Privacy Policy
Last updated: March 1, 2026
Your Privacy is Protected
Otteresto is committed to protecting your privacy and keeping your data secure. This policy explains how we collect, use, and safeguard your information.
1 Information We Collect
Account Information
When you create an Otteresto account, we collect:
- ✓ Restaurant name and business details
- ✓ Your name and contact information
- ✓ Email address and phone number
- ✓ Business address and location
- ✓ Username and encrypted password
- ✓ Payment and billing information
Restaurant Data
Through your use of our platform, we process:
- ✓ Menu items and pricing information
- ✓ Inventory and stock data
- ✓ Customer information and orders
- ✓ Staff and employee records
- ✓ Financial transactions and reports
- ✓ Sales analytics and performance data
- ✓ Customer feedback and reviews
- ✓ Operational settings and preferences
Technical Information
We automatically collect certain technical data:
- IP address and location data
- Browser and device information
- Usage patterns and session data
- Performance and error logs
- Security and access logs
- Cookie and tracking data
2 How We Use Your Information
Primary Uses
- ✓ Provide and maintain our restaurant management services
- ✓ Process payments and manage subscriptions
- ✓ Generate reports and analytics for your business
- ✓ Provide customer support and technical assistance
- ✓ Secure your account and prevent unauthorized access
Secondary Uses
- ✓ Improve our platform features and functionality
- ✓ Send important service updates and announcements
- ✓ Conduct research to enhance user experience
- ✓ Comply with legal obligations and regulations
- ✓ Protect against fraud and security threats
Marketing Communications
We may send you occasional updates about new features, tips, and industry insights. You can opt out of marketing emails at any time through your account settings or by clicking "unsubscribe" in any email.
3 Data Sharing and Disclosure
We Do NOT Sell Your Data
Otteresto never sells, rents, or trades your personal information or restaurant data to third parties for marketing purposes. Your data is yours.
Limited Sharing Scenarios
We may share your information only in these specific circumstances:
Service Providers
Trusted third-party providers who help us deliver our services (payment processors, cloud hosting, customer support tools). They're bound by strict confidentiality agreements.
Legal Requirements
When required by UAE law, court orders, or to protect our rights and the safety of our users.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred. You'll be notified in advance.
With Your Consent
Any other sharing only occurs with your explicit permission.
4 Data Security and Protection
Security Measures
We implement industry-standard security measures to protect your data:
Encryption
All data encrypted in transit and at rest
Access Controls
Multi-factor authentication and role-based permissions
Monitoring
24/7 security monitoring and threat detection
Backups
Regular automated backups with redundancy
Infrastructure
Secure cloud hosting with enterprise-grade protection
Compliance
Regular security audits and compliance reviews
Data Breach Response
In the unlikely event of a data breach, we will notify affected users and relevant authorities within 72 hours, as required by UAE data protection regulations.
5 Your Rights and Choices
You have the following rights regarding your personal information:
Access and Control
- ✓ View and download your personal data
- ✓ Update or correct your information
- ✓ Export your restaurant data
- ✓ Control privacy settings
Deletion and Restriction
- ✓ Delete your account and data
- ✓ Opt out of marketing communications
- ✓ Restrict certain data processing
- ✓ Object to automated decision-making
How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@otteresto.com or through your account settings.
We'll respond to your request within 30 days. Some requests may require identity verification for security purposes.
6 Data Retention and Deletion
Active Accounts
We retain your data for as long as your account is active and you're using our services.
After Cancellation
Data is kept for 30 days after account cancellation to allow reactivation, then permanently deleted.
Legal Requirements
Some data may be retained longer if required by UAE financial or tax regulations.
7 International Data Transfers
Your data is primarily stored and processed in secure facilities within the UAE and Middle East region. If we need to transfer data internationally, we ensure appropriate safeguards are in place, including:
- ✓ Adequacy decisions from UAE data protection authorities
- ✓ Standard contractual clauses approved by relevant authorities
- ✓ Certification schemes and codes of conduct
8 Cookies and Tracking Technologies
Types of Cookies We Use
Essential Cookies
Required for basic site functionality, login, and security. Cannot be disabled.
Performance Cookies
Help us understand how you use our platform to improve performance.
Preference Cookies
Remember your settings and preferences for a better experience.
Marketing Cookies
Optional cookies for personalized content and ads. You can opt out.
Cookie Management
You can control cookies through your browser settings or our cookie preferences center. Note that disabling certain cookies may affect platform functionality.
9 Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- ✓ Notify you via email at least 30 days before changes take effect
- ✓ Display a prominent notice on our platform
- ✓ Update the "Last Updated" date at the top of this policy
Your continued use of Otteresto after policy changes indicates your acceptance of the updated terms.
📧 Privacy Questions?
If you have questions about this Privacy Policy or how we handle your data:
Privacy Officer: privacy@otteresto.com
Data Protection: dpo@otteresto.com
General Support: support@otteresto.com
Business Hours: Sunday-Thursday, 9 AM - 6 PM GST
Location: Dubai, United Arab Emirates
Response Time: Within 30 days
© 2026 Otteresto. All rights reserved.
This Privacy Policy is effective as of the date indicated above.