Hallacas.es Privacy Policy

1. Who handles your data

Hallacas.es, located at Avenida de manoteras 10, Madrid, Madrid, 28050, is responsible for the personal data you give us when you request or book a catering service through this page. You can reach us at .

This page runs on the Modtly platform (Modtly LLC), which processes data on our behalf as a technology provider. Its privacy policy is at https://modtly.com/privacy-policy.

2. What we collect

• Contact details: name, email and phone number.
• Event details: date, time, number of guests, delivery address or pickup location, the menu and dishes you choose, extra services, any allergies or dietary restrictions you tell us about, and the messages we exchange about your event.
• Payment details: payments are processed by Square. We never see or store your full card number; we only receive a reference, the last four digits and the card brand.
• Technical data: IP address, device and browser type, and pages visited, through cookies and similar technologies.

3. How we use it

• To handle your request, booking, payments, changes and cancellations.
• To prepare and deliver the service, including any allergies or restrictions you tell us about.
• To send service communications: confirmations, reminders, proposals, receipts and payment notices.
• To meet legal, accounting and tax obligations.
• To prevent fraud and keep the platform secure.

We will not use your email for marketing unless you give us express consent, which you can withdraw at any time.

4. Legal basis

We process your data to perform the contract you enter into when you book, to comply with legal obligations, and for our legitimate interest in running the business safely. Information about allergies or dietary restrictions is provided voluntarily by you and used only to prepare your service.

5. Who we share it with

• Modtly LLC, which operates this page and the booking system.
• Square, which processes payments and stores your card securely.
• Email and hosting providers used by Modtly and Hallacas.es.
• Authorities, when required by law.

We do not sell your personal data.

6. How long we keep it

We keep your event and payment data for as long as our relationship lasts and afterwards for as long as tax and accounting rules require. Requests that are never confirmed are deleted within a reasonable period.

7. Your rights

You can ask us to access, correct, delete, restrict or export your data by writing to . If you are in California, the European Union or the United Kingdom, you also have the rights granted by the CCPA, the GDPR or the UK GDPR, including the right to lodge a complaint with your data protection authority. We will respond within the time the law allows.

8. Cookies

We use cookies that are necessary for booking to work (for example, to remember your event while you complete the steps) and analytics cookies to understand how the page is used. You can block cookies in your browser; the necessary ones are required to book.

9. Children

This service is intended for people aged 18 or over. We do not knowingly collect data from children.

10. Changes

If we change this policy, we will publish the new version on this page with its update date.