Privacy & cookies

Last updated: 10 November 2026. Wording version: consent-v2.

1. Introduction

Conuco - Venezuelan Kitchen (“Conuco”, “we”, “us”) runs the restaurant at 14 Brixton Road, London SW9 6BU, and our websites. We are responsible for the personal information you give us. This page explains what we collect when you book a table, order food from us online (including from your table or the bar at Cable Bar) or use our websites, why we collect it, who sees it, how long we keep it, and the choices you have.

If anything here is unclear, ask us: info@conuco.co.uk, or message or phone us on 07960 128050.

2. Information we collect

When you ask for a table: your first and last name, email address and phone number; the date, time and number of guests; and anything you choose to add, such as an occasion or a special request (for example an allergy). We also record when you made the request and whether we confirmed it.

If you message us (on WhatsApp or by email): your message and your contact details.

When you order Christmas food on our hallacas page: your name, email address and phone number; what you ordered, and the collection date and time you chose; whether you paid in full or paid a deposit, how much was paid and any balance still to pay; and a payment reference from Square so we can match the payment to your order (and refund it if you cancel). We use your email address to send your order confirmation and your phone number in case we need to reach you about your order. Like the details from a booking, your name, email address and phone number are also kept in our customer directory (see sections 3 and 5).

When you order at Cable Bar: if you scan a QR code at Cable Bar and order Conuco food on our ordering site (cable-order.conuco.co.uk), we collect your first name, your surname if you choose to give it, your phone number and email address; what you ordered; where to bring it (your table number or the bar); and a payment reference from Square so we can match the payment to your order and refund it if needed. If you tell us something was missing or wrong, we also keep which items you ticked and any refund we made. We use your email address to send your order updates and your phone number in case we need to reach you about your order. Like the details from a booking, your name, email address and phone number are also kept in our customer directory (see sections 3 and 5).

Your choice about Customer Match (see section 7): whether you opted in, when you chose, and the version of the wording you saw.

When you use our website: if you allow it, cookies and similar technologies (see section 6) tell us how the site is used and which of our ads led to a booking. If you reached us by clicking one of our Google ads and you allowed advertising cookies, we keep the ad’s click identifier together with your booking, so we can see which bookings came from our ads.

The only payments taken through our websites are for food orders: Christmas orders on our hallacas page and Cable Bar orders on our ordering site. You type your card details (or use Apple Pay or Google Pay) into a secure form provided by Square, and they go straight to Square. We never see or store your full card number.

3. How we use your information, and why

• To deal with your booking: to check availability, confirm or decline your request, email you about it, let you cancel or ask for a change, and contact you if something changes. (We need this to take the steps you ask for, and it is part of running our restaurant properly.)
• To take, prepare and hand over your order: to check what we can offer, take your payment, confirm your order, send you your confirmation, bring your food to your table or the bar at Cable Bar, contact you if something about it changes, and refund you if you cancel in time or if something is missing or wrong. (We need this to carry out the order you ask for.)
• To keep our business and accounting records: a record of each payment and sale. (Our legal duty to keep accounts.)
• To run the restaurant day to day: our front-of-house team sees the day’s bookings (name, time, number of guests and any requests) so they can prepare. They do not see your phone number or email. For Cable Bar orders, our kitchen sees your first name, the first letter of your surname, what you ordered and where to bring it. We bag each order with a ticket showing your first name and your table or the bar, so the right bag reaches the right customer; Cable Bar staff, who are not part of our team, carry the bag to you and can see that ticket. Neither our kitchen nor Cable Bar staff see your phone number or email. (Our legitimate interest in running the restaurant.)
• To understand our business: for example, counting how many guests come back, using the booking records we already hold. (Our legitimate interest in knowing how the restaurant is doing.)
• To show you relevant Conuco ads on Google, only if you opt in to Customer Match (when you book a table or place an order): we may share your name, email address and phone number with Google (see section 7). (Your consent. You can withdraw it at any time.)
• To measure and improve our website and ads, only if you allow analytics or advertising cookies. (Your consent.)
• To keep our systems secure and to meet our legal duties.

We never use your booking or order details to send you marketing emails, calls or text messages. We only contact you about your own reservation or your own order. The name, email address and phone number from an order are kept in our customer directory in the same way as those from a booking, so we can find you if we need to contact you; they are used for Customer Match only if you opted in. We do not sell your information, and we do not make decisions about you by computer alone.

