Last updated 4 September 2026
Who is responsible for your data
Absolute Catering LTD (registration number C52596, VAT number MT20372915), of 12, Lelluxa, Triq San Puliju, Mellieha MLH1132, Malta, is the data controller for the information described here.
For anything about your data, contact us at dborg@absolutecatering.com.mt or on +356 7713 0730.
What we collect
Your card details are entered on Global Payments’ own secure page. We never see or store them.
- Your name, email address and phone number.
- Your party details: date, time, package, how many children and adults, menus and add-ons.
- Anything you write in the allergies, special requests or add-on description boxes.
- Any image you upload, such as a photo of a cake you would like.
- Whether you asked to hear from us about offers and events.
- A one-way hash of your IP address, used only to stop automated abuse of the booking form. We cannot recover your IP address from it.
Why we use it, and our legal basis
- To take and run your booking, and to contact you about it, because we need to in order to perform our contract with you.
- To keep records of bookings and payments, because we have a legal obligation to keep accounting records.
- To protect the booking system from abuse, because we have a legitimate interest in it staying available to real customers.
- To send you marketing, but only if you asked us to. You can withdraw that at any time, and every email we send has an unsubscribe link.
Allergy information
Information about allergies is health data, which the law protects more strictly. We ask for it only so that we can prepare food safely, we use it for nothing else, and we share it only with the kitchen staff preparing your food.
You give us that information with your explicit consent by entering it. If you would rather not put it in the form, please tell us by phone instead.
Who else sees it
We do not sell your data, and we do not share it for anyone else’s marketing. We use these service providers to run the booking system, and each may process your data on our behalf:
- Supabase, for the database and file storage holding your booking.
- Vercel, for hosting the booking website.
- Global Payments, for card payment processing. They are a controller in their own right for payment data.
- Our email provider, for booking confirmations and for marketing if you opted in.
Where your data goes
Our providers may process data outside the European Economic Area. Where they do, that transfer is covered by an adequacy decision or by the European Commission’s standard contractual clauses.
How long we keep it
- Booking and payment records: seven years, to meet Maltese accounting and tax requirements.
- Allergy information and uploaded images: deleted within 12 months of your party.
- Marketing consent: until you withdraw it.
- Abuse-prevention hashes: 30 days.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to our using it, or ask for it in a portable format. Where we rely on your consent, you can withdraw it at any time.
Email dborg@absolutecatering.com.mt and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta, at www.idpc.org.mt.
Cookies
The booking site uses only what it needs to work, which means keeping your place in the form and keeping the booking secure. We do not use advertising or tracking cookies, so there is nothing here for you to consent to.