Privacy Policy

1. Introduction

Capo Sushi respects the privacy of website visitors, customers, prospective customers, online ordering users, delivery customers, collection customers, enquiry submitters, newsletter subscribers, business partners, suppliers, contractors, service providers, representatives, and any individual who communicates with us through the website, by email, by telephone, through social media, through online ordering tools, or through any other available communication channel.

This Privacy Policy explains what personal data we may collect, how we may collect it, why we may process it, what lawful bases may apply, how long we may retain it, when we may share it, how we aim to protect it, and what rights individuals may have in relation to their personal data.

Because this website may include online food ordering functionality, users may provide personal information when browsing the menu, adding food items to a cart, placing an order, completing payment, requesting delivery, selecting collection, providing order notes, asking about allergens, contacting customer support, requesting a refund, using discount codes, subscribing to updates, or interacting with website features.

We aim to process personal data responsibly, lawfully, transparently, and only for legitimate business purposes connected to operating the website, processing orders, preparing and fulfilling food orders, arranging delivery or collection, providing customer service, complying with legal obligations, improving the customer experience, and protecting the website against misuse, fraud, unauthorised access, or security incidents.

2. Who We Are

For the purposes of this Privacy Policy, the website operator and primary privacy contact is:

Capo Sushi
Website: capo-sushi.com
Email: caposushilimassol@gmail.com

Website development and technical provider:

LOOP Digital Marketing LTD
Website: loopdigitalmarketing.com
Email: contact@loopdigitalmarketing.com

Where LOOP Digital Marketing LTD accesses website systems, plugin settings, hosting areas, ordering tools, checkout tools, menu display settings, ecommerce configurations, contact form configurations, backups, website logs, security tools, analytics settings, cookie tools, or technical settings for development, maintenance, troubleshooting, updates, optimisation, or security purposes, it may process limited personal data on behalf of Capo Sushi as a technical service provider. Such access is intended to support the technical operation of the website and does not make LOOP Digital Marketing LTD responsible for Capo Sushi’s food preparation, food safety, ingredient selection, menu information, allergen information, pricing, customer service, delivery arrangements, payment processing, order fulfilment, cancellations, refunds, consumer communications, restaurant operations, or commercial decisions.

3. Personal Data We May Collect

Depending on how you use the website, we may collect different categories of personal data.

We may collect identity information, including your name, surname, account username where customer accounts are enabled, billing name, delivery name, company name where applicable, and any other identifying details that you voluntarily provide.

We may collect contact information, including your email address, telephone number, billing address, delivery address, city, district, postal code, delivery instructions, preferred contact method, and any other contact details submitted through the website or provided during communication with Capo Sushi.

We may collect order information, including food items ordered, menu categories selected, quantities, options, modifiers, sauces, extras, order notes, allergy notes where voluntarily provided, delivery or collection choice, preferred time where available, order number, order date, order value, coupon codes used, payment status, delivery status, collection status, order history, refund records, customer service communications, and related online ordering information.

We may collect payment-related information, including payment method, payment confirmation, transaction reference, payment status, refund status, fraud review status, and limited payment details made available by payment providers. Capo Sushi does not intentionally store full credit card numbers, CVV codes, or complete payment credentials on its own website systems unless such processing is securely handled by an authorised payment provider in accordance with applicable payment security standards.

We may collect account information if customer accounts are enabled, including login details, saved addresses, order history, saved preferences, password reset activity, and account settings. Passwords should be stored in encrypted or hashed form where technically supported by the website platform.

We may collect customer support information, including messages, complaints, cancellation requests, refund requests, order questions, delivery issues, collection issues, photographs of incorrect or damaged food packaging where submitted, and any other information submitted during customer service communication.

We may collect food preference or allergy-related information where voluntarily provided, including ingredient preferences, dietary preferences, allergy notes, intolerance notes, vegetarian or vegan preferences, religious dietary preferences, or other food-related notes. Such information may be sensitive or highly personal. Customers should provide this information only where necessary for their order or enquiry. Capo Sushi cannot guarantee that customer notes submitted online will remove all risk of allergen exposure, cross-contact, or preparation error.

