Privacy notice How we look after your details.

Last updated: 12 November 2026

This notice explains what personal information Chez Maria collects through this website, why we collect it, and the choices you have. We follow the Data Protection Act, 2020 of Jamaica.

Who we are

This website is run by Chez Maria Ltd, operator of Chez Maria, The Rooftop, 24-28 Barbican Road, Kingston, Jamaica. We decide how your information is used, which makes us the data controller.

What we collect

• When you book a table: your name, phone or WhatsApp number, email address (if you give it), the date, time, number of guests and seating you choose, and anything you tell us about an occasion or a special request.
• Allergies and dietary needs: only if you choose to tell us. We use this information only to prepare your meal safely.
• Changes to your booking: if you confirm, change or cancel through the link we send you or by replying on WhatsApp, we record your answer.
• Booking history: if a booking is cancelled by the guest or the guest does not arrive (a no-show), we keep a short record of it with the date, the number of guests and the reason, if one is given.
• Takeaway orders (when online ordering opens): your name, phone number, email address (if you give it), the dishes ordered, the pickup time and your notes for the kitchen.

We do not use advertising or tracking cookies. Your takeaway basket is saved only in your own browser. Our team members' sign-in to the staff area uses a necessary sign-in cookie. Our hosting provider may keep basic technical logs, such as IP addresses, to protect the website from misuse.

Why we use it

• To receive, confirm and manage your reservation or order, including sending your confirmation and a reminder about an hour before your booking.
• To contact you about your booking or order, for example if we need to change the time.
• To prepare your food safely when you tell us about allergies.
• To manage our tables fairly. Our team is shown a guest's past cancellations and no-shows when that guest books again, and may ask the guest to confirm by phone.
• To keep business records and to meet our legal obligations.

We do not sell your information. We do not send you promotional messages unless you have agreed to receive them.

Who sees it

Only members of our team who need it, each with their own sign-in and access limited to their role. We also use trusted service providers who process information on our behalf to run this website:

• Cloudflare: hosting the website and storing booking information.
• Resend: sending booking emails.
• Meta (WhatsApp Business): sending booking messages by WhatsApp.
• Google Maps: the map on our Hours & Location page is loaded from Google.

Some of these providers store or process information outside Jamaica. We use them only as needed to provide the booking or order you asked for. We may also share information where the law requires it.

How long we keep it

We keep reservation and order details, including any record of cancellations or no-shows, for up to three years. After that, names and contact details are removed automatically. We keep only anonymous totals, such as the number of guests on a given day, for our own statistics.

Your rights

You may ask us:

• whether we hold information about you, and for a copy of it;
• to correct information that is wrong;
• to stop using your information, or to delete it, where we are not required to keep it;
• to stop using your information for any promotional messages.

We will reply within the time set by the Data Protection Act. If you are not satisfied with our answer, you may complain to the Office of the Information Commissioner of Jamaica.

Keeping it safe

The website uses encrypted connections (HTTPS). Our staff area is protected by individual passwords and roles, and access to guest information is limited to the team members who need it.

Contact us

We may update this notice from time to time. The date at the top shows when it last changed.