own privacy policies, and this Privacy Policy does not govern their independent processing of personal information.

We encourage you to review the privacy policies of third-party services you use.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to Gastromio;
• new Website functionality;
• changes to the way we process personal information;
• new service providers; or
• changes in applicable law.

We will publish the updated version on this page and update the “Last updated” date.

If a change materially affects how we process personal information, we will provide additional notice where required by law.

16. Complaints

If you are located in the United Kingdom and have concerns about our handling of your personal information, you may contact the Information Commissioner's Office (ICO).

You can find information about the ICO and how to make a complaint at:

https://ico.org.uk/

We encourage you to contact us first so that we can try to resolve your concern.

17. Contact Us

For questions about this Privacy Policy or to exercise a privacy right, contact:

Skailab Ltd
Company No. 16927132
Stoney Works
8 Stoney Lane
London, United Kingdom
SE19 3BD

Email: info@skailab.tech

Website: https://gastrom.io/