We may collect marketing preference information, including whether you consented to receive newsletters, promotional messages, menu updates, launch announcements, discount codes, restock or availability notifications where relevant, abandoned cart reminders, or similar marketing content.

We may collect technical information, including IP address, browser type, device type, operating system, visited pages, referral source, approximate location based on IP address, time and date of visit, cookie identifiers, cart activity, checkout activity, menu pages viewed, order steps completed, session data, interaction data, server logs, and security logs.

We may collect security information, including spam detection results, failed login attempts, failed checkout attempts, blocked IP addresses, firewall logs, suspicious activity records, malware scan results, fraud prevention signals, and technical events used to protect the website.

We may collect business-related information where relevant, including supplier details, partner information, contractor details, collaboration enquiries, franchise or partnership enquiries where applicable, professional adviser details, and other information submitted in relation to business communications.

We do not aim to collect unnecessary personal data. However, because the website operates on WordPress and may include WooCommerce or similar online ordering systems, third-party plugins, themes, scripts, and integrations, certain technical data may be collected automatically by hosting infrastructure, security tools, analytics tools, cookie tools, checkout tools, payment tools, delivery tools, marketing tools, form tools, or other systems required for website operation.

4. How We Collect Personal Data

We may collect personal data directly from you when you browse the website, view menus, create an account, complete checkout, place an order, submit a contact form, request menu information, request delivery, select collection, request a cancellation, request a refund, send an email, subscribe to updates, provide order feedback, upload photographs for customer support purposes, interact with our social media pages, or otherwise communicate with Capo Sushi.

We may collect technical data automatically when you visit the website. This may occur through cookies, server logs, analytics tools, security plugins, spam protection systems, online ordering tracking tools, cart tools, checkout tools, embedded content, browser signals, or similar technologies.

We may also receive personal data from third parties where lawful and relevant, such as payment processors, banks, delivery providers, ordering platforms, email providers, fraud prevention tools, analytics providers, marketing platforms, social media platforms, suppliers, business partners, or service providers.

5. Why We Use Personal Data

We may use personal data for the following purposes:

To operate, maintain, secure, and improve the website.

To display menus, manage menu categories, operate cart functionality, enable checkout, manage order options, and provide online food ordering services.

To process orders, confirm purchases, verify payment status, prepare food orders, arrange delivery or collection, issue receipts or invoices where applicable, manage refunds, and handle cancellations.

To communicate with customers about orders, payment status, delivery status, collection status, order preparation, item availability, substitution requests where applicable, customer notes, order issues, refunds, complaints, or customer service matters.

To manage customer accounts, saved addresses, order history, password resets, account preferences, and related account functionality where customer accounts are enabled.

To respond to enquiries submitted through the website, by email, through social media, by telephone, or through other communication channels.

To provide information about Capo Sushi, its menu, location, opening hours, food offerings, promotions, online ordering options, availability, website updates, and related content.

To detect, prevent, and investigate fraud, unauthorised transactions, suspicious checkout behaviour, abuse of promotions, misuse of discount codes, account compromise, spam, hacking attempts, bot activity, scraping, malware, and other security risks.

To improve website structure, user experience, page performance, checkout usability, menu presentation, food photography, content quality, search functionality, website navigation, and marketing effectiveness.

To comply with legal, regulatory, tax, accounting, consumer protection, ecommerce, food safety, administrative, anti-fraud, or record-keeping obligations where applicable.

To establish, exercise, or defend legal claims.

To send marketing communications, newsletters, menu updates, promotional offers, abandoned cart reminders, opening announcements, seasonal offers, and other updates where consent has been obtained or where otherwise permitted by law.

To manage cookie preferences, consent records, website security logs, technical logs, analytics information, and communication preferences.

6. Legal Bases for Processing

Where the General Data Protection Regulation or other applicable data protection laws apply, we rely on one or more lawful bases for processing personal data.

