Information We Collect
When you use our website or services, we may collect the following types of information:
- Contact form data: When you reach out to us via the contact form, we collect your name, email address, and any message you provide.
- Cookies: We use cookies to enhance your experience on our site. Cloudflare Turnstile and Google Tag Manager may also set cookies as part of their functionality.
- Analytics data: Anonymous usage data may be collected to help us improve our website and services.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our mystery customer audit services.
- To communicate with you, including responding to your inquiries and sending service-related updates.
- To analyze website usage and enhance user experience.
- To comply with legal obligations and enforce our terms of service.
Legal Basis for Processing
We process your data only where we have a legal basis under the GDPR: your consent (the contact form and GDPR checkbox), performance of a contract (an audit you booked), and our legitimate interest in running, securing and improving our services. You may withdraw consent at any time.
Review Integrity & Honesty
Our reviews reflect genuine, first-hand anonymous visits. We never sell star ratings, never accept payment for a positive review, and never publish reviews for businesses we have not visited.
All published reviews comply with Google's policies on fake engagement: they describe real experiences, in our own words, with our own photos. Businesses cannot pay to change, hide or remove a review.
Confidentiality & Anonymity
Mystery visits are conducted anonymously — businesses never know when we visit or who visits. Audit reports and client identities are strictly confidential and are never published, shared or sold. Our public reviews never name private individuals.
Data Sharing
We take your privacy seriously. We do not sell, trade, or rent your personal information to third parties.
We may share anonymized review data with Google for the purpose of posting reviews on Google Maps, in accordance with Google's policies. We do not share personally identifiable information without your explicit consent, except where required by law.
Data Retention
We keep enquiry and audit data only as long as needed: contact messages up to 24 months, audit reports up to 5 years for quality and legal records, unless you ask us to delete them sooner.
Cookies
Our website uses cookies to improve functionality and user experience. Cookies are small text files stored on your device by your web browser.
Our contact form is powered by AI Forms and protected by Cloudflare Turnstile against spam; both may set technically necessary cookies. We also use Google Tag Manager for anonymous analytics. These third-party services operate under their own privacy policies.
You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
Third-Party Services
We use the following third-party services on our website:
- AI Forms – Secure contact and enquiry forms with spam protection.
- Cloudflare Turnstile – Spam protection for our forms.
- Google Tag Manager – Anonymous website analytics.
- Google Maps – Used for displaying business locations and review integration.
- Google Fonts – Used for typography and visual presentation.
- Tailwind CDN – Used for utility-first CSS styling.
- Anepafo – Digital QR Menu partner service.
Each third-party service operates under its own privacy policy. We encourage you to review their policies for more information on how they handle your data.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Rights (GDPR Compliance)
If you are a resident of the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data, subject to certain conditions.
- Right to Restrict Processing: You have the right to request restriction of processing your data under certain circumstances.
- Right to Data Portability: You have the right to receive your data in a structured, commonly used format.
- Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Data Controller
The data controller is itsToothPicked, Greece & Europe, reachable at [email protected]. For GDPR requests we respond within 30 days.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
Email: [email protected]
Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
