Privacy policy

Last updated: 7 October 2026

1. Who we are

("WITKO", "we") is a social media agency for restaurants. We are responsible for the personal data described on this page. You can contact us about it at .

2. What we collect

• Audit and quote requests: your name, restaurant, city, email address, the social media accounts you share with us and the type of request.
• Messages: your phone number or email address and the content of your messages when you contact us on WhatsApp or by email.
• Website visits: our hosting provider keeps standard technical logs (IP address, browser, pages requested) for security. We remember your language choice in your browser's local storage. We do not use advertising or analytics cookies.
• Public information: to prepare an audit we look at the public content of the accounts you share, such as posts, follower numbers and engagement. We never ask for your passwords.

3. Why we use it

• To prepare and send your audit or quote.
• To answer your questions.
• To prepare and manage our contract if you become a client.
• To keep the website secure.

We do not sell your data, and we do not use it for unrelated marketing without your consent.

4. Legal basis

In the United Arab Emirates we process personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. For visitors in the European Union (for example Italy, Spain and France), our legal bases under the GDPR are: steps you ask us to take before a contract (your audit or quote), our legitimate interest in replying to you and keeping the site secure, and your consent where we ask for it. For visitors in South Africa, we follow the Protection of Personal Information Act (POPIA).

5. Who we share it with

Only with service providers that help us run the agency, and only as needed: Render (website hosting), Formspree (delivery of form requests by email), Google (email and document storage; the fonts on this website are delivered by Google Fonts, which receives your IP address) and Meta (WhatsApp). Some of them are based outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses. We may also disclose data when the law requires us to.

6. How long we keep it

• Audit and quote requests: up to 24 months after our last contact, unless you become a client.
• Client data: for the length of the contract and then for the period required by accounting and tax rules.
• Technical logs: for the short period set by our hosting provider.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive a copy in a portable format, and to withdraw your consent at any time. Write to us at and we will reply within 30 days. You can also complain to your data protection authority: the UAE Data Office, the Garante per la protezione dei dati personali (Italy), the AEPD (Spain), the CNIL (France) or the Information Regulator (South Africa).

8. Security

Access to your data is limited to the people who need it, and our accounts are protected with strong passwords and two-step verification where available.

9. Children

Our services are for businesses and are not directed at anyone under 18.

10. Changes

If we change this policy we will update the date at the top of this page.