We may process personal data based on consent, for example when you voluntarily submit information through a form, accept optional cookies, subscribe to newsletters, agree to receive marketing communications, or provide food preference information for a specific purpose.

We may process personal data because it is necessary before entering into a contract or for the performance of a contract, for example when you place an online food order, create an account, request delivery, select collection, make payment, request a cancellation, request a refund, or contact us about an order.

We may process personal data because it is necessary for compliance with legal obligations, including tax, accounting, invoicing, consumer protection, food safety, regulatory, record-keeping, and ecommerce obligations where applicable.

We may process personal data based on legitimate interests, including responding to enquiries, managing customer communications, protecting the website, preventing fraud, improving services, maintaining business records, enforcing terms, managing orders, and operating the website efficiently.

We may process personal data where necessary to establish, exercise, or defend legal claims, including disputes relating to orders, payments, refunds, delivery, collection, food complaints, customer communications, or misuse of the website.

Where sensitive information is submitted voluntarily by a user, such as allergy information, dietary restrictions, religious dietary preferences, health-related food notes, or other special category data, we will only process it where a lawful basis applies and where processing is necessary, proportionate, and legally permitted. Users should avoid submitting unnecessary sensitive information through general website forms or customer service messages.

7. Online Food Orders and Checkout

When you place an order through the website, we process the personal data necessary to complete the order. This may include your name, billing details, delivery details, contact information, selected food items, quantities, order notes, allergy notes where voluntarily provided, payment status, delivery method, collection method, preferred time where available, and order history.

You are responsible for ensuring that all information submitted during checkout is accurate, complete, and current. Incorrect information may cause delivery delays, failed deliveries, cancelled orders, payment problems, refund delays, food preparation errors, or additional charges.

Automated order confirmation emails or messages may be sent after checkout. Such confirmation does not necessarily mean that the order has been finally accepted, prepared, or guaranteed for a specific time. Capo Sushi reserves the right to reject, cancel, limit, or modify orders where lawful and appropriate, including where menu items are unavailable, payment fails, pricing errors occur, fraud is suspected, information is incorrect, delivery is not possible, technical errors affect the transaction, the restaurant is closed, the kitchen is unable to fulfil the order, or legal restrictions apply.

8. Payment Processing

Payments may be processed by third-party payment providers. When you make a payment, you may be redirected to a secure payment environment or interact with payment fields embedded into the checkout.

Capo Sushi does not intentionally collect or store complete card numbers, CVV codes, or full payment credentials on its own systems. Payment providers may process payment data according to their own terms, privacy policies, and security standards.

Capo Sushi may receive limited payment-related information, including payment confirmation, transaction identifiers, payment method type, payment status, refund status, fraud status, and chargeback information where relevant. This information may be used to process orders, issue refunds, prevent fraud, resolve disputes, and comply with accounting obligations.

9. Delivery, Collection, and Third-Party Delivery Providers

Capo Sushi may offer delivery, collection, or other order fulfilment options depending on location, operating hours, staff availability, delivery zones, weather conditions, demand, kitchen capacity, and third-party service availability.

To fulfil your order, Capo Sushi may share necessary information with delivery drivers, courier companies, delivery platforms, logistics tools, or other delivery-related service providers. This information may include your name, delivery address, telephone number, email address, order reference, delivery notes, and package information.

Delivery providers may process your information for delivery, tracking, notifications, proof of delivery, failed delivery handling, customer support, and order issue management. Delivery times are estimates unless expressly guaranteed in writing. Delays may occur due to kitchen workload, traffic, incorrect addresses, failed contact attempts, weather, public holidays, peak periods, road closures, third-party provider issues, or events outside Capo Sushi’s control.

For collection orders, customers are responsible for arriving at the agreed or estimated collection time. Food quality, temperature, freshness, and safety may be affected if the customer collects late or fails to follow instructions. Capo Sushi is not responsible for deterioration caused by customer delay, incorrect handling, or failure to consume food within a reasonable time after collection or delivery.

