Privacy Policy

Business name: Kamasutra Indian Bar & Restaurant
Address: Ogrodowa 4/U3, 15-011 Białystok, Poland
Contact email: support@kamasutrarestaurant.pl
Phone: +48 884 835 319

As the data controller, we determine the purposes and means of processing your personal data.

We collect the following categories of personal data:

• Account data: name, email address, hashed password
• Order data: delivery address, postal code, phone number, items ordered, payment method, order status
• Reservation data: first and last name, email, date, time, number of guests, special requests
• Contact form data: name, email, phone (optional), message content
• Technical data: IP address, browser type, pages visited (via server logs only — no analytics cookies)

We do not collect or store full payment card details. Card payments are processed securely by Stripe (see Section 5).

We process your personal data for the following purposes and legal bases:

• Order fulfilment (contract performance) — to process and deliver your order, send order confirmation emails
• Reservation management (contract performance) — to confirm and manage your table booking
• Account management (contract performance) — to maintain your account, enable order history and profile settings
• Customer support (legitimate interest) — to respond to enquiries submitted via the contact form
• Security and fraud prevention (legitimate interest) — to protect against misuse of our services
• Legal obligations (legal obligation) — to comply with applicable law, including tax and accounting requirements

We do not use your data for automated decision-making or profiling.

We retain your personal data only as long as necessary for the purposes described above:

• Account data: until account deletion is requested
• Order and reservation data: 5 years (required by Polish accounting law)
• Contact form data: 12 months from submission
• Server logs: 30 days

To request deletion of your account and data, email us at support@kamasutrarestaurant.pl.

We share your data with trusted third parties solely to operate our service:

• Stripe, Inc. — payment processing (card, BLIK). Stripe processes payment data under its own privacy policy. We receive only a payment confirmation and masked card details.
• Amazon Web Services (SES) — transactional email delivery (order confirmations, password reset codes, reservation confirmations).
• Cloudinary — image hosting for menu and gallery photos.
• Amazon Web Services (RDS) — encrypted database hosting within the EU (eu-central-1, Frankfurt).

We do not sell your personal data to any third party.

Our website uses only strictly necessary cookies required for authentication (session token stored in an httpOnly cookie managed by NextAuth.js). We do not use advertising, analytics, or tracking cookies. No third-party cookies are set by our website.

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data (subject to legal retention requirements)
• Right to restriction — limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@kamasutrarestaurant.pl. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO) at uodo.gov.pl.

We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption for all data in transit, encrypted database storage, hashed passwords (bcrypt), and access controls limiting who can view personal data.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our website after updates constitutes acceptance of the revised policy.

For any privacy-related questions or to exercise your rights, please contact:
Email: support@kamasutrarestaurant.pl
Phone: +48 884 835 319
Address: Ogrodowa 4/U3, 15-011 Białystok, Poland