Privacy Policy

This page is a draft template prepared from the website's known data flows. Before publishing, the restaurant owners (Mixalis & Vangjel — the Little NOE Team) should review it with a Greek-qualified lawyer to confirm it accurately reflects their actual data practices and matches the requirements of EU Regulation 2016/679 (GDPR) and Greek Law 4624/2019.

1. Who we are

Bell Kitchen, trading as COOKaki, is a family-run restaurant at Petméza 5, Koukáki, Athens 11742, Greece. We are the data controller for personal data collected through this website. You can contact us at info@littlenoe.com, by phone on +30 21 0921 9818, or by WhatsApp on +30 698 237 3505.

2. What we collect and why

We collect personal data only when you give it to us through one of our forms. We never collect data passively beyond essential website operation.

Reservation form

• What: your name, phone number, date and time of booking, party size, optionally your email address and notes (allergies, occasion, seating preferences).
• Why: to receive your booking and contact you if we need to confirm, adjust, or follow up.
• Lawful basis (GDPR Article 6): performance of a contract — handling your reservation request.
• Retention: until 12 months after the booking date, then deleted.

Events & catering inquiry form

• What: your name, contact details, event type, preferred date, guest count, venue choice, and any notes you provide (allergies, dietary needs, occasion).
• Why: to scope your event, send you a quote, and coordinate the booking.
• Lawful basis: performance of a contract / pre-contractual measures.
• Retention: 24 months for accepted bookings (for follow-up and reference); 6 months for declined or unanswered inquiries.

Contact form

• What: your name, email or phone, and message content.
• Why: to answer your question.
• Lawful basis: legitimate interest in responding to customer enquiries.
• Retention: 12 months from last contact.

Pantry / product orders via WhatsApp

• What: your WhatsApp profile name and number, plus what you wrote in the conversation (typically: the product you want, delivery address if shipping).
• Why: to fulfil your order.
• Lawful basis: performance of a contract.
• Retention: 7 years for invoice-related correspondence (Greek tax law); other chat content as long as is reasonably needed for support.

3. How your data reaches us

When you submit a form on this website, the form data is composed into a WhatsApp message that opens in your browser. You then confirm by tapping Send in WhatsApp. The message is delivered to our WhatsApp business number using WhatsApp's end-to-end encrypted transport. We do not store form data on this website's server — we receive it only as a WhatsApp message.

Important to note: the form data appears briefly in your browser's URL bar before WhatsApp opens. On shared or public devices, this means anyone with momentary screen access could see what you submitted. We recommend using your personal device for reservations.

4. Who we share your data with

We do not sell your personal data to anyone. We share it only with the service providers we need to operate:

• WhatsApp (Meta Platforms Ireland Ltd, EU): all form submissions reach us as WhatsApp messages. Meta processes the data under its own privacy policy.
• Wolt and efood (delivery platforms): if you order through their apps, they process your order details. We receive only what's needed to prepare and hand off your food.
• Google (Maps, Fonts): our pages load Google Fonts and embed Google Maps. Google may receive your IP address and basic browser information.
• Our hosting provider: processes basic web server logs (IP address, request time, page requested) for security and analytics. These logs are retained no longer than 30 days.

5. Cookies and similar technologies

This website does not set any tracking cookies or analytics cookies. The only client-side storage we use is for remembering whether you've dismissed the mobile menu — purely functional and not used for tracking. Third-party embedded content (Google Maps) may set its own cookies; please consult Google's privacy policy if you visit the map.

6. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify incorrect or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict our processing of your data.
• Object to processing based on legitimate interest.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time, where consent is the lawful basis.
• Lodge a complaint with the Hellenic Data Protection Authority (HDPA) — www.dpa.gr.

To exercise any of these rights, email us at info@littlenoe.com. We respond within 30 days.

7. International transfers

Most of our data processing happens within the European Union. Some service providers (Google, WhatsApp) may transfer data outside the EU under standard contractual clauses or adequacy decisions approved by the European Commission.

8. Children

Our website is intended for adults. We do not knowingly collect personal data from children under 16. If you believe we have, please contact us and we will delete it immediately.

9. Security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption in transit, restricted access to the WhatsApp account that receives form submissions, and not retaining data longer than necessary. No system is perfectly secure; if a breach occurs, we will notify affected users and the Hellenic Data Protection Authority within 72 hours where required.

10. Changes to this policy

We may update this policy as our practices evolve or as required by law. The "Last updated" date at the top of the page shows when the current version took effect. Material changes will be highlighted on the homepage.

11. Contact

Questions about this policy or your data:
Email: info@littlenoe.com
WhatsApp: +30 698 237 3505
Post: Bell Kitchen / COOKaki, Petméza 5, Koukáki, Athens 11742, Greece