10. Menu Information, Allergens, Dietary Preferences, and Food Safety

Capo Sushi may display menu items, descriptions, ingredients, images, prices, allergens, dietary labels, spicy level indicators, vegetarian or vegan labels, gluten-related information, and other food-related details. Such information is provided for general guidance and may be subject to change.

Food products may contain, or come into contact with, allergens including but not limited to fish, crustaceans, molluscs, soy, sesame, gluten, eggs, milk, nuts, peanuts, sulphites, mustard, celery, lupin, and other allergens. Sushi and Japanese-inspired dishes may involve raw fish, cooked seafood, soy sauce, sesame, rice vinegar, seaweed, sauces, marinades, tempura, spicy mayonnaise, cream cheese, egg, and other ingredients that may create allergy, intolerance, dietary, religious, or health concerns for certain customers.

Although Capo Sushi may take reasonable care, food may be prepared in a kitchen where allergens are present. Cross-contact may occur during storage, preparation, cooking, cutting, rolling, plating, packaging, delivery, or handling. Capo Sushi cannot guarantee that any item is completely free from allergens unless expressly confirmed in writing by the Restaurant after a specific review.

Customers with allergies, intolerances, pregnancy-related dietary restrictions, immune system concerns, medical conditions, religious dietary restrictions, or other food-related concerns should contact Capo Sushi directly before placing an order and should not rely solely on website descriptions, menu labels, photographs, customer notes, or online ordering fields.

Customers are responsible for checking whether menu items are suitable for their individual needs. If you have a serious allergy or medical condition, you should seek professional advice and contact the Restaurant directly before ordering. Customer notes submitted online are helpful but may not be sufficient for serious allergy management.

11. Raw Fish, Perishable Food, Temperature, and Consumption Responsibility

Sushi and similar foods may contain raw fish, raw seafood, cooked seafood, rice, sauces, vegetables, seaweed, and other perishable ingredients. Perishable food should be consumed promptly and stored according to food safety principles.

Customers understand that food quality and safety may be affected by delays, temperature changes, incorrect storage, late collection, customer transport, exposure to heat, leaving food unrefrigerated, reheating unsuitable items, or consuming food long after delivery or collection.

Capo Sushi is not responsible for illness, quality deterioration, or food safety issues caused by customer delay, improper storage, improper reheating, failure to follow instructions, sharing food with persons with undisclosed allergies or health risks, or consumption outside a reasonable time after delivery or collection, except where liability cannot be excluded under applicable law.

Pregnant persons, elderly persons, young children, immunocompromised persons, and persons with specific medical conditions may need to avoid or take special care with raw fish, raw seafood, or certain perishable foods. Website information is not medical advice.

12. Order Changes, Cancellations, Refunds, and Perishable Goods

Food orders may be prepared shortly after acceptance. Because food is perishable and may be made to order, cancellation, refund, and withdrawal rights may be limited once preparation has started, the order has been dispatched, or the food has been made specifically for the customer.

Capo Sushi may refuse cancellation or refund requests where the food has already been prepared, packed, dispatched, collected, delivered, delayed due to customer fault, or made according to customer instructions, subject to mandatory consumer rights that cannot be excluded.

Refunds may be considered where an order is cancelled by Capo Sushi, payment is taken for an unavailable item, the wrong item is supplied, food is not delivered due to Restaurant fault, or another issue arises for which Capo Sushi is responsible. Refunds may be partial or full depending on the circumstances, order status, payment provider rules, and applicable law.

Customers should contact Capo Sushi promptly at caposushilimassol@gmail.com with their order number, photographs where relevant, and details of the issue. Late complaints may be harder to investigate, especially for perishable food.

13. Customer Accounts

If customer accounts are enabled, users may create an account to view order history, save addresses, manage account details, save favourite items, or access other features.

You are responsible for maintaining the confidentiality of your login details and for all activity under your account. You must not share passwords, create accounts using false information, impersonate another person, or use another person’s account without permission.

Capo Sushi reserves the right to suspend, restrict, or delete accounts where fraud, abuse, unauthorised access, suspicious activity, breach of these Terms, or unlawful activity is suspected.

