Controller and contact
The data controller is Noodista. For privacy matters, contact privacy@noodista.com.
Data we process
For registration and accounts, we process your name, email address, password hash, registration IP address and technical information needed to secure the session.
For reviews and contact requests, we process submitted content, scores, indicative visit date, public author name, linked account where applicable, IP address, user agent and anti-spam data. IP addresses are never displayed publicly.
Security logs, session identifiers, cookie preferences, requested URLs, device and browser information may be processed to provide the service, prevent abuse and diagnose issues.
Purposes and legal bases
- Providing accounts, the personal area and requested features: performance of the service.
- Publishing and moderating reviews: performance of the service and legitimate interest in community quality.
- Replying to messages: pre-contractual steps or legitimate interest in handling requests.
- Preventing spam, fraud and unauthorised access: legitimate interest in site security.
- Enabling optional analytics or marketing tools: consent, which may be withdrawn at any time.
- Complying with legal obligations or authority requests: legal obligation.
Reviews, retention and recipients
Reviews remain the responsibility of the user who submits them and must respect accuracy, privacy, reputation, copyright and third-party rights. Noodista may review, withhold, suspend or remove unlawful or rule-breaking content; moderation is not endorsement or acceptance of author responsibility.
Account data is retained while the account remains active or as needed for requests and legal obligations. Reviews remain available while published or needed for moderation; contact messages are deleted automatically after 24 months.
Technical providers for hosting, databases, cache, email and security may process data as processors where required. Maps can load Leaflet, CDN and OpenStreetMap resources, which receive IP and technical data under their own notices. We do not sell personal data.
Your rights and updates
You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent, by contacting privacy@noodista.com. You may also lodge a complaint with the competent data protection authority.
We use proportionate safeguards, including password hashing, CSRF protection, submission limits and separation of public and administrative areas. This notice may be updated when features, suppliers or legal duties change.