PRIVACY POLICY

Last updated: 17 August 2026
1. Who we are
El Cafetal is the trading name of Coronel ECU Ltd which is the data controller responsible for the personal information collected through this website and our table reservation system.
Contact details:
El Cafetal
13–15 St Georges Street
Norwich
NR3 1AB
United Kingdom
Email:Â elcafetalnorwich@gmail.com
​
2. Information we collect
When you use our website or make a table reservation, we may collect information such as:
-
your name;
-
email address;
-
telephone number;
-
reservation date, time and party size;
-
information you choose to provide about allergies or dietary requirements;
-
communications or requests you send to us; and
-
technical information about how you use our website, including information collected through cookies and website analytics.
Your name, contact details and booking information are required where necessary to process and manage a reservation. If you do not provide the required information, we may not be able to complete your booking.
Providing allergy, dietary or health information is optional.
​
3. How we use your information
We use your personal information to:
-
manage and confirm table reservations;
-
contact you about your booking, including changes, reminders or cancellations;
-
respond to enquiries and provide customer service;
-
operate, maintain and improve our website;
-
protect our website and business from misuse or security issues; and
-
comply with legal or regulatory obligations.
We do not sell your personal information.
​
4. Our lawful basis for using your information
We process personal information only where we have a lawful basis to do so.
For information required to make and manage a reservation, we generally process your information because it is necessary to take steps at your request and to provide the service you have requested.
We may rely on our legitimate interests where necessary to operate, protect and improve El Cafetal and our website, provided those interests do not override your rights and freedoms.
Where we are required to process information to comply with a legal obligation, we rely on that legal obligation.
Where consent is required, such as for certain cookies, marketing communications or the processing of allergy-related health information, we rely on your consent. You may withdraw your consent at any time.
​
5. Allergies and dietary information
Providing information about allergies, dietary requirements or health conditions through our reservation form is optional.
If you choose to provide allergy or health information, we use it only to help manage your booking and accommodate your dietary requirements.
Because information about allergies or health conditions may be considered special category personal data, we ask for your explicit consent before processing this information.
You may withdraw your consent at any time by contacting us. Withdrawal of consent does not affect any processing carried out before consent was withdrawn.
​
6. Who we share information with
We may share personal information with trusted service providers where necessary to operate El Cafetal and provide our services.
This may include:
-
Wix, which provides our website and table reservation system;
-
IT, website and technology service providers;
-
professional advisers where necessary; and
-
regulators, public authorities or law enforcement where required by law.
We only share personal information where necessary and appropriate
Â
7. International data transfers
Some of our service providers, including Wix, may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards are used where required by applicable data protection law. These may include transfers to countries recognised as providing an adequate level of protection or approved contractual transfer mechanisms.
Further information about Wix's international data transfers and safeguards is available in Wix's Privacy Policy and Data Processing Agreement.
You may also contact us if you would like further information about the safeguards relevant to your personal information.
​
8. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
This may include the time necessary to:
-
manage your reservation;
-
respond to enquiries or complaints;
-
maintain appropriate business records;
-
resolve disputes; and
-
comply with legal, accounting or regulatory obligations.
Allergy or health information is kept only for as long as reasonably necessary to manage your booking and any related food-safety matter, complaint or incident.
When information is no longer required, we delete it, anonymise it or otherwise dispose of it securely, where appropriate.
​
9. Cookies and website analytics
Our website may use cookies and similar technologies to operate correctly and, where enabled, to understand how visitors use our website.
Some cookies are necessary for the website to function. Where consent is legally required for non-essential cookies, we will ask for your consent before using them.
You can manage your cookie choices through the cookie settings available on our website.
​
10. Your rights
Depending on the circumstances, you may have rights in relation to your personal information, including the right to:
-
request access to your personal information;
-
ask us to correct inaccurate information;
-
ask us to delete your information;
-
request restriction of certain processing;
-
object to certain uses of your information; and
-
withdraw consent where we rely on consent.
-
request the transfer of your information where applicable;
Your right to object: Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.
You can contact us at elcafetalnorwich@gmail.com to exercise your rights. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are concerned about how your information has been handled.Â
​
11. Automated decision-making
We do not use your personal information to make solely automated decisions that produce legal or similarly significant effects on you.
​
12. Changes to this Privacy Policy
We may update this Privacy Policy when our website, services or use of personal information changes. The latest version will always be published on this page.