14. Cookies and Similar Technologies

The website may use cookies and similar technologies. Cookies are small files stored on your device when you visit a website. They may help the website function, remember preferences, manage shopping cart contents, enable checkout, improve security, analyse traffic, personalise content, support online ordering, or measure advertising performance.

We may use strictly necessary cookies that are required for the website to function properly. These may include cookies used for cart functionality, checkout security, account login, cookie preference storage, session management, payment processing, fraud prevention, load balancing, online ordering functionality, and administrative functions.

We may use analytics cookies to understand how visitors use the website, which menu items are viewed, which categories attract interest, how long users stay, how visitors reach the website, and how the online ordering experience can be improved.

We may use functionality cookies to remember visitor preferences, such as language settings, cookie settings, display preferences, cart preferences, address preferences, preferred fulfilment method, or similar options.

We may use marketing cookies where advertising, remarketing, social media tracking, abandoned cart campaigns, affiliate tracking, or campaign measurement tools are active.

Where required by law, non-essential cookies will only be used after consent is provided. You may manage cookies through the website’s cookie banner, consent settings, or your browser settings. Blocking cookies may affect certain website features, including cart, checkout, account login, embedded media, saved preferences, fraud protection, analytics functionality, payment functionality, or online ordering functionality.

15. WordPress, WooCommerce, Ordering Plugins, Themes, and Third-Party Tools

The website is developed using WordPress and may use WooCommerce or similar online ordering systems. WordPress food-ordering websites commonly rely on third-party themes, plugins, scripts, extensions, integrations, APIs, and technical services.

For this website, such tools may include ecommerce plugins, ordering plugins, payment gateway plugins, delivery plugins, tax tools, invoice tools, cart tools, checkout tools, menu management tools, product variation tools, customer account tools, review tools, contact forms, newsletter tools, abandoned cart tools, marketing tools, media galleries, embedded video tools, map integrations, analytics tools, cookie consent tools, SEO plugins, caching systems, security tools, backup tools, email delivery tools, accessibility tools, performance optimisation plugins, and website administration tools.

Such tools may process technical data or personal data depending on their purpose. For example, an ordering plugin may process food orders, a payment plugin may process payment status, a delivery plugin may process delivery information, a contact form plugin may process form submissions, a security plugin may process IP addresses, an analytics tool may process visitor behaviour, a cookie tool may store consent preferences, and a backup tool may create copies of website data.

Capo Sushi and its website developer may update, disable, replace, remove, or add plugins and tools from time to time for security, compliance, functionality, performance, compatibility, user experience, food ordering operations, or business reasons.

Third-party providers may have their own privacy policies, terms, servers, security practices, and data processing procedures. Where third-party providers act as independent controllers, their own terms and privacy policies may apply. Where they act as processors on behalf of Capo Sushi, they are expected to process data according to appropriate instructions and applicable law.

16. Analytics, Marketing, and Abandoned Cart Communications

We may use analytics and marketing tools to understand customer behaviour, improve website performance, measure campaigns, personalise content, recommend menu items, and improve the ordering experience.

If abandoned cart functionality is enabled, users who add food items to cart or begin checkout may receive reminder communications where permitted by law and where the necessary consent or lawful basis applies.

Marketing communications may include newsletters, menu launches, promotional offers, discount codes, seasonal campaigns, special announcements, abandoned cart reminders, and related updates. You may unsubscribe from marketing communications through the unsubscribe link, if available, or by contacting caposushilimassol@gmail.com.

Even if you unsubscribe from marketing communications, we may still send necessary transactional or administrative communications relating to your order, payment, delivery, collection, account, cancellation, refund, customer service request, or legal notices.

17. Sharing Personal Data

We do not sell personal data in the ordinary commercial sense. However, we may share personal data where necessary for lawful, operational, technical, ecommerce, restaurant, administrative, commercial, or business purposes.

We may share information with website developers, hosting providers, IT support providers, payment providers, banks, fraud prevention providers, delivery drivers, courier companies, ordering platforms, delivery platforms, email providers, analytics providers, marketing platforms, cookie management providers, cloud providers, backup providers, accountants, legal advisers, suppliers, contractors, professional partners, insurers, public authorities, regulators, courts, or other parties where required or permitted by law.

