Privacy Policy

This policy explains how Nyxis handles personal data in connection with our website and the software we provide to restaurant clients. We are based in the United Kingdom and handle personal data in line with UK GDPR and the Data Protection Act 2018.

Who we are

Nyxis provides white-label digital storefronts and online ordering software to restaurant businesses. For questions about this policy, or to exercise any of the rights described below, contact us at [email protected].

Two different roles

This distinction matters, so we state it plainly. When we deal with our own business contacts and clients, we are the data controller. When a restaurant uses our software to take orders from its own customers, that restaurant is the controller of its customers' data and we act as a processor on its behalf, handling that data only on the restaurant's instructions. If you ordered food from a restaurant that uses our software, that restaurant's own privacy policy governs your order, and requests about it are best directed to them.

What we collect as a controller

• Business contact details - name, business email address, telephone number, and company details.
• Account information for the people at a client restaurant who sign in to manage their storefront.
• Billing records relating to a client's subscription and commission.
• Correspondence you send us, including support enquiries sent to the address above, and basic technical logs from this website such as IP address and browser type.

Why we use it

• To provide, support and administer the software our clients are contracted to receive.
• To take payment for subscriptions and commission, and to keep the records tax law requires.
• To respond to enquiries, and to keep the service secure and working correctly.

Our lawful bases are performance of a contract, our legitimate interests in operating and securing the service, and compliance with legal obligations.

Who we share it with

We do not sell personal data and we do not share it with third parties for their own marketing. We use a small number of service providers who process data on our behalf under contract, including hosting and database infrastructure, payment processing, and transactional email delivery. Each is bound to use the data only to provide their service to us.

How long we keep it

We keep business and billing records for around six years in line with UK tax record-keeping requirements, and other data only for as long as it is needed for the purpose it was collected for.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask us to delete it where we have no continuing need, to object to or restrict certain processing, and to receive data you provided in a portable form. Contact [email protected] and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy we will update the date at the top of this page, and tell affected clients directly where the change is significant.