Privacy Policy

1. Who we are

The Explorer Platform (“Explorer”, “Service”) is operated by CROTEC LIMITED, a company registered in England and Wales (“Company”, “we”, “us”). CROTEC LIMITED is the data controller for personal data processed through the Service. Contact us at info@explorer-net.com or by post at our registered office in the United Kingdom.

2. Personal data we collect

• Account & identity: name, username, email, password hash, phone (optional), profile photo, dietary preferences, and social sign-in identifiers.
• Business profile: entity details, staff roles, floor plans, menus, inventory, opening hours, and integrations you enable.
• Transactional data: orders, bookings, loyalty activity, reviews, and messages.
• Payment metadata: we do not store full card numbers; payment is handled by Stripe. We receive tokens, last-four digits, and transaction status.
• Usage & device: IP address, browser, OS, device identifiers, pages, referrer, logs, and cookies.
• Location: approximate location from IP; precise location only with your permission.
• Content you provide: messages to ExplorerAgent, form submissions, and uploads.

3. How we use data & legal bases (UK/EU GDPR)

• Contract (Art. 6(1)(b)): delivering the Service you request and processing payments and support.
• Legitimate interests (Art. 6(1)(f)): analytics, security, service improvement, and tuning of ExplorerAgent on aggregated/de-identified data. You may object.
• Consent (Art. 6(1)(a)): non-essential cookies, marketing, precise location. You may withdraw at any time.
• Legal obligation (Art. 6(1)(c)): tax, accounting, and lawful requests from authorities.

4. Sharing & recipients

We do not sell personal data. We share limited data with:

• Processors under contract: hosting/database, Stripe, transactional email, analytics, error monitoring, AI inference providers used by ExplorerAgent.
• Businesses you transact with: only what is needed to fulfil your interaction.
• Corporate transactions: merger, acquisition, or asset sale, with equivalent protections.
• Legal & safety: where required by law or to protect rights, property, or safety.

5. International transfers

Where processors are located outside the UK/EEA, we rely on adequacy decisions or safeguards such as the UK IDTA, UK Addendum, or EU Standard Contractual Clauses. Copies available on request.

6. Retention

• Account data: life of your account plus up to 24 months.
• Transactional records: as required by UK tax law (typically 6 years).
• ExplorerAgent chats: pruned on a rolling schedule.
• Marketing preferences: until withdrawn.
• Server & security logs: up to 12 months.

7. Security

TLS in transit, database Row Level Security, least-privilege access, secret management, audit logging. Report suspected vulnerabilities to info@explorer-net.com.

8. Your rights under UK/EU GDPR

• Access, rectification, erasure, restriction, portability, objection.
• Withdraw consent at any time, without affecting prior lawful processing.
• Complain to the UK ICO (ico.org.uk) or your local EU supervisory authority.

Send requests via in-app settings or info@explorer-net.com. We respond within one month, extendable by two months for complex requests.

9. Cookies & tracking

Essential cookies for authentication/session; analytics and functional cookies with your consent. See our Cookie Policy.

10. Children

Not directed to children under 16. We delete data if we learn a child under 16 has used the Service.

11. Automated decisions & ExplorerAgent

We do not make solely-automated decisions with legal or similarly significant effects. AI messages are processed by our providers under contract and are not used to train third-party foundation models.

12. Changes

Material changes will be notified in-app or by email at least 14 days before they take effect.

13. Contact

CROTEC LIMITED, registered in England and Wales. Email: info@explorer-net.com.