We may share limited technical or website-related information with LOOP Digital Marketing LTD where necessary for website development, support, maintenance, troubleshooting, updates, optimisation, backups, or security monitoring.

We may disclose information where necessary to protect our rights, respond to lawful requests, prevent fraud, enforce these Terms, investigate security incidents, comply with legal obligations, process transactions, manage food orders, resolve disputes, handle food safety concerns, or defend legal claims.

18. International Data Transfers

Some service providers used by modern websites may operate servers, tools, or technical infrastructure outside Cyprus or outside the European Economic Area. These may include payment providers, analytics providers, email providers, cloud providers, marketing tools, security tools, backup systems, hosting infrastructure, map providers, video platforms, social media tools, or plugin-related services.

Where personal data is transferred outside the EEA, appropriate safeguards may be required, such as adequacy decisions, standard contractual clauses, contractual protections, technical safeguards, organisational controls, or other lawful transfer mechanisms.

19. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Order records, receipt records, invoice records, payment records, delivery records, collection records, cancellation records, refund records, customer service records, and complaint records may be retained for accounting, tax, consumer protection, food safety, fraud prevention, dispute resolution, and legal compliance purposes.

Website enquiries may be retained for a reasonable period to respond to the enquiry, manage follow-up communication, provide requested information, maintain administrative records, and protect legal rights.

Customer account data may be retained while the account remains active or for as long as necessary for order history, customer support, legal obligations, security, or dispute resolution.

Technical logs may be retained for a limited period for security, troubleshooting, performance monitoring, fraud prevention, and website maintenance.

Cookie consent records may be retained to demonstrate consent choices and manage website compliance.

Marketing data may be retained until you unsubscribe, withdraw consent, or request deletion where applicable.

When data is no longer needed, we may delete, anonymise, archive, or securely restrict it, subject to legal, operational, and technical limitations.

20. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration, disclosure, or destruction.

Security measures may include SSL encryption, secure hosting, restricted administrative access, strong passwords, WordPress updates, plugin updates, firewalls, malware scanning, backups, spam protection, payment gateway security, fraud prevention tools, user access controls, security monitoring, and technical maintenance.

However, no website, server, email system, plugin, theme, database, payment gateway, ordering system, internet transmission, or online platform can be guaranteed to be completely secure. You acknowledge that any information submitted online carries some level of risk. If you believe that your interaction with Capo Sushi is no longer secure, please contact us immediately at caposushilimassol@gmail.com.

21. Your Data Protection Rights

Depending on your location and applicable law, you may have rights in relation to your personal data. These may include the right to request access to your personal data, correction of inaccurate data, deletion of data, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent.

You may exercise your rights by contacting caposushilimassol@gmail.com. We may need to verify your identity before responding. We may refuse, limit, or delay a request where permitted by law, including where data must be retained for legal obligations, accounting records, order fulfilment, contractual performance, fraud prevention, security reasons, food safety reasons, dispute resolution, or legal claims.

If you are located in Cyprus or the European Union and believe your data protection rights have been infringed, you may have the right to contact the competent data protection supervisory authority.

22. Children’s Privacy

This website is intended for general restaurant information and food ordering by adults or by persons legally able to make online purchases. It is not specifically directed at children. We do not knowingly collect personal data from children through the website without appropriate parental or guardian involvement where required.

If a parent or guardian believes that a child has submitted personal data or placed an order through the website without appropriate permission, they may contact us at caposushilimassol@gmail.com so that the matter can be reviewed.

23. Third-Party Links

The website may contain links to third-party websites, social media platforms, payment providers, delivery tracking pages, supplier websites, partner websites, review platforms, video platforms, public resources, map providers, food information resources, or external services. These links are provided for convenience only.

We are not responsible for the content, accuracy, security, privacy practices, terms, availability, or actions of third-party websites. Accessing third-party websites is done at your own risk.