4. Who we share it with

We share information only with people and companies that help us run bookings, and only what they need:

• Hetzner runs the server in Germany that holds our booking system.
• Netlify hosts this website and receives a copy of each booking form.
• Square takes your card payment for hallacas orders and Cable Bar orders and sends refunds. For hallacas orders it receives your card details, the amount, and your name, email address and phone number. For Cable Bar orders it receives your card details, the amount, your first name, the first letter of your surname and your table or bar location; we do not send it your phone number or email. Square is also our payment provider in the restaurant and has its own privacy policy.
• Google Workspace provides the email we use to write to you about your booking or order and receive your replies. Order emails for Cable Bar orders are sent from a separate Conuco mailbox.
• Telegram sends the owner an alert when a booking request or an order arrives, or when a customer has started a refund request for a Cable Bar order. For a booking it contains your first name and the first letter of your surname, the date, time, number of guests and any note you added. For an order it contains your first name and the first letter of your surname, the number of items and the collection time. The refund alert says only that a request is waiting; it contains no name, order reference, amount, phone number or email, and the details are only in our dashboard. No alert ever contains your phone number or email.
• WhatsApp (Meta), if you message us there.
• Google, for analytics and advertising, only for the choices you made in Cookie settings. Only if you opted in to Customer Match, your name, email address and phone number as well.
• Our team: only the owner can see contact details (phone numbers and email addresses). Our kitchen sees the first name, first letter of surname, items and location of Cable Bar orders.
• Cable Bar staff carry some Cable Bar orders to you. They see the ticket on the bag: your first name and your table or the bar. They are not part of our team, and they do not see your phone number or email.

We may also share information when the law requires it.

Some of these companies, such as Google, Netlify and Square, are based outside the UK, mainly in the United States. They handle your information under their own agreements and the legal safeguards the UK allows for sending information abroad.

5. How long we keep it

• Booking details (name, email, phone, special requests) are erased 18 months after the booking date. After that we keep only an anonymous record (date, time, number of guests and outcome) that no longer identifies you.
• A hallacas order record (including the name, email and phone on it, and what you ordered) is erased 3 months after your collection date. Your name, email address and phone number also stay in our customer directory for longer (see the directory point).
• A Cable Bar order record (including your name, phone, email, what you ordered, where it went and any missing-or-wrong claim) is erased 18 months after the order date. We keep it so we can deal with any query or refund claim about the order, in line with how long we keep booking details. Your name, email address and phone number also stay in our customer directory (see the directory point).
• Payment and sales records (the amount, date and Square payment reference, without your contact details) are kept for 6 years, because we must keep our accounts. Square keeps its own records under its own policy.
• Anonymous sales totals (for example how many of each item we sold on each day) do not identify anyone and are kept indefinitely, so we can plan future years.
• Our customer directory: if you asked for a table or placed an order, your entry is removed 18 months after the date of your latest booking, the collection date of your latest hallacas order or the date of your latest Cable Bar order. Guests carried over from our previous booking system were added on 29 October 2026 and are removed 18 months after that, unless they book again.
• Your Customer Match choice is kept for as long as your directory entry, or until you withdraw it.
• Backups: encrypted copies of our booking database are kept for up to 14 days on our server and up to 30 days in our Google Drive, and then deleted. Details you ask us to erase can remain in a backup until it expires.
• Other copies: the copy of each booking form held by Netlify, notification and confirmation emails in our mailbox, and the records from our previous booking system (Google Sheets and Calendar) are deleted after 18 months, and we check this every three months.
• WhatsApp messages: conversations about bookings are kept for as long as we need them and we clear out old ones at least once a year.
• Cookies: see the table in section 6.

6. Cookies and similar technologies

Cookies are small files a website stores on your device. We use only the ones you allow. Open Cookie settings in the footer of any page to change your choice at any time. If you choose Reject all, we keep only the cookie that remembers your choice, and you can still book a table.

The Cable Bar ordering site uses the same Cookie settings and the same choice; its footer has a link to this page and to Cookie settings.

Our pages also load fonts and our tag management script from Google, which means Google receives your IP address to deliver them; this does not set a cookie.

7. Customer Match explained

What it is. If you opt in, we may give Google a list that includes your name, email address and phone number, so Google can match you to a Google account and show Conuco ads to you when you are signed in to Google.

Who is included. Only guests (people who booked a table or placed an order) who opted in, by choosing Accept all or by switching on Customer Match in Cookie preferences. Everyone else is never included.

What we do not do. We do not use your booking or order details to email, phone or text you except about your own reservation or order, and we do not sell your details.

What Google may do with the list. Google may also use the list to help find other people who may be interested in Conuco. You can control the ads Google shows you in your Google account’s ad settings.

How to withdraw. Switch Customer Match off in Cookie settings, or message us on 07960 128050 or at info@conuco.co.uk and we will remove you. Cookie settings only reach our records the next time you book, so if you want to be removed straight away, message us. We refresh the list we give Google at least every three months, and anyone who has withdrawn is left out of every list from then on.

8. Your rights

You can ask us:

• for a copy of the information we hold about you;
• to correct anything that is wrong;
• to erase your details (if you have an upcoming booking we will ask you to cancel it first);
• to restrict how we use it, or to object to a use based on our legitimate interests; and
• to stop using your details for Customer Match, at any time.

Ask us at info@conuco.co.uk or on 07960 128050. We aim to reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put things right first.

9. Keeping your information safe

Booking and order details are held on our own server in Germany. Only the owner can see guests’ phone numbers and email addresses, the owner’s sign-in needs a second step, and our backups are encrypted. Card details never reach our server: they are handled by Square.

10. Changes and contact

We will update this page when something changes and show the date at the top.

Conuco - Venezuelan Kitchen, 14 Brixton Road, London SW9 6BU
Email: info@conuco.co.uk · WhatsApp and phone: 07960 128050