{"id":36,"date":"2026-03-15T21:53:04","date_gmt":"2026-03-15T21:53:04","guid":{"rendered":"https:\/\/api-web.pantryno.com\/?page_id=36"},"modified":"2026-09-29T17:13:17","modified_gmt":"2026-09-29T17:13:17","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/api-web.pantryno.com\/?page_id=36","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><strong>Last updated:<\/strong> 31 August 2026<\/p>\n<p><strong>Version:<\/strong> 1.0<\/p>\n<hr \/>\n<h2>1. Introduction<\/h2>\n<p>This Privacy Policy explains how <strong>PANTRYNO LIMITED<\/strong> (&#8220;Pantryno&#8221;, &#8220;we&#8221;, &#8220;us&#8221;, &#8220;our&#8221;) collects, uses, stores, shares and protects your personal data when you use the Pantryno platform, comprising:<\/p>\n<ul>\n<li>the Pantryno Personal Web Application;<\/li>\n<li>the Pantryno Business Web Application;<\/li>\n<li>the Pantryno Personal Mobile Application (iOS and Android);<\/li>\n<li>the Pantryno Business Mobile Application (iOS and Android);<\/li>\n<\/ul>\n<p>(together, the &#8220;<strong>Service<\/strong>&#8220;).<\/p>\n<p>We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016\/679) (&#8220;<strong>GDPR<\/strong>&#8220;), the Irish Data Protection Act 2018, the ePrivacy Regulations (S.I. No. 336\/2011) and other applicable European and Irish data protection laws.<\/p>\n<p>Please read this Privacy Policy together with our <a href=\".\/terms-and-conditions\">Terms &amp; Conditions<\/a>. By using the Service you acknowledge that you have read and understood this Privacy Policy.<\/p>\n<hr \/>\n<h2>2. Who We Are (Data Controller)<\/h2>\n<p>The data controller responsible for your personal data is:<\/p>\n<dl>\n<dt>Company<\/dt>\n<dd>PANTRYNO LIMITED<\/dd>\n<dt>Company number<\/dt>\n<dd>817250<\/dd>\n<dt>Registered in<\/dt>\n<dd>Ireland<\/dd>\n<dt>Registered office<\/dt>\n<dd>62 Hop Hill, Portlaoise, County Laois, Ireland<\/dd>\n<dt>Contact email<\/dt>\n<dd>privacy@pantryno.com<\/dd>\n<\/dl>\n<p>Where you use a Pantryno Business account administered by your employer or another organisation, that organisation may act as the data controller for certain data processed within its workspace, and Pantryno acts as a data processor on its behalf (see Section 15).<\/p>\n<hr \/>\n<h2>3. Legal Bases for Processing<\/h2>\n<p>We process personal data only where we have a lawful basis under Article 6 GDPR:<\/p>\n<dl>\n<dt>Contract (Art. 6(1)(b))<\/dt>\n<dd>Creating and operating your account; providing budgeting, reminders, tasks, documents, inventories and collaboration features; processing subscriptions.<\/dd>\n<dt>Consent (Art. 6(1)(c) \/ Art. 6(1)(a))<\/dt>\n<dd>Connecting your bank accounts via Open Banking; optional analytics; marketing communications (if any); optional profile fields.<\/dd>\n<dt>Legal obligation (Art. 6(1)(c))<\/dt>\n<dd>Tax, accounting and record-keeping obligations; responding to lawful requests from authorities.<\/dd>\n<dt>Legitimate interests (Art. 6(1)(f))<\/dt>\n<dd>Securing the Service; preventing fraud and abuse; maintaining logs; improving reliability and performance, balanced against your rights and freedoms.<\/dd>\n<\/dl>\n<p>Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal (see Section 13).<\/p>\n<hr \/>\n<h2>4. Personal Data We Collect<\/h2>\n<h3>4.1 Account and Registration Information<\/h3>\n<p>When you create an account we collect:<\/p>\n<ul>\n<li>Email address<\/li>\n<li>Password (stored only in hashed form by our authentication provider; we never store plaintext passwords)<\/li>\n<li>First name and last name<\/li>\n<li>Date of birth (used to verify eligibility \u2014 see Section 16)<\/li>\n<li>Account type (personal or business)<\/li>\n<li>Optional: telephone number, nickname<\/li>\n<\/ul>\n<p>For <strong>business accounts<\/strong>, we additionally collect:<\/p>\n<ul>\n<li>Company name<\/li>\n<li>Business type<\/li>\n<li>Company registration number (optional)<\/li>\n<li>Tax identification number (optional)<\/li>\n<\/ul>\n<p>If you sign in with <strong>Google<\/strong>, we receive your name, email address and basic profile information from Google via our authentication provider (AWS Cognito). Where required for eligibility verification, we may request your date of birth via the Google People API with your consent.