Legal
Privacy Policy
Last updated: June 26, 2026
SuzTec Co ("we", "us", or "our") operates the website suztec.com and related mobile applications (collectively, the "Services"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your data. It applies to all users worldwide, and satisfies the requirements of the EU General Data Protection Regulation (GDPR), Apple App Store Review Guidelines, and Google Play Developer Policy.
1. Data Controller
The data controller responsible for your personal data is:
For EU/EEA residents, you have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
2. Data We Collect
We collect only the data necessary to provide and improve our Services.
2.1 Data you provide directly
- —Demo requests: Full name, email address, mobile number, and optional notes you submit via our contact form.
- —Account registration (mobile app): Name, email address, job title, and hotel property name.
- —Support communications: Any information you include in messages you send us.
2.2 Data collected automatically
- —Usage data: Pages visited, features used, session duration, and in-app interactions.
- —Device data: Device type, operating system, browser type and version, IP address, and language settings.
- —Log data: Server logs including access times and error reports.
2.3 Data we do NOT collect
- —Precise geolocation
- —Payment or financial information (we do not process payments directly)
- —Sensitive personal data (health, religion, biometrics, etc.)
- —Data from children under 16 — our Services are not directed at minors
3. How We Use Your Data
We process your data for the following purposes and legal bases under GDPR:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Responding to demo requests and sales enquiries | Legitimate interest / Pre-contractual steps |
| Providing and operating the Services | Contract performance |
| Sending service-related communications | Contract performance |
| Improving and developing our Services | Legitimate interest |
| Security monitoring and fraud prevention | Legitimate interest / Legal obligation |
| Complying with legal obligations | Legal obligation |
| Sending marketing emails (if opted in) | Consent |
4. Cookies & Tracking Technologies
Our website uses minimal cookies strictly necessary for operation. We do not use advertising or third-party tracking cookies. The cookies we set include:
- —Session cookies: Temporary cookies deleted when you close your browser, used to maintain your session state.
- —Preference cookies: Store your settings (e.g. language) across visits.
You can control cookies through your browser settings at any time. Disabling cookies may affect some functionality of the Services.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
- —Service providers: We use carefully selected third-party providers (e.g. hosting, email delivery) who process data on our behalf under strict data processing agreements.
- —Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of SuzTec Co or others.
- —Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before this occurs.
All third-party providers are required to implement appropriate security measures and are prohibited from using your data for their own purposes.
6. International Data Transfers
SuzTec Co operates globally. Your data may be transferred to and processed in countries outside your country of residence, including countries outside the European Economic Area (EEA).
Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms under applicable law.
7. Data Retention
We retain your data only for as long as necessary for the purposes described:
- —Demo request data: 24 months from the date of submission, or until you request deletion.
- —Account data: For the duration of your account, plus 30 days after deletion request.
- —Log data: 90 days, for security and debugging purposes.
- —Legal obligation data: As required by applicable law (typically 5–7 years).
8. Your Rights
Depending on your location, you have the following rights regarding your personal data. To exercise any right, contact us at [email protected]. We will respond within 30 days.
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ("right to be forgotten").
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restriction
Request that we limit how we use your data.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Complain
Lodge a complaint with your local supervisory authority (e.g. ICO in the UK, CNIL in France).
9. Mobile Application — Apple & Google Specific Disclosures
Our mobile applications are available on the Apple App Store and Google Play Store. The following disclosures apply specifically to the mobile app experience:
9.1 Data collected by the mobile app
- —Account identifiers: Email address and user ID to authenticate sessions.
- —Usage & diagnostics: Crash reports and app performance data to improve stability. This data is anonymised.
- —Device permissions: The app will request only the permissions it needs. You will be prompted before any permission is used, and you can revoke permissions at any time in your device settings.
9.2 Apple App Store (iOS)
- —We comply with Apple's App Store Review Guidelines and Human Interface Guidelines regarding user privacy.
- —We provide an in-app mechanism to request account and data deletion, accessible from the app's Settings screen.
- —We do not use Apple's advertising identifier (IDFA) for tracking across third-party apps.
- —Our App Privacy labels on the App Store accurately reflect the data types collected.
9.3 Google Play Store (Android)
- —We comply with Google Play's User Data Policy and provide accurate Data Safety declarations.
- —We provide an accessible account deletion option both in-app and via our website.
- —Data collected in the app is used solely to provide and improve the Services — not for advertising or profiling.
- —We do not use Android advertising ID (AAID) for cross-app tracking.
9.4 Account & data deletion (mobile)
You may delete your account and all associated data at any time by:
- —Using the Delete Account option in the app under Settings → Account.
- —Emailing us at [email protected] with subject "Delete My Account".
Deletion requests are processed within 30 days. Some data may be retained for legal obligations (see Section 7).
10. Data Security
We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:
- —Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
- —Access controls — data is accessible only to authorised personnel on a need-to-know basis.
- —Regular security reviews and penetration testing.
- —Incident response procedures — we will notify affected users and relevant authorities of any breach within 72 hours, as required by GDPR.
11. Children's Privacy
Our Services are intended for business professionals and are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete the data promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a notice in our app.
We encourage you to review this Policy periodically. Continued use of the Services after changes take effect constitutes your acceptance of the updated Policy.
13. Contact Us
For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact our privacy team:
SuzTec Co — Privacy Team
Email: [email protected]
We aim to respond to all privacy-related requests within 30 days. For urgent matters, please indicate "URGENT" in your email subject line.
This Privacy Policy was last reviewed on June 26, 2026. It is written to satisfy the requirements of the EU General Data Protection Regulation (GDPR) (EU) 2016/679, the UK Data Protection Act 2018, the Apple App Store Review Guidelines (Section 5.1 Privacy), and the Google Play Developer Program Policy (User Data section).
AI Answer
How does SuzTec Co handle visitor and guest data privacy?
SuzTec Co complies with GDPR and industry standards for data protection. Personal data collected through demo requests, analytics, and mobile apps is encrypted in transit and at rest, used only to provide services, and never sold to third parties. Guests and visitors may request access, correction, or deletion of their data.
Source: SuzTec Co — hotel management solutions for enterprise and luxury hotels & resorts · suztec.com