Last updated: 21 October 2026.
This policy explains what personal information Spices and Stone collects through this website, why, and what your rights are.
Who we are
The controller of your information is Spices and Stone, Thomas St, Knockthomas, Castlebar, Co. Mayo, F23 DC86, Ireland (registered business name of Aksa Wilson, Mahesh Viswambaran and Vijitha Venugopal). Phone: +353 89 441 7414. Email: [restaurant email to be confirmed].
What we collect
- Table bookings: your name, email address, the date, time and number of guests.
- Orders (when online ordering is switched on): your name, phone number or email, delivery address if you choose delivery, and what you ordered.
- Payments: card payments are processed by Stripe. We do not see or store your full card number. We receive confirmation that a payment was made.
- Messages: anything you send us by phone or email.
- Technical data: like most websites, our server records your IP address, browser type and the pages requested, for security and to keep the site working.
Cookies and similar technology
This website does not use advertising or analytics cookies. [Restaurant to confirm before adding any analytics or marketing tools.] The basket on the menu page saves your choices in your own browser so that it works across pages. That information stays on your device until you order. The map on our Contact and Home pages is provided by Google, which may receive your IP address and set its own cookies when the map loads.
Why we use your information
- To take and confirm bookings, prepare and deliver orders, and take payment (to carry out our contract with you).
- To keep accounting, tax and food-safety records (because the law requires it).
- To keep our website secure and working (our legitimate interest).
- We do not send marketing emails unless you ask us to, and we do not sell your information.
Who we share it with
- Stripe, to process payments.
- Provixon, which hosts and looks after this website for us, and only handles your data for that purpose.
- Delivery partners, if you order through a delivery app. They have their own privacy policies.
- Authorities such as Revenue, or the courts, if the law requires us to.
Where your information is stored
The website is hosted on a server in the European Union. Some providers, such as Stripe and Google, may process information outside the European Economic Area. Where they do, they must use approved safeguards for the transfer.
How long we keep it
- Booking requests: about 12 months.
- Order and payment records: 6 years, because Irish tax law requires us to keep business records.
- Website backups: up to 14 days after they are made.
- Server logs: for a short period, then deleted.
Your rights
Under data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, and send it to you in a usable format. To use any of these rights, contact us using the details above. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Data Protection Commission in Ireland at www.dataprotection.ie.
Children
This website is not aimed at children under 16.
Changes to this policy
If we change this policy, we will update this page and the date at the top.