<\/p>\n<h3>4.2 Content You Create in the Service<\/h3>\n<p>Depending on the features you use, we process the content you choose to store, which may include:<\/p>\n<ul>\n<li>Budgets, savings goals, financial records and manually entered transactions<\/li>\n<li>Payment card and bank account references you record manually (e.g. card nicknames, providers)<\/li>\n<li>Reminders, to-do lists and tasks<\/li>\n<li>Notes<\/li>\n<li>Shopping lists and meal plans<\/li>\n<li>Inventories, stock records and locations (business)<\/li>\n<li>Invoices and finance entries (business)<\/li>\n<li>Documents and files you upload, including file names, sizes, types, tags, folder structure and due dates<\/li>\n<li>Timeline and activity information generated by your use of the Service<\/li>\n<\/ul>\n<h3>4.3 Open Banking Data (with your explicit consent)<\/h3>\n<p>If you choose to connect a bank account (see Section 9), we process:<\/p>\n<ul>\n<li>The identity of the bank(s) you connect and the accounts you select<\/li>\n<li>Account balances<\/li>\n<li>Transaction data (amounts, dates, counterparties, references, categories)<\/li>\n<\/ul>\n<p>We do <strong>not<\/strong> collect or store your online banking credentials.<\/p>\n<h3>4.4 Subscription and Payment Information<\/h3>\n<p>If you purchase a subscription, we process:<\/p>\n<ul>\n<li>Your subscription tier, billing cycle, start date, renewal date and status<\/li>\n<li>Payment status information received from our payment providers (Stripe, Apple, Google)<\/li>\n<\/ul>\n<p>We do <strong>not<\/strong> store full payment card numbers. Card and payment details are collected and processed directly by the relevant payment provider (see Section 8).<\/p>\n<p>TODO: Verify \u2014 subscription checkout flows (Stripe \/ Apple \/ Google) at the time of publication; confirm which providers are live.<\/p>\n<h3>4.5 Collaboration Data<\/h3>\n<p>If you use shared households, groups, or business teams:<\/p>\n<ul>\n<li>Email addresses of people you invite<\/li>\n<li>Roles and permissions assigned within a group or organisation<\/li>\n<li>Invitation status and membership records<\/li>\n<li>Content shared within the group or workspace<\/li>\n<\/ul>\n<h3>4.6 Technical and Usage Information<\/h3>\n<p>When you use the Service, we automatically process:<\/p>\n<ul>\n<li>IP address and approximate region (derived from network requests)<\/li>\n<li>Device and browser type, operating system and language settings<\/li>\n<li>Authentication tokens (see Section 10)<\/li>\n<li>Server-side logs of API requests (timestamps, endpoints, status codes) for security and reliability<\/li>\n<li>Crash and error reports generated when something goes wrong<\/li>\n<\/ul>\n<p>TODO: Verify \u2014 the scope of server-side logging and crash reporting in the backend infrastructure.<\/p>\n<h3>4.7 Support and Communications<\/h3>\n<p>If you contact us, we process your name, contact details, the contents of your message and any attachments you provide.<\/p>\n<hr \/>\n<h2>5. Cookies and Local Storage<\/h2>\n<p>We use a small number of strictly necessary cookies and browser storage items. We do <strong>not<\/strong> currently use advertising or cross-site tracking cookies.<\/p>\n<dl>\n<dt><code>authToken-*<\/code> \u2014 Cookie (Secure, SameSite=Strict)<\/dt>\n<dd>Keeps you signed in (access token). Duration: up to 7 days.<\/dd>\n<dt><code>refreshToken-*<\/code> \u2014 Cookie (Secure, SameSite=Strict)<\/dt>\n<dd>Renews your session without re-login. Duration: up to 30 days.<\/dd>\n<dt><code>idToken-*<\/code> \u2014 Cookie (Secure, SameSite=Strict)<\/dt>\n<dd>Identity assertion for your session. Duration: up to 7 days.<\/dd>\n<dt><code>expiresAt-*<\/code> \u2014 Cookie (Secure, SameSite=Strict)<\/dt>\n<dd>Tracks session expiry. Duration: up to 7 days.<\/dd>\n<dt>Theme \/ appearance \u2014 Local storage<\/dt>\n<dd>Remembers your dark\/light mode and UI preferences. Duration: until cleared.<\/dd>\n<dt>Language preference \u2014 Local storage<\/dt>\n<dd>Remembers your chosen language. Duration: until cleared.<\/dd>\n<dt><code>analytics_enabled<\/code> \u2014 Local storage<\/dt>\n<dd>Records your analytics opt-in choice. Duration: until cleared.