Privacy Policy

At TurIA we take privacy seriously. This Policy explains what personal data we process through the website turia.tech, our platform and TurIA Reviews (reviews.turia.tech), for what purpose, for how long and what rights you have. We recommend reading it carefully.

1. Data controller

The controller of the data described in this Policy is:

• Turia Core Limited
• Registration number: 80323428
• Registered office: Unit B, 12/F, Hang Seng Causeway Bay Building, 28 Yee Wo Street, Causeway Bay, Hong Kong
• Privacy contact: support@turia.tech
• General contact: info@turia.tech

Turia Core Limited is a company incorporated in Hong Kong and is subject to the Personal Data (Privacy) Ordinance (PDPO). We apply reasonable and appropriate security measures to protect the personal data we process.

2. Who this Policy applies to

This Policy applies to the data of:

• Visitors to the websites turia.tech and reviews.turia.tech.
• Clients and prospective clients (agencies, operators and professionals) who request information, a demo or contract our services.
• Users who access the Platform on behalf of a client.

This Policy does not govern the processing of the data of our clients' end users (for example, travellers who book with an agency that uses TurIA, or the authors of the reviews a business shows with TurIA Reviews). With respect to that data, we act as a data processor on behalf of the client, who is the controller; that processing is governed by the Data Processing Agreement (DPA) and by the client's own privacy policy. Section 4 explains what data TurIA Reviews processes.

3. What data we process and for what purpose

Purpose	Data	Legal basis
Handling enquiries, information requests and demos	Contact details and the content of your message	Your request / pre-contractual measures
Managing registration, contracting and providing the service	Identification, contact, account and billing data	Contract performance
Managing payment through the payment gateway	Data necessary for payment	Contract performance
Ensuring the security and traceability of accesses	Technical data and access logs	Legitimate interest in security
Analysing use of the site and service to improve it	Aggregated or pseudonymised usage data	Legitimate interest in improvement
Sending commercial and follow-up communications about TurIA	Contact details (email, phone, messaging)	Legitimate interest in the B2B context / consent where applicable

You can object to commercial communications at any time, without this affecting the provision of the service.

4. TurIA Reviews: reviews and Instagram

TurIA Reviews (reviews.turia.tech) lets a business show on its website its reviews from different platforms, the reviews it requests from its own customers and, if it turns it on, its Instagram posts. For review data and review requests we act as a data processor on behalf of each business (section 2); even so, we explain here what we do with that data.

Reviews

• Reviews published on platforms (for example, Google or TripAdvisor): on the business's instructions we collect the public reviews of its listings, directly or through specialised providers. We process the author's public name and their profile photo if it is public, the rating, the text, the date, the language, the photos and the link to the original review. We show them in the business's widget and public certificate, calculate its average rating and may translate the text, including with machine translation tools, to show it in the language of the website.
• Own reviews: when a business requests reviews from its customers, we process the name, email or phone number it gives us and the service details to send the request. From the person who leaves the review we keep their name, rating and text.
• If you wrote a review and do not want it to appear in a TurIA Reviews widget, you can ask the business or write to us at support@turia.tech.

Instagram

Connecting Instagram is optional and is done by the business itself with its professional account, through Meta's official Instagram API and with its express authorisation. We only request one read-only permission (instagram_business_basic). With it we obtain:

• from the account: the ID, username, name, profile picture and number of followers and posts;
• from its latest posts: the image (or the cover, for a video), the caption, the link, the date, the type of post and the number of likes and comments;
• an access token, which we store encrypted and renew automatically before it expires.

We use this data only to show the business's Instagram posts on the websites where the business itself installs the widget and in the preview in its panel. We keep a copy of the images on our servers to serve them in the widget, and we update the posts regularly (daily or weekly, depending on the plan). We do not use the data for advertising or profiling, we do not combine it with other data, we do not sell it and we do not share it with third parties, except the infrastructure providers that host the service.

How to delete it: when the account is disconnected in the panel (Instagram → Disconnect) we immediately delete the access token, the account details, the posts and every stored image. You can also remove TurIA Reviews from Instagram (Settings → Website permissions → Apps and websites): the feed stops updating and the data is deleted when the account is disconnected or when you ask us. Instructions: reviews.turia.tech/data-deletion. If you cannot sign in to the panel, write to support@turia.tech from your account's email and we will delete it within 30 days.

The widget on businesses' websites

The TurIA Reviews widget does not set cookies or store anything in the browser of the people who visit the website, and we do not use it to track anyone. Like any server, ours records technical data about each request (IP address, browser and requested address) for security and keeps it for 14 days.

5. Cookieless web analytics

To measure turia.tech traffic we use TurIA Analytics, our own privacy-respecting, cookieless analytics tool. We do not use tracking cookies or advertising profiles, and data is processed in aggregated or pseudonymised form for the sole purpose of understanding and improving use of the site.

6. Cookies

turia.tech only uses the technical cookies necessary for its operation. Should we add additional non-essential cookies, we will indicate this and obtain your consent where applicable regulations require it. On reviews.turia.tech, the panel only uses the sign-in cookie and the one for the chosen language, and the TurIA Reviews widget sets no cookies on the websites where it appears.

7. Recipients and processors

We do not sell your personal data. We may share it with providers that supply services to us (infrastructure, payment gateway, messaging, email delivery, translation, collection of public reviews for TurIA Reviews and tools needed to operate), who process the data on our behalf and under contract. We may also disclose it where there is a legal obligation.

8. International transfers

For the provision of the service, your data may be stored or processed in infrastructure located outside your country. We apply reasonable security measures regardless of location. Where the regulations applicable to you require specific safeguards for an international transfer, we will adopt the mechanisms provided for by those regulations.

9. Retention

We keep data for as long as necessary for the purposes described and to address any resulting liabilities. After the end of the contractual relationship, the account data remains available for download for thirty (30) days and, after that period, is deleted, except for data we must retain to comply with legal, accounting or tax obligations for the legally required period.

10. Your rights

You can exercise the rights of access, rectification, erasure, objection, restriction, portability and not to be subject to automated decisions by writing to support@turia.tech. We will handle your request in accordance with applicable regulations. If you believe we have not handled your request properly, you may lodge a complaint with the supervisory authority that applies to you.

11. Security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration, and we improve those measures continuously. No system is completely infallible, but we work to maintain a level of security appropriate to the risk.

12. Changes to this Policy

We may update this Policy to adapt it to legal, technical or operational changes. We will publish the current version on turia.tech with its update date and, where changes are substantial, we will communicate them through appropriate means.

13. Contact

For any matter related to this Policy or the processing of your data, write to us at support@turia.tech.

Turia Core Limited — turia.tech