Privacy & cookies
Last updated 13 November 2026
Who we are
This website is run by:
We are responsible (the “controller”) for the personal data described on this page. To ask anything about it, contact us by phone.
What this website collects
Our menu website has no accounts, sign-up forms, newsletter, analytics or advertising trackers. Here is everything that happens with your data when you use it:
- Technical logs. The site is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes your IP address, browser type, the page you asked for and the time, and keeps this in short-lived logs. We rely on our legitimate interest in running a working, secure website.
- Fonts and pictures are served from our own site, so opening the menu does not send anything to Google or other companies.
- Google Maps, only if you tap “Show map”. The map is then loaded from Google, which receives your IP address and may set cookies. This happens only because you chose to load it; if you don’t tap, nothing is sent. Google’s privacy policy applies to the map.
- Links to other sites (Instagram, Google reviews, Tripadvisor, GibYellow, Google Maps) only open those sites when you click them. Their own privacy policies apply there.
When you order
Orders are taken by phone. We use your name, phone number and order details only to prepare your order and contact you about it, which we need to do to serve you. We don’t use them for marketing and we don’t keep them longer than we need to for the order.
If you message us on Instagram, Instagram (Meta) handles that conversation under its own privacy policy.
Cookies
We don’t use cookies for analytics or advertising, so there is no cookie banner. This is the complete list:
| Cookie | Who sets it, and why | When |
|---|---|---|
| None | Once the site is public, our menu pages set no cookies at all. | Visiting the menu |
| p08_preview | Us. Remembers that you entered the preview password, so the “Work in progress” page doesn’t ask again for 30 days. Strictly necessary. It disappears when the site goes public. | Only while the site is in preview |
| CF_Authorization | Cloudflare Access, to keep our staff logged in to the menu editor. Strictly necessary. | Staff admin area only |
| Google cookies | Google, for the embedded map. | Only after you tap “Show map” |
Where your data goes
Cloudflare (hosting) and Google (only if you load the map) may process data outside Gibraltar. They do so under their own data protection terms and safeguards such as standard contractual clauses.
Your rights
Under the Gibraltar GDPR and the Data Protection Act 2004 you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it, delete it, or limit how we use it;
- stop using it, if we rely on our legitimate interests.
Just contact us. If you are unhappy with how we handle your data, you can complain to the Information Commissioner at the Gibraltar Regulatory Authority.
Changes
If we change how the website handles data, we’ll update this page and the date at the top.