Privacy policy

1. Who we are

Palèt is the restaurant brand at 29 Fitt Street, Ground Floor, Ariapita Avenue, Woodbrook, Port of Spain, Trinidad and Tobago. For privacy enquiries, write to the Palèt management team at this address, marked “Privacy enquiry”.

2. Trinidad and Tobago privacy law

This policy is framed around Trinidad and Tobago’s Data Protection Act, 2011 (Chap. 22:04), particularly the General Privacy Principles in section 6. Those principles address accountability, identified purposes, knowledge and consent, limited collection and retention, accuracy, safeguards, sensitive information, openness, access, challenges and protection when information is disclosed outside Trinidad and Tobago.

The Act has been brought into force in stages. This policy does not represent that every provision of the Act is in force or that publishing a policy alone establishes compliance. We apply the provisions in force and any other applicable written law; requests and disclosures remain subject to lawful restrictions.

Official references: General Privacy Principles published by TT-CSIRT and the initial commencement proclamation, Legal Notice No. 2 of 2012. The initial proclamation is not a complete statement of later commencement changes.

3. Information we collect

• Catering enquiries: your name, phone number, email address, optional company name, chosen packages and quantities, guest count, event date and time, pickup or delivery choice, and a delivery address where needed.
• Job applications: your name, contact details, home address, right to work in Trinidad and Tobago, age confirmation, Food Handler’s Badge status, availability, work history, education, references you choose to give and an optional CV. These are used only to assess your application, are seen only by our hiring team, and copies are emailed to that team.
• Dietary notes: any dietary or allergy information you choose to provide. These notes may reveal sensitive health or religious information. Provide only practical requirements and counts, not guests’ names, diagnoses or medical histories. Do not send someone else’s sensitive information unless you are authorised and its disclosure is lawful.
• Team accounts: email address, account identifiers and authentication information used for sign-in. A Google sign-in provider may supply basic account information needed to authenticate you.
• Website operation: hosting and security providers may process IP addresses, browser and device details, request times and error records to deliver and protect the website.

You can browse the menu without creating an account. This website does not operate a shopping cart or collect payment-card details; ordering takes place with an external ordering provider.

4. How we use your information

We use enquiry information to respond, prepare a quote, clarify requirements and arrange your catering. Dietary notes are used only to consider the requirements you have shared and discuss what our kitchen can accommodate. Providing notes does not guarantee an allergen-free meal; please read our allergen notice.

Account and technical information supports team access, website delivery, troubleshooting and security. We limit collection to what is needed for these purposes. Sensitive information is subject to additional restrictions under applicable written law; sending a form is not a waiver of those protections.

The catering form asks for permission to contact you about your request. That permission is not consent to marketing. We do not use catering enquiries to subscribe you to marketing, and would seek separate permission before using your details for that purpose.

5. Sharing and overseas processing

Information may be handled by authorised Palèt team members and service providers supporting hosting, data storage, authentication and security, to the extent needed for their work. Relevant catering details may be shared with a fulfilment provider when needed to arrange your requested service. We do not sell your personal information.

We may disclose information where required or otherwise permitted by applicable law, including a valid court order. Any different use or disclosure requires your prior consent unless a lawful exception applies.

Our website uses Lovable Cloud and external services that may process information outside Trinidad and Tobago. Overseas disclosures must have safeguards consistent with section 6, including comparable protection for the information. We assess applicable legal requirements before such disclosures; this policy is not blanket consent to unrestricted international transfers.

When you follow an Order link, the ordering provider receives your visit and any details you submit there. The link may include the originating page, selected dish and campaign identifiers. That provider’s own privacy policy governs information it collects directly.

6. Security and retention

We use safeguards appropriate to the sensitivity of the information, including restricted team access and authenticated management tools. No online system is completely secure. Please avoid including payment details, identity documents or unnecessary sensitive information in an enquiry.

We retain information only as long as necessary for the purpose for which it was collected, including handling your request, fulfilling agreed arrangements and meeting applicable record-keeping or legal obligations. When it is no longer needed, it should be securely deleted or anonymised. Backups may remain for their normal recovery cycle with access restricted. We do not promise a fixed deletion period where a lawful retention obligation applies.

7. Cookies and external services

Team sign-in uses browser storage to maintain an authenticated session. Hosting and sign-in services may also use necessary cookies or similar technologies for security and service delivery. You can manage cookies and website storage in your browser; blocking them may prevent team sign-in from working.

Our website loads fonts from Google Fonts, which involves your browser contacting Google and sending connection information such as your IP address. Google and external ordering or sign-in services have their own privacy notices.

Order links carry campaign information to the ordering provider. This is distinct from a payment transaction on this website. If we introduce optional analytics or advertising technologies, we will explain their purposes and obtain any consent required before they are used.

8. Your choices and requests

You may contact management to ask whether we hold information about you, request access to information about its existence, use and disclosure, request correction of inaccurate or incomplete details, or challenge our handling of it. Access is subject to applicable written law and protections for other people’s information.

You may also withdraw consent to a consent-based use or request deletion where the information is no longer needed. Withdrawal does not reverse prior lawful processing, and deletion may be limited by legal obligations. If you withdraw information needed for catering, we may be unable to continue with the request.

We may need proportionate identity checks before releasing or changing records. If a request cannot be fulfilled, we will explain the reason where legally permitted. If you remain dissatisfied, you may seek guidance on available remedies under Trinidad and Tobago law; statutory complaint routes depend on the provisions and authorities operating at the time.

This website is not intended to collect information directly from children. A parent or guardian who believes a child has supplied personal information should contact management so we can review it.

9. Contact and changes

Address privacy requests to: Palèt management — Privacy enquiry, 29 Fitt Street, Ground Floor, Ariapita Avenue, Woodbrook, Port of Spain, Trinidad and Tobago. You may also ask the team at the restaurant to direct your request to management. Current restaurant contact information, when available, is on our Locations page.

We will update this policy when our practices or applicable legal requirements change and revise the date above. A new purpose for using your information will be explained, with fresh consent obtained where required.