Privacy & Cookie Policy
How we handle your personal data at CHOCAFÉ
Last updated: 19 July 2026
Who we are
CHOCAFÉ is a café-bistro located at SmartCity, Kalkara, Malta SCM1001. We are the data controller for personal data collected through this website (chocafe.mt). You can reach us at [email protected] or on +356 2144 4454.
What data we collect and why
Contact & reservation forms
When you use our contact or reservation form we collect the details you enter: your name, email address, phone number, reservation date/time and party size, and your message or special requests. We use this information solely to respond to your enquiry or manage your reservation (legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in responding to enquiries).
Form submissions are delivered to us by Formspree, Inc. (USA), acting as our processor. Formspree participates in the EU-U.S. Data Privacy Framework. Please avoid including sensitive information (such as health or allergy details) in the form — call us instead and we will assist you directly.
Analytics (only with your consent)
We use Google Analytics 4 (Google Ireland Ltd) to understand how our website is used. Analytics cookies are set only if you click "Accept" on our cookie banner (legal basis: consent). If you decline, or make no choice, analytics storage remains disabled through Google Consent Mode.
Cookies & similar technologies
| Name | Purpose | Duration | Set when |
|---|---|---|---|
_ga, _ga_* |
Google Analytics — distinguishes visitors and sessions | up to 2 years | Only after you click "Accept" |
cookieConsent (localStorage) |
Remembers your cookie choice | until cleared | When you choose Accept or Decline |
| Third-party embeds | Google Maps (location map) and TripAdvisor (rating widget) may set their own cookies when they load | varies | On pages containing the embed |
Who we share data with
- Formspree, Inc. (USA) — delivers form submissions to us.
- Google Ireland Ltd — analytics (with consent) and the embedded map.
- Cloudflare, Inc. — hosts and serves this website (CDN/security).
We do not sell your personal data or use it for advertising.
Retention
Form submissions and related emails are kept only as long as needed to handle your enquiry or reservation, then deleted in the normal course of business. Analytics data is retained by Google Analytics for up to 14 months.
Customer reviews shown on this site
Our homepage displays genuine customer reviews that were publicly posted on Google Maps, including the reviewer's public name and profile photo. Each review links to the original on Google so you can verify it. If you are a reviewer and would like your review removed from our website, email us at [email protected] and we will remove it promptly.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time (use the "Change my cookie choice" button above, or contact us). To exercise any right, email [email protected].
You also have the right to lodge a complaint with the Maltese supervisory authority: the Information and Data Protection Commissioner (IDPC).
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision.