Privacy

The controller of your personal data is the business operating ZAKŪYA, Marsaskala Waterfront, MSK 1204 Marsaskala, Malta. For anything about your data, write to privacy@zakuya.com.mt.

Only what you type into one of our two forms, and only when you press send:

• Table reservation: your name, email address, phone number if you give one, the date, time and party size you request, the occasion, and any note you add.
• Private party enquiry: your name, email address, phone number if you give one, the type of event, your preferred date, the number of guests, and any message.

If you mention an allergy or dietary need in a note, that is health information. We use it only to prepare your visit, and only because you chose to tell us. Please leave out anything we do not need.

We do not take payment on this website. We use no analytics, no advertising or tracking tools, and nothing on the site loads from a third party while you browse.

We use your details only to receive, confirm and manage your booking and to contact you about it. Under the GDPR our basis is taking steps at your request before providing a service (Article 6(1)(b)). For an allergy or dietary need you choose to share, it is your explicit consent (Article 9(2)(a)), which you can withdraw at any time by telling us. We do not use your details for marketing, and we make no automated decisions or profiles about you.

You do not have to give us your details, but without a name and an email address we cannot handle a booking request.

This site and its booking database run on Google Cloud in the European Union (Belgium). Each new booking is also emailed to our own booking inbox through Google Workspace so our team can act on it. Google processes this data on our behalf under its data-processing terms, which include the EU Standard Contractual Clauses for any transfer outside the European Economic Area. Like any web host, Google Cloud keeps short-lived technical logs of requests to the site (including IP addresses) for security and reliability.

We do not sell, rent or share your details with anyone else.

We keep booking details for 12 months after the date of the booking (for an enquiry without a fixed date, 12 months after you sent it), so we can handle follow-ups and keep basic business records. After that they are deleted automatically. Technical request logs are kept for about 30 days. Ask us and we will delete your details sooner, unless we are legally required to keep them.

You can ask us to see the data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive a copy in a portable format. Write to privacy@zakuya.com.mt; we reply within one month.

If you are unhappy with how we handle your data, you can complain to Malta's data-protection authority, the Information and Data Protection Commissioner (idpc.org.mt).

We may update this notice as the business grows. The date at the top shows the current version. For what this site stores on your device (very little), see our Cookies Policy.