Privacy Notice

MYLUMERA TECHNOLOGIES OPC ("MYLUMERA", "we", "us"), trading as PantryTrack, is the data controller for personal data processed through the PantryTrack service. This notice explains what we collect, why, who we share it with, and the rights you have.

1. Personal data we collect

• Account data — name, email address, login credentials, workspace and site memberships, assigned roles.
• Workspace content — items, racks, batches, transactions, audits, purchase records and uploaded supporting documents you enter into the Service.
• Support data — messages, attachments and correspondence you send us.
• Usage and technical data — feature usage, log events, device identifiers, browser type and IP address.
• Billing metadata — plan, site count, subscription status and invoice references. Card and payment details are collected and processed by Paddle, not by us.

2. Purposes and legal bases

• Creating and administering your account and workspace — performance of our contract with you.
• Providing inventory, reporting, audit and document features — performance of contract.
• Security, abuse prevention and fraud detection — legitimate interests in protecting the Service.
• Product improvement and troubleshooting — legitimate interests, using aggregated or minimal data where possible.
• Customer support — performance of contract and legitimate interests.
• Marketing emails, where sent — consent, which you may withdraw at any time.
• Accounting, tax and legal record keeping — compliance with legal obligations.

3. Who we share data with

• Service providers and subprocessors — hosting, database, storage, email delivery and error-monitoring providers acting on our instructions.
• Merchant of Record — Paddle.com, for the sale of subscriptions, subscription management, payment processing, tax compliance and invoicing.
• Professional advisers — legal, accounting and audit advisers where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the Philippines and the UK/EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep account and workspace data for as long as your subscription is active and for a limited period afterwards to allow reactivation and to meet legal, tax and accounting obligations. When data is no longer needed it is deleted or anonymised. You can request earlier deletion of your workspace data at any time.

6. Your rights

Subject to applicable law — including the Philippine Data Privacy Act and, where relevant, the UK/EU GDPR — you may request access to your data, correction, erasure, restriction of processing, portability, and object to processing based on legitimate interests. You may withdraw consent where processing is based on consent, and you may lodge a complaint with your supervisory authority (in the Philippines, the National Privacy Commission). We aim to respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, tenant-level data isolation with row-level security, and least-privilege access for staff and services.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your selected site and workspace, and secure the Service. We do not use advertising cookies. You can clear or block cookies in your browser settings, though sign-in will not work without the essential ones.

9. Contact

Privacy questions and rights requests: MYLUMERA TECHNOLOGIES OPC, privacy@pantry-track.mylumera.net.