<\/dd>\n<dt>PKCE verifier \u2014 Session storage<\/dt>\n<dd>Secures the Google sign-in flow. Duration: current session only.<\/dd>\n<\/dl>\n<p>Strictly necessary cookies do not require consent under the ePrivacy Regulations. If we introduce non-essential cookies (e.g. analytics or marketing cookies) in the future, we will ask for your consent first through a cookie banner or equivalent mechanism.<\/p>\n<hr \/>\n<h2>6. How We Use Your Personal Data<\/h2>\n<p>We use your personal data to:<\/p>\n<ol>\n<li>Create, secure and administer your account;<\/li>\n<li>Provide the features of the Service (budgeting, reminders, tasks, documents, inventories, dashboards, reports, collaboration and related functionality);<\/li>\n<li>Connect to and retrieve data from your bank(s) where you have given explicit consent;<\/li>\n<li>Process subscriptions, payments, renewals and refunds;<\/li>\n<li>Send you service communications (e.g. email verification codes, password reset codes, security notices, subscription notices);<\/li>\n<li>Display in-app notifications and reminders you have configured;<\/li>\n<li>Detect, prevent and investigate fraud, abuse and security incidents;<\/li>\n<li>Comply with our legal obligations;<\/li>\n<li>Improve the reliability, performance and usability of the Service.<\/li>\n<\/ol>\n<p>We do <strong>not<\/strong> sell your personal data. We do not use your financial data for advertising.<\/p>\n<hr \/>\n<h2>7. Anonymised and Aggregated Data; Future Analytics and AI<\/h2>\n<p>We may create <strong>anonymised or aggregated data<\/strong> from usage of the Service (data which can no longer be linked to you). We may use such data \u2014 now and in the future \u2014 to:<\/p>\n<ul>\n<li>understand how the Service is used;<\/li>\n<li>improve existing features and develop new features;<\/li>\n<li>build, train and improve analytics capabilities, machine-learning models and AI-powered features (such as automatic categorisation, financial insights, recommendations, personalisation, predictive analytics and AI assistants);<\/li>\n<li>produce statistical reports.<\/li>\n<\/ul>\n<p>Where any future analytics, machine-learning or AI feature requires the processing of <strong>personal<\/strong> (non-anonymised) data, we will:<\/p>\n<ul>\n<li>comply with the GDPR and other applicable laws;<\/li>\n<li>update this Privacy Policy before introducing the processing;<\/li>\n<li>rely on an appropriate legal basis; and<\/li>\n<li>obtain your prior consent where consent is legally required.<\/li>\n<\/ul>\n<p>Any optional analytics collection in the Service is <strong>off by default<\/strong> and only activated if you opt in via Settings \u2192 Privacy.<\/p>\n<hr \/>\n<h2>8. Payments and Payment Processors<\/h2>\n<p>Subscriptions may be purchased through the following providers, each acting as an independent controller for the payment data it processes:<\/p>\n<dl>\n<dt>Stripe Payments Europe, Ltd.<\/dt>\n<dd>Card payments for web subscriptions. Processes: card details, billing information, transaction records.<\/dd>\n<dt>Apple Distribution International Ltd.<\/dt>\n<dd>In-app purchases on iOS. Processes: Apple ID, payment method, purchase history.<\/dd>\n<dt>Google Ireland Ltd. (Google Play)<\/dt>\n<dd>In-app purchases on Android. Processes: Google account, payment method, purchase history.<\/dd>\n<\/dl>\n<p>Pantryno receives only limited information from these providers (e.g. confirmation of payment, subscription status, renewal dates). We never receive or store your full card number.<\/p>\n<p>Please review the privacy policies of Stripe, Apple and Google for details of their processing.<\/p>\n<p>TODO: Verify \u2014 confirm live payment providers and legal entities at the time of publication.<\/p>\n<hr \/>\n<h2>9. Open Banking (Enable Banking)<\/h2>\n<p>Pantryno offers optional bank connectivity through <strong>Enable Banking Oy<\/strong>, an authorised Open Banking provider, under the EU Revised Payment Services Directive (PSD2) framework.<\/p>\n<p>Key facts:<\/p>\n<ul>\n<li><strong>You authenticate directly with your bank.<\/strong> When you connect an account, you are redirected to your bank&#8217;s own authentication interface.