Privacy Policy

3. Personal Data We Collect

We may collect the following types of personal data:

3.1 Information you provide to us

• Full name and contact details (email address, phone number, postal address)

• Event details such as date, location, number of guests, and dietary requirements

• Billing and payment information (processed securely via our payment provider)

• Preferences, allergies, and other catering-specific requests

• Any other information you share with us through enquiries or bookings

3.2 Information we collect automatically

• Website usage data such as pages visited, time spent on site, and referring URLs

• Device and browser information collected via cookies (see Section 8)

• IP address

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to enquiries and process bookings

• To plan, prepare, and deliver your catering event

• To process payments and issue invoices

• To contact you regarding your booking or event

• To send you updates, menus, or promotional content where you have consented to this

• To improve our website and services

• To comply with legal and regulatory obligations

5. Legal Basis for Processing

We rely on the following legal bases under the GDPR:

• Contract: Processing is necessary to fulfil your booking or respond to your enquiry.

• Legitimate Interests: To improve our services and maintain our business operations.

• Legal Obligation: Where we are required to process your data to comply with applicable law.

• Consent: Where you have provided explicit consent, such as to receive marketing communications.

 

6. Sharing Your Personal Data

We do not sell or rent your personal data. We may share your data with trusted third parties only where necessary, including:

• Payment processors, to handle transactions securely

• Email and marketing platforms used to manage communications (where applicable)

• Service providers who assist in delivering your event (such as event venues or suppliers)

• Regulatory bodies or law enforcement, where required by law

All third parties are required to handle your data in accordance with applicable data protection law.

 

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. In general:

• Booking and event records are retained for up to 7 years in line with Malta's commercial and tax record-keeping obligations.

• Marketing data is retained until you withdraw your consent.

• Website usage data is retained in accordance with our cookie settings.

​

8. Cookies

Our website may use cookies to improve your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: Required for the website to function properly.

• Analytics cookies: To understand how visitors use our site (e.g. via Google Analytics).

• Marketing cookies: To track engagement with any promotional content, where applicable.

• You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the site's functionality.​

​

9. Your Rights

• Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.

• Right to rectification: To ask us to correct any inaccurate or incomplete data.

• Right to erasure: To request that we delete your personal data, subject to legal requirements.

• Right to restrict processing: To ask us to limit how we use your data.

• Right to data portability: To receive your data in a structured, machine-readable format.

• Right to object: To object to processing based on legitimate interests or for direct marketing.

• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

• To exercise any of these rights, please contact us at [your@email.com]. We will respond within one month of receiving your request.

​

10. Right to Lodge a Complaint

• If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), the supervisory authority in Malta:

• Website: https://idpc.org.mt

• Address: Level 2, Airways House, High Street, Sliema SLM 1549, Malta

• Telephone: +356 2328 7100

​

11. Data Security

• We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Where we use third-party platforms or processors, we take steps to ensure they maintain adequate security standards.

• Please be aware that no transmission of data over the internet is entirely secure. While we do our best to protect your information, we cannot guarantee absolute security.

​

12. Third-Party Links

• Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies before submitting any personal data.

​

13. Children's Privacy

• Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us, and we will promptly delete it.

​

14. Changes to This Policy

• We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website. We encourage you to review this policy periodically.

​

15. Contact Us

• If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please do not hesitate to get in touch:

• Email: ritiannebondin.privatechef@gmail.com​​