Privacy policy
What we collect on teremu.com, why we process it, and how to exercise your rights.
Data controller
Teremu · USA · info@teremu.com
Who we are
Teremu (“we”) operates the teremu.com website. This policy covers personal data processed through this marketing site. Data handled inside the Teremu application is governed by the service agreement you accept when you create an account.
What we collect
We collect data in exactly two situations:
When you submit a form
The contact and demo-request forms collect your name, email address, and message. You may optionally add your restaurant name, a phone number, and your number of locations. We send that to our internal inbox and email you a confirmation.
When you browse the site
Google Analytics records aggregate usage data — page views, approximate origin, device type — so we can tell which content is useful. reCAPTCHA Enterprise analyses browser signals to tell people from bots on our forms.
Legal basis and purpose
If you are in the EU or EEA, we process your data on the following GDPR bases:
- Forms: pre-contractual steps at your request (Art. 6(1)(b)) — we answer what you asked.
- reCAPTCHA: legitimate interest (Art. 6(1)(f)) — protecting our forms from automated abuse.
- Google Analytics: consent (Art. 6(1)(a)) — you can decline without losing functionality.
We never sell personal data or use it for third-party advertising.
Who we share data with
We do not sell or rent your data. We rely on the following providers, who process it on our behalf:
- Google (Firebase Hosting, Cloud Functions, Analytics, reCAPTCHA Enterprise) — site hosting, form processing, measurement, and abuse prevention.
- Google Workspace (Gmail) — delivery of notification and confirmation emails.
These providers may process data outside the EEA. Google relies on the European Commission’s Standard Contractual Clauses for those transfers.
Cookies
The site sets no first-party cookies. Google Analytics loads only if you accept the cookie notice — until then no measurement script runs and none of its cookies are set. Your choice is saved in your browser’s local storage, not a cookie, so we do not ask again; clearing the site’s data removes it. reCAPTCHA Enterprise loads only at the moment you submit a form and may set third-party cookies for bot detection. You can block or delete cookies in your browser settings; the site keeps working, though forms may stop submitting if you block reCAPTCHA.
Your rights
You may at any time request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent. Email info@teremu.com and we will respond within 30 days.
If you believe we have not handled your request properly, you may lodge a complaint with your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es).
How long we keep data
Messages you send through the forms stay in our inbox for as long as needed to handle your enquiry and any resulting business relationship, up to 24 months from last contact. Google Analytics data is retained in aggregate for 14 months.
Security
The site is served entirely over HTTPS. Service credentials live in Google Secret Manager and never appear in site code. Access to the inbox receiving form submissions is limited to the Teremu team.
Minors
This site is aimed at restaurant professionals and is not directed at anyone under 16. We do not knowingly collect data from minors.
Changes to this policy
If we change this policy we will update the date shown above. Material changes will be announced prominently on the site.