Bombay Bistro
Avenida de Europa 10, Torrequebrada, Spain
Last Updated: October 22, 2025
1. Introduction
At Bombay Bistro, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Spanish data protection law (Ley Orgánica de Protección de Datos y Garantía de los Derechos Digitales – LOPDGDD).
Data Controller:
Bombay Bistro
Torrequebrada, Spain
Email: info@bistrobombay.com
2. Information We Collect
We may collect the following personal information when you interact with our restaurant:
- Name
- Email address
- Phone number
- Delivery address (for delivery orders)
- Dietary preferences and special requests (when provided voluntarily)
3. How We Collect Your Information
We collect your personal data through the following means:
- Reservation forms on our website or by phone
- Contact forms for inquiries
- Newsletter subscription forms (opt-in only)
- In-person at our restaurant
- Third-party ordering platforms (Just Eat, Uber Eats, Glovo)
Please note that when you place an order through third-party platforms (Just Eat, Uber Eats, or Glovo), those platforms have their own privacy policies governing the collection and use of your data. We recommend reviewing their respective privacy policies.
4. Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent (e.g., subscribing to our newsletter)
- Contract performance: To process your reservations and orders
- Legitimate interest: To improve our services and communicate with you about your inquiries
5. How We Use Your Information
We use your personal information for the following purposes:
- Processing reservations and orders
- Responding to your inquiries and customer service requests
- Sending promotional emails and newsletters (only if you have opted in)
- Improving our services and customer experience
- Managing dietary preferences and special requests
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
6. Data Sharing and Third Parties
We may share your personal data with the following third parties only as necessary for our business operations:
- Online ordering platforms: Just Eat, Uber Eats, and Glovo (for processing delivery orders and payments)
- Payment processors: Used by third-party ordering platforms
- Email marketing services: For sending newsletters and promotional content (only with your consent)
- Service providers: Who assist with day-to-day restaurant operations
All third parties are required to maintain the confidentiality and security of your personal information and may only use it for the specific purposes we authorize.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.
Types of Cookies We Use:
- Essential cookies: Necessary for the website to function properly
- Analytics cookies: Google Analytics – to understand how visitors use our website
- Marketing cookies: Facebook Pixel – to deliver relevant advertisements
Your Cookie Choices:
When you first visit our website, you will be asked to consent to the use of non-essential cookies. You can choose to:
- Accept all cookies
- Accept only essential cookies
- Customize your cookie preferences
You can also manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Reservation records: Stored for 1 year
- Marketing contacts: Retained until you unsubscribe from our mailing list
- Inquiries and correspondence: Retained for a reasonable period to address your requests
After the retention period, your data will be securely deleted or anonymized.
9. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure («right to be forgotten»): Request deletion of your personal data
- Right to restriction of processing: Request that we limit how we use your data
- Right to data portability: Request your data in a structured, commonly used format
- Right to object: Object to our processing of your data for marketing purposes
- Right to withdraw consent: Withdraw your consent at any time (e.g., unsubscribe from newsletters)
To exercise any of these rights, please contact us at info@bistrobombay.com.
We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
10. Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, loss, destruction, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. International Data Transfers
Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
12. Children’s Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new «Last Updated» date.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Bombay Bistro
Email: info@bistrobombay.com
Location: Avenida de Europa, 10, 29630 Benalmádena, Málaga, Spain
15. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD):
AEPD
Website: www.aepd.es
Phone: +34 901 100 099
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
By using our website and services, you acknowledge that you have read and understood this Privacy Policy.