Privacy notice

Who we are

Cilantro Café, Unit 7, Newpark Centre, Newtownpark Avenue, Blackrock, Co. Dublin, A94 W956. We are the data controller for the information described here.

When you book a table

We ask for your name, phone number and email address, plus the date, time, number of guests, any seating preference and anything you tell us in the notes box.

We use it to hold your table, to contact you if something changes, and to keep a record of the booking. Our lawful basis is that we need it to provide the booking you asked for.

Staff can add their own notes to your record — for example an allergy you mentioned, or that you prefer the booth. You can ask to see these.

When you ask about catering

If you use our catering page, we keep what you send us: your phone number or email, and — if you use the full form — your name, the occasion, date, numbers, package, whether you want pickup or delivery, a delivery address and any notes. We also note the starting price you were shown.

We use it only to answer your enquiry and, if you go ahead, to arrange the catering. Enquiries that go quiet are deleted 24 months after they were last updated.

Marketing emails

We only email you about offers and events if you ticked the box asking us to. That is separate from booking a table, and your booking is unaffected if you leave it unticked. You can tell us to stop at any time and we will.

How long we keep it

Booking records are kept for 24 months after your most recent visit. After that your name and phone number are permanently removed from our system.

The booking itself stays on as an anonymous record — just a date and a number of covers — because we use it to plan staffing. It can no longer be connected to you.

If you asked for marketing emails, we keep your email address until you tell us to stop, because your consent is a separate reason for holding it.

Who else sees it

Your booking details are visible to café staff through our booking system. We do not sell your information and we do not share it for anyone else's marketing.

Our website is hosted by Hostinger, who store the data on our behalf within the EU. If we have connected our booking system to Google Calendar, your name, party size and contact details are also written to a private calendar owned by the café so staff can see the day's bookings.

Cookies

This site sets one cookie of its own, which keeps your booking form secure while you fill it in. It is deleted when you close your browser and it does not track you.

Google Analytics. If you choose "Accept all" in the cookie notice, we use Google Analytics to understand how people use this site — which pages are visited, and whether people tap things like the menu, directions or the booking form. It sets cookies whose names start with _ga. We do not send Google your name, phone number, email or anything you type into a form, and we do not use it for advertising. Nothing is sent to Google unless you accept.

Google Maps. Our home page shows a map loaded from Google, and Google may set their own cookies when it loads. If you choose "Essential only" we hide the map and show a plain link instead.

You can change your mind at any time using Cookie settings at the bottom of every page. Choosing "Essential only" stops analytics and deletes its cookies.

Your rights

Under GDPR you can ask us to:

• give you a copy of everything we hold about you
• correct anything that is wrong
• delete your details
• stop using them for marketing
• restrict or object to how we use them

Just ask a member of staff and we will sort it out. There is no charge, and we will come back to you within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Data Protection Commission, the Irish supervisory authority, at dataprotection.ie.