Privacy Policy

NAETOS AI LTD is the controller of the personal data described in this notice. We are registered in England and Wales, company number 17309770. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. You can reach us at contact@naetos.com, or by writing to the Data Protection Contact at that address.

This notice covers personal data we collect through this website, when you email us, when you use our data rights and complaints form, and when we contact you about Naetos. It does not cover personal data held inside the Naetos product (see The Naetos product below).

This website sets no cookies of its own and runs no analytics. Our hosting provider, Vercel Inc., processes the technical data that every request carries, such as your IP address and browser details, to deliver pages and keep the site secure. Our legal basis is our legitimate interest in running and securing the website (UK GDPR Article 6(1)(f)).

We hold your name, your email address and anything you tell us, such as your business's name and your role. We use it to reply to you and to deal with what you ask us for. If you act for a sole trader or partnership and ask us to take steps before a contract, our legal basis is Article 6(1)(b). Otherwise it is our legitimate interest in replying to businesses that contact us (Article 6(1)(f)). We keep it for up to twelve months after our last contact, then delete it. We don't use it for marketing.

If you work at a UK food and drink supplier or an independent restaurant, we may hold your name, job title, business email address and phone number, your company, and notes of our conversations. We got them from a card you gave us or your stand at the FSI Expo at ExCeL, from exhibitor listings, from your company's website, or from Companies House. We use them to tell you about Naetos (for suppliers, about a founding supplier place) and to arrange calls. Our legal basis is our legitimate interest in telling UK hospitality businesses about a product relevant to their trade (Article 6(1)(f)). We keep them for up to twelve months after our last contact. You can object at any time: reply “no” to any of our emails, or write to us, and we will stop. We keep only what we need so as not to contact you again.

If you use our data rights and complaints form, we use what you send to deal with your request or complaint, as the law requires (Article 6(1)(c); Data Protection Act 2018 section 164A). We keep a record of each request and how we handled it for six years after we close it.

Where we process a venue's or a supplier's records on its instructions inside the Naetos product, that business is the controller of those records. The product has its own privacy notice for the people who use it.

Vercel Inc. (website hosting), Google (our email), Resend (sending the acknowledgement from our complaints form) and Supabase Inc. (our contact records). We do not sell personal data.

Some of these providers are US companies, so your data may be processed in the United States. We are confirming with our lawyers which legal safeguard covers each of these transfers. Ask us and we will tell you what we know.

You can ask for a copy of your data, and ask us to correct it, delete it or restrict how we use it. Where it applies, you can ask us to move it. Use our data rights and complaints form, email contact@naetos.com, or write to us. We reply within one month; the law lets us extend that by two months for complex requests. We may need to check your identity. There is no fee.

You can object at any time to our using your details on the basis of legitimate interests. If you object to direct marketing, we will stop.

You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You don't have to come to us first.

When we change this notice, we update this page and the date at the top. We are registered with the ICO under reference ZC263201.