Privacy Policy

This policy explains what personal data we collect, what we use it for and how you can control it. It applies to this website, to our contact, reservation and gift forms, and to the conversations you have with us on WhatsApp.

What data we process

Only what you give us. Depending on the channel you use:

• Contact, events, reservation and gift forms: name, email address, phone number, and whatever you choose to tell us about your enquiry (tentative date, number of guests, type of celebration, indicative budget).
• WhatsApp: your phone number, your profile name and the content of the messages you send us.
• Browsing: technical and usage data collected through cookies, whenever you have accepted them.

We neither ask for nor need special categories of data. If you tell us about an allergy or an intolerance so that we can prepare your order or your event, that information is used for that purpose alone and is not kept any longer than necessary.

Purpose and legal basis

The data you give us is processed in order to handle your enquiry and reply to you, and to prepare and carry out the reservation, quote or event you ask us for. If you tick the relevant box, also to send you news and offers; that consent is separate and you may withdraw it at any time.

The legal basis is the data subject's consent (Art. 6(1)(a) GDPR) and, once a reservation or an accepted quote exists, the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR). Retention for invoicing purposes responds to a legal obligation (Art. 6(1)(c) GDPR).

WhatsApp

We handle enquiries through WhatsApp Business. When you write to us on that channel we process your number, your profile name and the content of the conversation for the sole purpose of replying to you and following up on your enquiry or your event.

Conversations may be recorded in SĀNTAL's internal event management platform in order to centralise the follow-up of each enquiry. The technology providers that host or transmit this information act in accordance with their respective contracts and privacy policies.

Writing to us on WhatsApp is voluntary. You can just as well contact us by email or by phone, and you may ask us at any time to delete the conversation.

Cookies

We use technical cookies (essential for the site to work), analytics cookies (Google Analytics 4 with IP anonymisation) and marketing cookies (Meta Pixel, Google Ads). Analytics and marketing cookies are only activated if you accept them in the cookie notice.

You may withdraw your consent at any time by deleting cookies from your browser and choosing again in the notice, or by setting your browser to block them. Refusing them does not limit access to any part of the site.

Recipients

Your data is recorded in our internal enquiry management system, hosted by technology providers acting as processors, who may only use it to provide us with that service. Beyond that it is not passed on to third parties unless required by law.

Google (Analytics, Ads) and Meta (Pixel, WhatsApp) also act as processors or joint controllers depending on the case, under their own privacy policies.

International transfers

Some of these providers may process data outside the European Economic Area. In those cases the transfer relies on the standard contractual clauses approved by the European Commission or on a valid adequacy decision.

Retention

Data is kept for 12 months from your enquiry and, where applicable, for the period legally required for accounting and tax records. If you have agreed to receive offers, until you withdraw that consent.

Your rights

You have the right to access, rectify, erase, restrict or object to the processing, and to the portability of your data. Also to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

Send your request to santalcafe.es@gmail.com stating which right you wish to exercise. We reply within one month. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

This site and our contact channels are aimed at people over 14. We do not knowingly collect data from anyone below that age without the consent of their legal guardian.

Changes to this policy

We may update this policy if our services, our providers or the applicable law change. The version in force is always the one published at this address, with its update date at the foot.

Last updated: 18 September 2026