Privacy Policy

Matthew Ellis Catering is the data controller for the personal data described in this notice. Our registered place of business is Bawnogue Rd, Clondalkin, Dublin, D22 P6E8, Ireland. Questions about privacy should be sent to mattelliscatering@gmail.com or by telephone on +353 089 239 2554.

• Enquiry details you submit: name, company, email address, telephone number, event type, date, guest numbers, location and any message you write.
• Client and billing information required to deliver an event and issue invoices, including contact names and payment references.
• Dietary and allergen information you choose to share with us for an event. Where this reveals health data, we process it only with your explicit consent and only for the event concerned.
• Basic technical data generated when you visit this website, such as IP address and browser type, used for security and to keep the site running.

• To respond to enquiries and prepare proposals — steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).
• To deliver catering services and manage invoicing — performance of a contract (Art. 6(1)(b) GDPR).
• To keep accounting and tax records — compliance with a legal obligation (Art. 6(1)(c) GDPR).
• To secure our website and improve our service — our legitimate interests (Art. 6(1)(f) GDPR).
• To send occasional updates where you have subscribed — consent (Art. 6(1)(a) GDPR), withdrawable at any time.
• Allergen and dietary requirements — explicit consent (Art. 9(2)(a) GDPR).

We share personal data only with processors who help us operate: our website and database hosting provider, our email provider, and our accountant. Each acts under a written data processing agreement and may use the data only on our instructions. We also disclose data where we are required to do so by law. We do not sell personal data, and we do not use it for automated decision-making or profiling.

Our data is held within the European Economic Area wherever possible. Where a provider processes data outside the EEA, the transfer is covered by an adequacy decision of the European Commission or by the European Commission's Standard Contractual Clauses together with any additional safeguards required.

Enquiries that do not become bookings are deleted within twenty-four months. Client and event records, including invoices, are retained for seven years to meet Irish accounting and tax obligations. Dietary and allergen information is deleted once the event has taken place and any related queries are closed. Newsletter details are kept until you unsubscribe.

This website uses only cookies and local storage that are strictly necessary to operate the site and to keep an administrator signed in. We do not use advertising or third-party tracking cookies. Strictly necessary cookies do not require consent under the ePrivacy Directive as implemented in Ireland.

Under the GDPR you have the right to request access to your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting processing carried out beforehand.

To exercise any right, write to mattelliscatering@gmail.com. We respond within one month. If you are not satisfied, you may lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or with the supervisory authority in your country of residence.

We apply appropriate technical and organisational measures, including access control, encryption in transit and restricted administrative accounts. This notice may be updated from time to time; the date at the top of this page reflects the current version.