Menu
Locations
Customer Reviews

Privacy Policy

At Taco Kitchen we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, how we use it, and the choices you have, including when we communicate with you through WhatsApp using the WhatsApp Business API.

1. Who We Are

Taco Kitchen is a Mexican restaurant with locations across Bali. Our website is tacokitchen.com and you can reach us at hello@tacokitchen.com for any privacy-related questions or requests.

2. Information We Collect

Depending on how you interact with us, we may collect the following:

  • Contact information: your name, phone number (including WhatsApp number), and email address.
  • Order information: items ordered, delivery address, payment method, and order history.
  • Messaging content: messages exchanged with us through WhatsApp, email, our website contact forms, or social media.
  • Technical information: IP address, browser type, device type, and basic analytics about your visits to our website.

3. WhatsApp Business API and Meta Platforms

We use the WhatsApp Business API, provided by Meta Platforms, Inc., to communicate with our customers for customer service, order confirmations, delivery updates, and other transactional notifications. When you message us on WhatsApp or share your WhatsApp number with us, the following applies:

  • Your phone number and the content of your messages are processed by WhatsApp and Meta in accordance with the WhatsApp Business Messaging Policy and the WhatsApp Privacy Policy.
  • We only message you in response to a conversation you have initiated, to confirm an order you have placed, or where you have given us prior consent to receive promotional messages.
  • We do not use information obtained through WhatsApp for advertising to third parties, and we do not sell your data.
  • You can opt out at any time by replying STOP to any of our WhatsApp messages or by emailing hello@tacokitchen.com.

4. How We Use Your Information

  • To process, prepare, and deliver your orders.
  • To respond to inquiries, bookings, and customer service messages across WhatsApp, email, and other channels.
  • To send transactional notifications such as order confirmations and delivery status updates.
  • To send marketing or promotional messages, only where you have opted in.
  • To improve our products, website, and overall service quality.
  • To comply with legal obligations.

5. Legal Basis for Processing

We process your personal data on the basis of (a) performance of a contract with you, such as fulfilling an order, (b) your consent, for example opting in to promotional WhatsApp messages, (c) our legitimate interests in responding to customer inquiries and improving our service, and (d) compliance with applicable legal obligations.

6. How We Share Your Information

We do not sell your personal information. We share it only with:

  • Meta Platforms and WhatsApp, to enable messaging through the WhatsApp Business API.
  • Delivery partners, payment processors, and online ordering platforms, strictly as necessary to fulfil your order.
  • Service providers who help us operate our website, CRM, and analytics tools, under appropriate confidentiality obligations.
  • Authorities, when required to do so by law.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. WhatsApp conversation history is generally retained for up to 12 months, unless a longer retention period is required, after which it is deleted or anonymised.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data — see our Data Deletion page.
  • Withdraw your consent to marketing messages at any time.
  • Object to or restrict certain types of processing.
  • Request a copy of your data in a portable format.

To exercise any of these rights, email us at hello@tacokitchen.com.

9. Security

We take reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children

Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The ‘Last updated’ date at the bottom of this page indicates when it was last revised. We will communicate significant changes where appropriate.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@tacokitchen.com.

Last updated: April 2026