Privacy Policy

Couvert is a reservation platform for restaurants, operated from Rīga, Latvia, and offered to restaurants internationally. When this policy says “Couvert,” “we,” “us,” or “our,” it means the company that provides the Couvert platform and this website.

For the personal data described here, Couvert acts as the data controller. That means we decide why and how your data is handled, and we are responsible for looking after it. If you have any question about this policy, you can reach us at any time at hello@nexcouvert.com.

This policy explains how we handle personal data collected through our marketing website: the pages that describe the product, the demo room, and the forms you use to request a walkthrough or get in touch. It is written to be clear wherever you are based, and it uses the standards of the EU General Data Protection Regulation (GDPR) as its baseline.

Couvert is a business tool for restaurants and hospitality teams. This website is not where restaurant guests make reservations, so we do not collect diner booking data through it.

We keep data collection to what we actually need. Two kinds of information are involved.

Information you give us. When you submit our walkthrough request or contact form, we collect the details you choose to provide: your name, your restaurant or company, your email address, and, optionally, your phone number, country, and any message you write. You decide what to share.

Information collected automatically. When you browse the site, we collect basic, aggregated analytics: the pages you view, the site that referred you, your approximate location (city or country level, derived from your IP address), and general device and browser information. This helps us understand what is useful and what is not.

What we do not collect:

• No guest reservation data, and no restaurant floor plans or booking records, are gathered through this website.
• No payment card details. We do not take payments on this site.
• No special category data, such as health, religion, or political views.
• No accounts or passwords are created in order to browse this site.

Under the GDPR we rely on one or more of the following lawful bases when we process your personal data:

• Steps prior to a contract (Article 6(1)(b)): to respond to your walkthrough or contact request and prepare a possible working relationship.
• Legitimate interests (Article 6(1)(f)): to operate, secure, and improve the website and to understand how it is used, balanced against your rights and freedoms.
• Consent (Article 6(1)(a)): for non-essential analytics or preference cookies, where your consent is required. You can withdraw it at any time.
• Legal obligation (Article 6(1)(c)): where we are required to keep certain records or respond to lawful requests.

We use the information described above to:

• Reply to your enquiry and arrange a product walkthrough.
• Send you the information you asked for about the platform.
• Maintain, secure, and improve the website.
• Detect and prevent misuse, fraud, or security incidents.
• Meet our legal and record keeping obligations.

We do not sell or rent your data, we do not build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects about you.

We use a small number of cookies and privacy respectful analytics to keep the site working and to measure aggregate usage. You stay in control of non-essential cookies. For the full list of what each one does, how long it lasts, and how to opt out, please see our Cookie Policy.

We work with a few trusted providers who process personal data on our behalf, only on our instructions, and only to the extent they need it to do their job:

• Hosting and infrastructure, to serve and store the website securely.
• Email and communications, to receive your enquiries and reply to you.
• Analytics, to measure aggregate, non-identifying usage of the site.

Each provider is bound by a data processing agreement that requires appropriate security and confidentiality. We never sell your data and we never trade it.

Some of our providers may process data in countries outside the one you live in, including outside the European Economic Area. Where that happens, we make sure the transfer is protected by an appropriate safeguard, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional measures where they are needed. Data may also transit through other regions as a normal part of how the internet routes traffic.

We keep personal data only for as long as we have a reason to:

• Enquiry and contact details, kept while we follow up with you and for a reasonable period afterward for our records, then deleted.
• Analytics data, kept in aggregate for a limited period (typically up to fourteen months) and then deleted or anonymised.
• Server and security logs, kept for a short period to help us keep the site safe.

If you ask us to delete your data sooner, we will, unless we are legally required to keep it.

Wherever you are, we aim to honour the following rights. If the GDPR applies to you, they are guaranteed by law:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct data that is wrong or incomplete.
• Erasure: ask us to delete your data.
• Restriction: ask us to pause certain processing.
• Portability: receive your data in a portable, machine readable format.
• Objection: object to processing based on our legitimate interests.
• Withdraw consent: withdraw any consent you gave, at any time, without affecting processing that already happened.

To exercise any of these, email hello@nexcouvert.com and a person will respond, normally within one month. You also have the right to lodge a complaint with your local data protection authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija); in other countries it is your national supervisory authority.

We protect your data with encryption in transit (HTTPS), access controls, and reputable infrastructure providers. Because we do not store payment details and do not run accounts on this site, there are no card numbers or passwords here to leak. No system is perfectly secure, but if a breach ever affected your personal data, we would act quickly and notify you and the relevant authority where the law requires it.

Couvert is a professional tool for restaurants and hospitality teams. It is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the product, our providers, or the law evolve. When we do, we will change the date shown at the top of this page, and we will flag any significant change more prominently. We encourage you to review this page from time to time.

Questions about this policy or your personal data are always welcome. Write to hello@nexcouvert.com and a real person will answer.