How we collect, use, and protect your personal data — and how we use cookies on this website.
Last updated: 23 May 2026
This policy explains how Mextapas (“we”, “us”, “our”) collects and uses your personal data when you visit mextapas.co.uk, contact us, book an event, or subscribe to our list. It also explains the cookies we use and your choices. We are committed to handling your data lawfully and transparently under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
Mextapas Ltd is the “data controller” responsible for your personal data.
We only collect data you give us, or that is generated automatically when you use the site:
We do not take payments on this website, and we do not knowingly collect data from anyone under 18. Alcohol-related content is intended for adults of legal drinking age.
| What we do | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Respond to enquiries and arrange bookings | To answer you and deliver the service you asked for | Legitimate interests / steps prior to a contract |
| Send our newsletter (recipes, dates, pairings) | To keep you informed, where you have asked us to | Consent |
| Measure and improve the website | To understand which pages help guests find us | Consent (analytics cookies) |
| Keep records and meet legal duties | Accounting, tax, and responding to lawful requests | Legal obligation / legitimate interests |
Where we rely on consent, you can withdraw it at any time — unsubscribe from any email, or clear analytics cookies (see section 6). Withdrawing consent does not affect processing carried out before withdrawal.
We never sell your data. We share it only with trusted service providers (“processors”) who act on our instructions:
Some of these providers are based outside the UK, including in the United States. Where your data is transferred internationally, it is protected by appropriate safeguards recognised under UK law — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision (for example, the UK Extension to the EU–US Data Privacy Framework).
A cookie is a small file stored on your device. When you first visit, we ask whether you accept analytics cookies. Strictly necessary cookies are always active because the site cannot work properly without them; all others are set only if you click “Accept”. You can change your mind at any time by clearing cookies in your browser, which will make the banner reappear.
| Cookie / item | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| mextapas-consent-v1 | Mextapas | Remembers your cookie choice | Strictly necessary | Until you clear it |
| _ga, _ga_<id> | Google Analytics | Distinguishes visitors and measures site usage | Analytics (consent) | Up to 2 years |
| __kla_id and related | Klaviyo | Recognises newsletter visitors and links sign-ups | Marketing | Up to 2 years |
You can manage or block cookies in your browser settings, and opt out of Google Analytics using Google’s browser opt-out add-on.
We keep personal data only as long as we need it. Enquiry and booking correspondence is retained for up to 24 months after our last contact; newsletter data until you unsubscribe; and records required for tax and accounting for the period set by law (currently six years). After that, we securely delete or anonymise it.
Under the UK GDPR you have the right to:
To exercise any of these, email contact@mextapas.co.uk. We will respond within one month.
We hope to resolve any concern directly, but you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Material changes will be reflected here before they take effect.
Questions about your data or this policy? Email contact@mextapas.co.uk and we will be happy to help.