PRIVACY & COOKIE POLICY

Last Updated: 19/11/2025

PRIVACY POLICY
Last updated: 01/01/2026

INTRODUCTION
Reqo SASU (“Reqo”, “we”, “us”) provides an AI-powered voice assistant service for restaurants and operates the website at reqo.ai. This Privacy Policy explains how personal data is processed in accordance with the EU GDPR and UK GDPR. Reqo acts as a data controller for its website and business activities, and as a data processor when providing services to restaurants.

ROLES
For website visitors and business contacts, Reqo acts as the data controller. For restaurant calls handled through the Service, the restaurant acts as the data controller and Reqo acts as a data processor. Callers should direct privacy requests to the restaurant contacted.

PERSONAL DATA WE PROCESS
For website and business contacts, we may process names, business contact details, company information, communications, enquiries, technical data such as IP address and browser information, and marketing preferences.

For restaurant calls, depending on configuration, the Service may process call audio recordings, call transcripts, caller phone numbers, call metadata, and reservation or booking details.

CALL RECORDING
Calls may be recorded where a restaurant has enabled call recording. The restaurant is responsible for informing callers and ensuring a lawful basis exists. Reqo processes recordings solely on the restaurant’s instructions.

LAWFUL BASIS
For website and business contacts, processing is based on legitimate interests, contractual necessity, or consent where required. For restaurant calls, the lawful basis is determined by the restaurant.

DATA RETENTION
Website and business contact data is retained only as long as necessary. Retention of call audio, transcripts, and service data is determined by the restaurant’s configuration and instructions.

SHARING PERSONAL DATA
Reqo may share personal data with service providers supporting website operation, authorised sub-processors providing components of the Service, and professional advisers or authorities where required by law.

SUB-PROCESSORS
Reqo uses authorised sub-processors to deliver parts of the Service. Sub-processors act only on Reqo’s instructions and are bound by contractual data protection obligations. Information about sub-processors is available upon request by contacting privacy@reqo.ai.

INTERNATIONAL TRANSFERS
Personal data may be processed in the EU, the UK, and other jurisdictions. Appropriate safeguards are applied where required.

SECURITY
Reqo implements appropriate technical and organisational measures to protect personal data, including encryption, access controls, and logging.

COOKIES
Cookies are used to enable website functionality and analytics. We use strictly necessary cookies, analytics cookies where permitted by law, and preference cookies where applicable. Consent is requested for non-essential cookies where required. Cookie preferences can be managed through the cookie banner or browser settings.

YOUR RIGHTS
Depending on context, individuals may have rights including access, rectification, deletion, restriction, objection, and portability. Website-related requests should be directed to Reqo. Requests relating to restaurant calls should be directed to the restaurant contacted.

CHANGES
This Privacy Policy may be updated from time to time. The “Last updated” date reflects the current version.

CONTACT
Reqo SASU
[REGISTERED ADDRESS]
Email: privacy@reqo.ai