<\/li>\n<li><strong>Pantryno never sees, collects or stores your online banking credentials.<\/strong><\/li>\n<li>Account and transaction information is accessed <strong>only<\/strong> through the authorised Open Banking provider, using secure, regulated interfaces.<\/li>\n<li>Access requires your <strong>explicit consent<\/strong>, given at the time of connection.<\/li>\n<li>You select which accounts to share; unselected accounts are not accessed.<\/li>\n<li>You may <strong>revoke consent at any time<\/strong> by disconnecting the bank connection in the Service, and additionally via your bank where supported.<\/li>\n<li>Open Banking access is time-limited under PSD2 and requires periodic re-authentication with your bank.<\/li>\n<li>Banking data is handled in accordance with applicable Open Banking and payment services regulations.<\/li>\n<\/ul>\n<p>When you disconnect a bank, we stop retrieving new data from that connection. Previously retrieved transaction data remains in your account so that your financial history stays intact, unless you delete it or delete your account.<\/p>\n<hr \/>\n<h2>10. Authentication and Session Security<\/h2>\n<p>Authentication is provided through AWS Cognito using industry-standard JSON Web Tokens (JWT). Tokens are stored in cookies flagged <strong>Secure<\/strong> and <strong>SameSite=Strict<\/strong> and expire automatically. Google sign-in uses the OAuth 2.0 Authorization Code flow with PKCE. All communication with the Service is encrypted in transit using HTTPS\/TLS.<\/p>\n<hr \/>\n<h2>11. Third-Party Processors and Recipients<\/h2>\n<p>We use a limited number of service providers to operate the Service:<\/p>\n<dl>\n<dt>Amazon Web Services (AWS)<\/dt>\n<dd>Cloud hosting, serverless backend, database, file storage (S3), authentication (Cognito), email delivery. Location: EU region (eu-west-1, Ireland); AWS Data Processing Addendum incl. Standard Contractual Clauses where applicable.<\/dd>\n<dt>Enable Banking Oy<\/dt>\n<dd>Open Banking connectivity (Section 9). Location: EU (Finland).<\/dd>\n<dt>Stripe Payments Europe, Ltd.<\/dt>\n<dd>Web subscription payments. Location: EU; independent controller.<\/dd>\n<dt>Apple Distribution International Ltd.<\/dt>\n<dd>iOS in-app subscriptions. Location: EU; independent controller.<\/dd>\n<dt>Google Ireland Ltd.<\/dt>\n<dd>Android in-app subscriptions; Google sign-in. Location: EU; independent controller.<\/dd>\n<\/dl>\n<p>We may also disclose personal data where required by law, court order or competent authority, or to professional advisers under confidentiality obligations.<\/p>\n<p>TODO: Verify \u2014 confirm the complete list of sub-processors (e.g. email delivery service, crash reporting) at the time of publication.<\/p>\n<hr \/>\n<h2>12. International Transfers<\/h2>\n<p>We aim to store and process personal data within the <strong>European Economic Area (EEA)<\/strong>. Where any processor processes personal data outside the EEA, we ensure an adequate level of protection through:<\/p>\n<ul>\n<li>European Commission adequacy decisions; or<\/li>\n<li>Standard Contractual Clauses (SCCs) with supplementary measures where needed; or<\/li>\n<li>other valid transfer mechanisms under Chapter V GDPR.<\/li>\n<\/ul>\n<p>AWS hosting is in the EU (eu-west-1, Ireland). TODO: Verify \u2014 confirm whether any sub-processor processes data outside the EEA.<\/p>\n<hr \/>\n<h2>13. Your Rights<\/h2>\n<p>Under the GDPR you have the following rights:<\/p>\n<dl>\n<dt>Access (Art. 15)<\/dt>\n<dd>Obtain a copy of the personal data we hold about you.<\/dd>\n<dt>Rectification (Art. 16)<\/dt>\n<dd>Correct inaccurate or incomplete data. You can edit most profile data directly in Settings.<\/dd>\n<dt>Erasure (Art. 17)<\/dt>\n<dd>Request deletion of your personal data (&#8220;right to be forgotten&#8221;). You can delete your account in Settings \u2192 Account.<\/dd>\n<dt>Restriction (Art. 18)<\/dt>\n<dd>Restrict processing in certain circumstances.<\/dd>\n<dt>Portability (Art. 20)<\/dt>\n<dd>Receive your data in a structured, commonly used, machine-readable format. A data export can be requested in Settings \u2192 Privacy.