HungryPort Privacy Policy

1. Information We Collect

We may collect the following types of personal data:

• Contact Information: Name, email address, and phone number.
• Business Information: Social media account details, business name, and associated content.
• Financial Information: Payment details for processing transactions via Stripe.
• Technical Information: Cookies, IP address, and website usage data for analytics, marketing, and improving user experience.

We may also process sensitive business-related data required to provide our services effectively.

2. How We Use Your Information

We use your personal data for the following purposes:

• To provide our services and deliver advertising campaigns.
• To process payments securely.
• To analyze and improve our services and website.
• To communicate updates, promotions, and marketing information.

3. Sharing Your Information

We may share your data with trusted third-party providers:

• Payment Processing: Stripe.
• Ad Platforms and Analytics: Meta (Facebook and Instagram), Google, PostHog, Plausible. Details on the website are in section 5.
• CRM: Hubspot.

We ensure that these third parties comply with applicable privacy laws.

Ottakringer partner offer

On hungryport.com/ottakringer, venues that are Ottakringer partners can request our offer. For this we process:

• Your email address and the name of your venue, which you enter in the form.
• If you book an onboarding call: your name, the appointment, and the answers you give when booking, for example your mobile number.

We use these details to show you the offer, to check with Ottakringer that your venue is a partner, to write to you by email about this offer, and to prepare the onboarding call. Ottakringer receives only the name of your venue. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR).

We store these details in our CRM, HubSpot (HubSpot Ireland Ltd., data stored in the EU), which processes them on our behalf. Calls are booked with zcal (zcal, Inc., USA), which also processes the booking on our behalf; transfers to the USA are based on the EU Standard Contractual Clauses. The booking calendar on the offer page loads from zcal only after you allow it (see “External media” in section 5). Your email address from the form is then passed to zcal so that you do not have to enter it again.

So that you can return to the offer, your browser stores in its local storage that you sent the form, the name of your venue, your email address (to fill in the booking form) and a code for your personal link. These entries stay until you delete your browser data.

We keep your details as long as we need them for this offer and a possible cooperation (see section 6).

4. User Rights

If you are in the EU, you have the following rights under GDPR:

• Access: Request details of the personal data we hold about you.
• Correction: Ask us to correct inaccuracies in your data.
• Deletion: Request that we delete your data by emailing privacy@hungryport.com.
• Marketing Opt-Out: Unsubscribe from marketing emails by clicking the link in the email footer or contacting us.

5. Cookies and Tracking Technologies

When you first visit our website, a cookie banner asks for your consent. You can accept all services, allow only the necessary ones, or choose by category and service. You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of every page. Withdrawing consent does not affect processing that took place before.

Necessary

The cookie cc_cookie stores your choice in the banner for 6 months. It contains a random consent ID, the version of the banner, and the categories and services you accepted. Legal basis: our legitimate interest in respecting and proving your choice (Art. 6(1)(f) GDPR).

To be able to prove consent, we store each choice on our server with the consent ID, the time, the banner version, the accepted categories and services, the language and the page. We do not store your IP address with it. We keep these records for 6 months plus 3 years and then delete them.

Visit statistics without cookies

We count visits with Plausible (Plausible Insights OÜ, Estonia) and PostHog (PostHog Inc., servers in the EU). Without your consent, both work without cookies and without storing anything in your browser. Your IP address and browser information are used to form a hash that changes daily; the IP address itself is not stored. We use the results to see which pages are visited and to improve the website. Legal basis: our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).

Statistics (with your consent)

With your consent, PostHog stores a random ID in a cookie and in your browser’s local storage (ph_*, 1 year). This lets us recognise returning visits and record sessions. Legal basis: your consent (Art. 6(1)(a) GDPR).

External media (with your consent)

Some pages embed content from other providers. Until you allow it, we show a placeholder, and nothing is loaded from the provider. You can allow a provider in the cookie banner (“External media”) or only for the current page with the button on the placeholder. When the content loads, the provider receives data such as your IP address and browser information, and may set its own cookies.

• zcal (zcal, Inc., USA): booking calendar for the onboarding call on the Ottakringer offer page. The calendar also loads zcal’s own analytics services, including Google Analytics, for which zcal is responsible. Transfers to the USA are based on the EU Standard Contractual Clauses. Privacy policy

Legal basis: your consent (Art. 6(1)(a) GDPR).

Marketing (with your consent)

With your consent, we use the following services to measure whether our ads lead to visits and enquiries, and to show our ads to people who visited our website:

• Google Ads (Google Ireland Ltd.): cookies such as _gcl_au (90 days) and cookies on Google domains. Privacy policy
• Meta Pixel and Conversions API (Meta Platforms Ireland Ltd.): cookies _fbp and _fbc (90 days). When you submit a form, we may also send the event from our server to Meta, with your email address as a hash, your IP address and your browser information. Privacy policy

Google and Meta may process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR).

6. Data Retention

We retain your data for as long as necessary to:

• Fulfill the purposes outlined in this policy.
• Comply with legal obligations.

Records of your cookie choices are kept for 6 months plus 3 years (see section 5).

Inactive accounts will be deleted after 1 year unless further retention is legally required. If you’d like your data deleted sooner, you can email us at privacy@hungryport.com.

7. Security Measures

We rely on our third-party service providers (Stripe, Meta, Google, Hubspot) to implement industry-standard security measures, including encryption and access controls, to protect your data.

8. Children’s Data

Our services are not intended for individuals under 16. Users must have a registered business to use our platform.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Please review this policy periodically.

Contact

For any questions about this policy or your data, please contact us at privacy@hungryport.com.