Donna Margherita ("we," "us," or "our") operates the website at www.donnamargheritanyc.com. This Privacy Policy explains what personal information we collect, why we collect it, and your rights regarding that information. This policy is not legal advice. We recommend consulting a qualified attorney to ensure full compliance with applicable regulations.

Information We Collect

We may collect the following categories of personal data when you interact with our website or services:

Contact information: Your name, email address, and phone number, provided when you fill out our contact or reservation form.
Usage data: Information about how you interact with our website, including pages visited, time spent, browser type, device information, and referring URLs. This data is collected through analytics cookies only when you consent.
Location data (country level only): We detect your country from your IP address solely to determine which privacy notice and cookie consent banner to display. This is country-level detection using Cloudflare infrastructure, not precise geolocation, and does not require browser permission.
Cookie data: Information stored through cookies and similar technologies, as described in our Cookie Policy.

Purpose and Legal Basis for Processing

We process personal information for the following purposes:

To respond to inquiries: When you contact us through our form, we use your contact information to respond. The legal basis is your consent and our legitimate interest in communicating with potential guests.
To improve our website: We use analytics data to understand how visitors use our site and to improve the user experience. The legal basis is your consent, provided through the cookie consent mechanism.
To comply with legal obligations: We may process data as required by applicable law.
To display the correct privacy notice: Country-level IP detection ensures you see the privacy banner appropriate to your jurisdiction. The legal basis is our legitimate interest in legal compliance.

Who We Share Data With

We may share personal information with the following third parties, only when you have consented to the relevant cookie category, except where noted below for services you choose to use directly:

Google (Google Analytics 4): We use GA4 to analyze website traffic. Google may process usage data on servers located in the United States. Google's privacy policy is available at policies.google.com/privacy (opens in a new tab).
Cloudflare: Our website is served through Cloudflare's content delivery network. Cloudflare may process technical data (IP addresses, request headers) as part of its service. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy (opens in a new tab).
OpenTable: Our Reservations page includes an embedded OpenTable booking widget, which loads directly from OpenTable when you visit that page. Any details you enter in the widget (such as your name, email, phone number, party size, and reservation time) are collected and processed by OpenTable, not by us, and OpenTable may set its own cookies and collect technical data such as your IP address and device information. OpenTable's privacy policy is available at opentable.com/legal/privacy-policy (opens in a new tab).

We do not sell your personal data to third parties.

Data Retention

We retain personal data only as long as necessary for the purposes described above. Contact form submissions are retained for up to 24 months. Analytics data is retained according to the default settings of the analytics platform. Cookie consent records are stored locally in your browser.

International Data Transfers

Your data may be transferred to and stored on servers located in the United States. By using our website and providing your consent where required, you acknowledge that your data may be processed in jurisdictions with different data protection laws than your own.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate personal data.
Right to erasure: You may request deletion of your personal data.
Right to restriction: You may request that we limit the processing of your data.
Right to data portability: You may request your data in a structured, machine-readable format.
Right to object: You may object to the processing of your personal data for certain purposes.
Right to withdraw consent: You may withdraw your consent at any time by using the gear icon on our website to access Cookie Settings, or by contacting us directly.

California Residents (CPRA)

If you are a California resident, you have additional rights under the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination. We do not sell personal information. You can opt out of analytics cookies at any time by selecting "Decline" or "Customize" on our cookie consent banner, or through the gear icon (⚙) in the corner of any page. We also honor the Global Privacy Control (GPC) browser signal as an opt-out.

How to Exercise Your Rights

To exercise any of your rights, please contact us at:

Email: info@donnamargheritanyc.com
Phone: (212) 772-1169
Mail: Donna Margherita, 1304A Second Avenue, New York, NY 10065

We will respond to your request within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.