Privacy Policy
Last updated: May 16, 2026
Preamble
This Privacy Policy describes how Lianayo collects, uses, stores and protects the personal data of Users and Members of the Lianayo platform, accessible via the website and mobile application. This Policy forms an integral part of Lianayo's Terms of Service. By using the Platform, you acknowledge that you have read this Policy. Lianayo is committed to processing your personal data transparently, with respect for your privacy and in compliance with applicable personal data protection laws, including the General Data Protection Regulation (GDPR) and Congolese law n° 23-010 of 13 March 2023 on the protection of personal data.
1. Data Controller
The controller of personal data collected on the Platform is Lianayo. For any questions regarding this Policy or the exercise of your rights, you may contact us at: contact@lianayo.com
2. Data Collected
2.1. Data you provide directly
When you create an account or use the Platform, we collect the following data:
- Identification information: last name, first name, email address, phone number, password (stored in encrypted form).
- Profile information: profile photo (if you add one), culinary preferences.
- Published content: reviews, ratings, comments, photos you publish on the Platform.
- Reservation data: date, time, number of guests, chosen restaurant, special requests if any.
- Support exchanges: content of messages you send us.
2.2. Automatically collected data
When you browse the Platform, we collect:
- Connection data: IP address, date and time of connection, pages visited.
- Technical data: device type, operating system, browser type, language, technical identifiers.
- Location data:
- On the website: an approximate location (at city level) is inferred from your IP address, in order to suggest relevant restaurants in your geographic area.
- On the mobile application: your precise location is only collected at your explicit request (for example when you activate the "restaurants near me" feature), and only when the application is in use.
You can disable location access at any time from your device settings.
2.3. Data collected from third parties
No data is collected from third parties regarding Users and Members of the Platform.
3. Purposes and Legal Bases for Processing
We process your personal data for the following purposes, on the legal bases indicated:
| Purpose | Legal basis |
|---|---|
| Creation and management of your account | Contract performance (Terms of Service) |
| Processing and tracking of your reservations | Contract performance |
| Publication and moderation of your reviews and content | Contract performance |
| Approximate geolocation (web, via IP) | Legitimate interest |
| Precise geolocation (mobile application) | Consent |
| Service-related communications (reservation notifications, technical updates) | Contract performance |
| Commercial communications and newsletters | Consent |
| Platform security and fraud prevention | Legitimate interest |
| Compliance with our legal obligations | Legal obligation |
| Service improvement and anonymized internal statistics | Legitimate interest |
4. Data Recipients
Your data is never sold to third parties. It may be shared with the following recipients, strictly to the extent necessary for their involvement:
4.1. Internal recipients
Authorized Lianayo staff (technical team, moderation team, user support), in the course of their duties.
4.2. Partner Restaurant Owners
When you make a reservation, the information necessary to process it (last name, first name, phone number, date, time, number of guests, special requests) is transmitted to the relevant Restaurant Owner.
4.3. Technical sub-processors
We use technical service providers acting as sub-processors under the GDPR, who only use your data for the needs of the service provided to Lianayo:
- Infrastructure and database hosting: DigitalOcean, Hostinger.
- File and media storage: DigitalOcean Spaces.
- Mapping and geolocation services: Google (Google Maps, Google Places).
- Payment and mobile money providers: used when financial transactions are carried out on the Platform.
The detailed list of sub-processors may change. Any significant change will be reflected in an update to this Policy.
4.4. Legal authorities
Your data may be shared with administrative or judicial authorities when required by law, or in response to a legal requisition.
5. Transfers of Data Outside Your Country of Residence
Some of your data may be processed in countries outside your country of residence, including within the European Union or in other countries where our technical sub-processors are located. Where such transfers occur to countries that do not offer an equivalent level of protection to that provided by the GDPR, we ensure that appropriate safeguards are in place, such as the standard contractual clauses adopted by the European Commission.
6. Retention Periods
We retain your personal data for the following periods:
| Data type | Retention period |
|---|---|
| Active account data | As long as your account is active |
| Inactive account data | Deletion or anonymization after 1 year without login |
| Published reviews, ratings and photos | Retained as long as useful to the service; anonymized upon account deletion |
| Reservation data | 3 years after the reservation date |
| Billing and accounting data | 10 years, in accordance with legal obligations |
| Connection logs and technical data | 12 months maximum |
| Commercial prospecting data (newsletters) | 3 years from the last active contact |
| User support exchanges | 3 years from the last exchange |
At the end of these periods, your data is either deleted or irreversibly anonymized for statistical purposes.
7. Data Security
Lianayo implements appropriate technical and organizational measures to preserve the confidentiality, integrity and availability of your personal data. These measures include in particular:
- encryption of passwords and communications with the Platform (HTTPS);
- limiting data access to authorized personnel only;
- regular and secure backups;
- access monitoring and logging of sensitive operations;
- regular updates of software components used.
However, no data transmission over the internet is completely secure. We therefore cannot guarantee absolute security, but we commit to implementing best market practices.
In the event of a data breach likely to create a risk to your rights and freedoms, we commit to informing you as soon as possible and to notifying the competent supervisory authority in accordance with the law.
8. Cookies and Trackers
The Platform uses only strictly necessary cookies for its proper functioning (session, authentication, security and preference cookies). As such, these cookies do not require your prior consent.
Lianayo does not currently use analytical, advertising or third-party cookies for profiling purposes. Should this change in the future, you will be informed and your consent will be requested via a dedicated banner, in compliance with applicable rules.
You can configure your browser at any time to limit or refuse cookies. Note however that disabling strictly necessary cookies may impair the functioning of the Platform.
9. Your Rights
In accordance with the GDPR and Congolese law n° 23-010, you have the following rights regarding your personal data:
- Right of access :
- obtain confirmation that your data is being processed and receive a copy.
- Right of rectification :
- correct any inaccurate or incomplete data.
- Right to erasure :
- request the deletion of your data, within the limits provided by law.
- Right to restriction :
- request the temporary suspension of the processing of your data.
- Right to object :
- object to the processing of your data on grounds relating to your particular situation, in particular with regard to commercial prospecting.
- Right to data portability :
- receive your data in a structured, machine-readable format, and transmit it to another controller.
- Right to withdraw consent :
- withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
- Post-mortem right :
- define directives regarding the fate of your data after your death.
To exercise any of these rights, write to us at contact@lianayo.com specifying your request. We may ask you for proof of identity to prevent any impersonation. We commit to responding to your request within one month of receipt.
If, after contacting us, you feel that your rights are not being respected, you have the right to lodge a complaint with a competent supervisory authority, in particular the Commission Nationale de l'Informatique et des Libertés (CNIL) in France, or the Autorité de Protection des Données à caractère personnel (APD) in the Democratic Republic of Congo.
10. Minors
The Platform is not intended for persons under 18 years of age. Lianayo does not knowingly collect data about minors. If you believe that a minor has transmitted their data to us without authorization, you may contact us at contact@lianayo.com so that we can proceed with its deletion as soon as possible.
11. Policy Updates
Lianayo reserves the right to modify this Policy at any time, in particular to adapt it to legislative, case law or technical developments. The last update date is indicated at the top of the document. In the event of a substantial change, Users and Members will be informed by email or by a message displayed on the Platform.
12. Contact
For any questions relating to this Privacy Policy or to exercise your rights, you may contact us at: contact@lianayo.com