<\/dd>\n<dt>Objection (Art. 21)<\/dt>\n<dd>Object to processing based on legitimate interests.<\/dd>\n<dt>Withdraw consent (Art. 7(3))<\/dt>\n<dd>Withdraw any consent at any time \u2014 including disconnecting bank connections and turning off optional analytics.<\/dd>\n<dt>Complaint (Art. 77)<\/dt>\n<dd>Lodge a complaint with the Irish <strong>Data Protection Commission<\/strong> (www.dataprotection.ie) or your local supervisory authority.<\/dd>\n<\/dl>\n<p>To exercise any right, use the in-app tools or contact us at the address in Section 20. We will respond within one month (extendable by two further months for complex requests, in which case we will inform you).<\/p>\n<hr \/>\n<h2>14. Data Retention<\/h2>\n<dl>\n<dt>Account and profile data<\/dt>\n<dd>For the life of your account; deleted after account deletion, subject to the periods below.<\/dd>\n<dt>Content you create (budgets, tasks, notes, documents, etc.)<\/dt>\n<dd>For the life of your account or until you delete the item.<\/dd>\n<dt>Open Banking transaction data<\/dt>\n<dd>For the life of your account or until you delete it; new retrieval stops when you disconnect a bank.<\/dd>\n<dt>Subscription and billing records<\/dt>\n<dd>Retained as required by Irish tax and accounting law (generally 6 years).<\/dd>\n<dt>Security and server logs<\/dt>\n<dd>Limited period appropriate for security purposes \u2014 TODO: Verify exact log retention period.<\/dd>\n<dt>Support correspondence<\/dt>\n<dd>As long as needed to handle the matter and for a reasonable period thereafter.<\/dd>\n<\/dl>\n<p>When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where retention is required by law. Residual copies in encrypted backups are purged on the backup rotation cycle. TODO: Verify backup retention window.<\/p>\n<hr \/>\n<h2>15. Business Accounts, Teams, Shared Households and Workspaces<\/h2>\n<ul>\n<li><strong>Shared households \/ groups (Personal):<\/strong> When you join or create a shared group, other members can see the content shared within that group (e.g. shared budgets, lists, documents). Group administrators can manage membership.<\/li>\n<li><strong>Business workspaces (Business):<\/strong> Organisation owners and admins can invite members, assign roles, remove members and transfer ownership. Members&#8217; names, email addresses, roles and activity within the workspace are visible to the organisation as necessary for collaboration.<\/li>\n<li>Where an organisation administers your account, that organisation may act as <strong>data controller<\/strong> for workspace content, and Pantryno processes such data as a <strong>processor<\/strong> on its documented instructions. A data processing agreement is available to business customers on request. TODO: Verify \u2014 confirm DPA availability and process before launch.<\/li>\n<\/ul>\n<p>Please only share content in a group or workspace that you are comfortable sharing with its members.<\/p>\n<hr \/>\n<h2>16. Children<\/h2>\n<p>The Service is not directed at children. You must meet the minimum age stated in our <a href=\".\/terms-and-conditions\">Terms &amp; Conditions<\/a> (at least 18 years old). We use your date of birth at registration to verify eligibility. If we become aware that we have collected personal data from a child in breach of this policy, we will delete it promptly.<\/p>\n<hr \/>\n<h2>17. Security<\/h2>\n<p>We apply appropriate technical and organisational measures under Article 32 GDPR, including:<\/p>\n<ul>\n<li>Encryption of data <strong>in transit<\/strong> (HTTPS\/TLS) and <strong>at rest<\/strong> (encrypted databases and file storage);<\/li>\n<li>JWT-based authentication with short-lived tokens, secure cookie flags and automatic session expiry;<\/li>\n<li>OAuth 2.0 with PKCE for federated sign-in and bank authorisation flows;<\/li>\n<li>Serverless cloud infrastructure with access controls and the principle of least privilege;<\/li>\n<li>Segregation of environments (staging \/ production);<\/li>\n<li>No storage of bank credentials or full card numbers on our systems.<\/li>\n<\/ul>\n<p>No system is completely secure. If we become aware of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission and, where required, affected users, in accordance with Articles 33\u201334 GDPR.