Privacy Policy
Last updated: April 2025El Chapo's Tacos ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a reservation.
1. Information We Collect
We may collect the following personal information:
- Reservation details: name, phone number, email address, party size, date and time of visit, and any special requests.
- Contact form submissions: name, email, phone, and message content.
- Website usage data: browser type, IP address, pages visited, time on site, via cookies and analytics tools.
- Communications: WhatsApp messages, emails, and other communications you send to us.
2. How We Use Your Information
We use the information we collect to:
- Process and confirm your reservations
- Communicate with you about your booking or enquiry
- Send confirmation and reminder messages
- Improve our website and services
- Comply with legal obligations
- Respond to your questions, feedback or complaints
We do not sell your personal data to third parties.
3. Legal Basis for Processing
Where applicable, we process your personal data under the following legal bases:
- Contract performance: to fulfil your reservation or respond to your enquiry
- Legitimate interests: to improve our services and website
- Legal obligation: where required by UAE or applicable law
- Consent: where you have explicitly provided consent (e.g., marketing communications)
4. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, typically no longer than 24 months from your last interaction with us, unless a longer period is required by law.
5. Sharing of Information
We may share your information with:
- Our reservation management systems and booking platforms
- WhatsApp (Meta Platforms) for communication purposes
- Google Analytics for anonymous website analytics
- Service providers who assist us in operating our website and business, bound by confidentiality obligations
We will not share your personal data with third parties for their own marketing purposes without your consent.
6. Cookies
Our website uses cookies to enhance your browsing experience. Cookies may include:
- Essential cookies: required for the website to function
- Analytics cookies: to understand how visitors use the site (e.g., Google Analytics)
- Functional cookies: to remember your preferences
You can control cookie settings through your browser. Note that disabling cookies may affect website functionality.
7. Your Rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Object to or restrict certain processing
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at eat@elchapostacos.net.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
9. Third-Party Links
Our website may contain links to third-party websites (such as Google Maps, Instagram, Facebook). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
10. Children's Privacy
Our website and services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: eat@elchapostacos.net
- Phone: +971 4 514 5411
- Address: Studio One Hotel, Al Qudra Road, Al Hebiah Second, Studio City, Dubai, UAE
This Privacy Policy is governed by the laws of the United Arab Emirates. Nothing in this policy limits your statutory rights under applicable UAE data protection law.