Privacy Policy – Caleo Crudos y Parrilla

Caleo Crudos y Parrilla, [legal entity name], located at Kura Hulanda Village, 56 IJzerstraat, Willemstad, Curaçao. Phone: +5999 696-6768 Email: reservations@caleocur.com

Caleo is the data controller for the personal data described in this policy. Our reservation and payment software is provided by Alidar (Derry, New Hampshire, USA), which processes data on our behalf as a data processor under a written agreement.

• Reservations: name, phone number, email, party size, date and time, special requests (such as birthdays or allergies you choose to tell us), reservation status (confirmed, cancelled, arrived, no-show), and messages exchanged with us, including through WhatsApp.
• Card holds and payments: when we require a card to guarantee a booking, your card is entered directly with our payment provider, CX Pay. We never see or store your full card number. We only keep a secure token, the last 4 digits, and the status of any hold or charge.
• Reviews and feedback: your rating and comments, if you choose to leave them.
• Website use: basic technical data such as IP address, browser type, and pages visited, collected through cookies.
• Marketing: your name and contact details, only if you opt in to receive offers or news from us.

Please don't send us sensitive data (such as health details beyond allergy notes you want us to know about).

• To take, confirm, change, remind you about, and manage your reservation. Basis: performing our agreement with you.
• To place, capture, or release a card hold under our no-show and cancellation policy. Basis: performing our agreement with you, which you accept when booking.
• To keep a record of no-shows and late cancellations so we can manage future bookings. Basis: our legitimate interest in running the restaurant fairly.
• To answer your questions and complaints. Basis: legitimate interest.
• To send offers and news. Basis: your consent, which you can withdraw at any time.
• To keep financial and tax records. Basis: legal obligation.
• To handle disputes or legal claims. Basis: legitimate interest.

• Reservation and guest data: up to 3 years after your last visit or contact.
• Payment and invoice records: 10 years, as required by Curaçao tax and bookkeeping law.
• Marketing data: until you unsubscribe.
• Cookies: no longer than 6 months. After these periods, data is deleted or anonymized.

We only share what's needed, with:

• Alidar, our software provider, which hosts and runs our reservation system.
• CX Pay, which processes card holds and payments.
• Meta (WhatsApp), when you message or book with us through WhatsApp.
• Our hosting and cloud providers, accountants, advisors, and insurers.
• Authorities, when the law requires it. We never sell your data.

Some of our providers store data outside Curaçao, including in the United States and the European Union. When that happens, we make sure appropriate safeguards are in place, such as contractual protections, as required by Curaçao law.

You can ask us to:

• show you the personal data we hold about you,
• correct it,
• delete it, unless we must keep it by law,
• stop using it for marketing, at any time, without giving a reason,
• object to other uses in certain cases,
• withdraw consent you gave. Email reservations@caleocur.com. We'll respond within 4 weeks. We may ask you to confirm your identity first.

If you're unhappy with how we handle your data, you can file a complaint with the College Bescherming Persoonsgegevens Curaçao (Curaçao Data Protection Board).

We use reasonable technical and organizational measures to protect your data, including encryption, access controls, and tokenized payments. No system is 100% secure, but if a breach affects you, we'll notify you and the authorities as required.

Our services are meant for adults. We don't knowingly collect data from children under 16.

We may update this policy. The latest version will always be posted on our website with the date it was last updated.