<\/p>\n<hr \/>\n<h2>18. Push Notifications and Communications<\/h2>\n<ul>\n<li><strong>Service emails<\/strong> (verification codes, password resets, security alerts, subscription notices) are sent as part of operating the Service and cannot be opted out of while you hold an account.<\/li>\n<li><strong>In-app notifications and reminders<\/strong> are generated based on the reminders and settings you configure and can be managed in Settings \u2192 Notifications.<\/li>\n<li><strong>Push notifications<\/strong> on mobile devices, where offered, require your device-level permission and can be disabled at any time in your device settings. TODO: Verify current push notification implementation in the mobile applications.<\/li>\n<li><strong>Marketing communications<\/strong>, if introduced, will be sent only with your consent and will include an unsubscribe option.<\/li>\n<\/ul>\n<hr \/>\n<h2>19. Changes to This Privacy Policy<\/h2>\n<p>We may update this Privacy Policy from time to time. For material changes we will notify you through the Service or by email before the change takes effect. The &#8220;Last updated&#8221; date at the top indicates the latest revision. Continued use of the Service after the effective date constitutes acknowledgement of the updated policy; where a change requires consent under applicable law, we will seek it.<\/p>\n<hr \/>\n<h2>20. Contact<\/h2>\n<p>For any privacy questions or to exercise your rights:<\/p>\n<ul>\n<li><strong>Email:<\/strong> privacy@pantryno.com<\/li>\n<li><strong>Post:<\/strong> PANTRYNO LIMITED, 62 Hop Hill, Portlaoise, County Laois, Ireland<\/li>\n<\/ul>\n<p>You also have the right to lodge a complaint with the <strong>Data Protection Commission<\/strong>, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland \u2014 www.dataprotection.ie.<\/p>\n<hr \/>\n<h2>21. Pending TODOs<\/h2>\n<p>The following items require verification or input before publication:<\/p>\n<ul>\n<li><strong>Privacy\/DPO contact email<\/strong> \u2014 insert the contact email for privacy enquiries (e.g. privacy@pantryno.com)<\/li>\n<li><strong>Server-side log retention period<\/strong> \u2014 confirm how long API request logs are retained<\/li>\n<li><strong>Backup retention window<\/strong> \u2014 confirm how long encrypted backups are kept before purging<\/li>\n<li><strong>Complete sub-processor list<\/strong> \u2014 confirm all third-party processors (e.g. email delivery service, crash reporting tool) beyond those already listed<\/li>\n<li><strong>Push notification implementation status<\/strong> \u2014 confirm whether push notifications are implemented in the mobile applications<\/li>\n<li><strong>Live payment providers at launch<\/strong> \u2014 confirm which of Stripe, Apple, and Google are active at publication<\/li>\n<li><strong>DPA availability and process<\/strong> \u2014 confirm whether a Data Processing Agreement will be offered to business customers and the process for requesting it<\/li>\n<li><strong>Non-EEA processing<\/strong> \u2014 confirm whether any sub-processor processes data outside the EEA beyond AWS eu-west-1<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: 31 August 2026 Version: 1.0 1. Introduction This Privacy Policy explains how PANTRYNO LIMITED (&#8220;Pantryno&#8221;, &#8220;we&#8221;, &#8220;us&#8221;, &#8220;our&#8221;) collects, uses, stores, shares and protects your personal data when you use the Pantryno platform, comprising: the Pantryno Personal Web Application; the Pantryno Business Web Application; the Pantryno Personal Mobile Application (iOS and Android); the [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-36","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/pages\/36","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=36"}],"version-history":[{"count":5,"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/pages\/36\/revisions"}],"predecessor-version":[{"id":193,"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=\/wp\/v2\/pages\/36\/revisions\/193"}],"wp:attachment":[{"href":"https:\/\/api-web.pantryno.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=36"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}