Privacy Policy
Last updated: 19 October 2026.
This policy explains how SULTAN GRILL handles personal data in connection with this website. The site describes a shashlik and kebab restaurant: the grill, the dining room, the hours and the way a table is requested. It does not offer user accounts, online checkout, public comments, a newsletter or a contact form. You cannot create a profile, save a card, or post a review here. If you only read the pages, the personal data involved is limited to the technical record a host keeps in order to deliver a page, and to one note in your own browser that remembers the closed notice. If you later telephone or email the house, that conversation happens outside the website and is described below. The street address and the telephone are printed on the contact page and in the footer. They are not repeated through this policy. The email for a privacy request is [email protected] .
Who is responsible
The party responsible for this site is SULTAN GRILL. That is the name on the dining room and on these pages. There is no separate online shop and no separate publisher. Decisions about what the pages say, and about how a message to the house is kept, are made by the restaurant. The postal address and the telephone number are the ones on the contact page and in the footer of every page. Use [email protected] when the message is about personal data rather than about a table. Put the words "personal data" in the subject or the first line, so the note is not answered as a reservation. We do not ask you to create a login to exercise a right. A clear email is enough, together with a way for us to reply.
The law that applies
Personal data is handled under Law No. 19.628 on the protection of private life. That law requires a purpose, care with the data, and a way for the person concerned to ask what is held and to correct what is wrong. Law No. 21.719, which regulates the protection and processing of personal data and creates the Agencia de Protección de Datos Personales, was published on 13 December 2024 and enters into force on 1 December 2026. From that date we will apply it to this site, including the rights of access, rectification, erasure, opposition and portability where that law requires them. Until then, the duties in this policy already follow the ideas that fit a site of this kind: we name the purpose before we use anything, we do not collect data the pages do not need, we say so in ordinary language, and we give you an email route to ask for access or correction. We do not wait for the new law to avoid selling data or running advertising scripts. Those things are already absent. The practical effect for a reader is small, and that is the point. You can move through the pages without handing over a name. The moment personal data appears is the moment you choose to write or to call. This policy is written so that moment is obvious, and so the quieter moment — simply opening a page — is not dressed up as a relationship it is not. If a future version of the site adds a form, a payment step or a measured audience, the purpose, the data and the retention will be added here first, in the same plain list, before the feature is switched on.
Questions about a meal, a price, a missing dish or the way a table was handled are consumer matters, not privacy matters, unless a personal-data request is mixed in. Consumer questions are covered by Law No. 19.496 on the protection of consumer rights and by our Terms. The national consumer service is SERNAC. You can write to the house first. You do not lose the right to go to SERNAC because you wrote to us, and nothing on this page tries to take a right away that the law does not allow a restaurant to waive. A complaint about the taste of a kebab is not a privacy request. A complaint that we kept your email longer than this policy says is. If a single message contains both — the lamb was not as ordered, and please delete my address when you have answered — we will treat the two parts separately. The meal is handled as a consumer matter under the Terms and Law No. 19.496. The deletion is handled as a privacy matter under this policy. You do not need two emails for that, but the first line should say there are two requests, so one of them is not lost inside the other.
Information handled by the site
| Data type | Current use |
|---|---|
| Server logs | The hosting provider may record the IP address, the date and time, the page requested, a status code and a short browser string. Those lines exist so the site can be delivered, so abuse can be blocked, and so a broken page can be found. We do not join them to a name. We do not use them to build a profile, to retarget an advertisement, or to decide what you see on a later visit. Retention follows the host's ordinary security window, after which the lines are deleted or reduced to counts that no longer identify a device. |
| Notice preference | After you press "Got it", the key sultangrill_cookie_ok is written in the browser's local storage with the value 1. It is not an HTTP cookie. It is not sent to our server with each page. It does not contain your name, your email or an identifier we issued. It remembers only that the notice was closed on that browser. Clear site data and the notice returns. Ignore the button and nothing is written. The cookie page describes the same item in more detail. |
| Email or phone contact | If you telephone or email the house, we receive only what you choose to send. That is usually a name, a number or an email address, the day, the hour, the size of the party, and sometimes an allergy. The website does not capture that message. There is no form posting it to a database on this site. The exchange lives in the inbox or the telephone log of the restaurant, and it is used to answer you and, if you asked for a table, to hold or release seats. Do not include a card number or a copy of an identity document. A reservation does not need them. |
Why we use it
- To deliver the pages and to keep the site secure. The host needs a short technical log to send the file you asked for, to reject a flood of requests, and to see which address returned an error. That purpose ends when the log window ends. It is not reused to measure an audience or to choose an advertisement.
- To remember that you closed the storage notice, and only on the browser where you pressed the button. The purpose is to stop the same bar covering the page on every visit. It is not used to recognise you on another site, and it is not copied into an account, because there is no account.
- To answer a table request, a question about the grill, a change of hour, or a correction you send by telephone or by email. We use the details you included — the day, the number of guests, a way to reply, and any allergy — and we do not ask the website to store a second copy.
- To keep an ordinary record of that conversation for as long as the booking, the complaint or a legal claim needs it, and then to delete it. A confirmed table may be noted until the meal has happened or the table has been released. A privacy request is kept long enough to show what we did with it. We do not build a mailing list from either one.
We do not sell personal data. We do not rent it, swap it, or add it to an advertising audience. No analytics script and no advertising pixel run on this site. There is no social-media embed, no video player from another company, and no font loaded from a third-party server that would call home when the page opens. The type on the site is served from our own font files. If that ever changes, this policy will say so before the change, not after. Reading a page does not sign you up for anything.
No form submissions
The website contains no public form, no newsletter field, no comment box and no submit script. There is nowhere on these pages to type a message that the site itself will store. If you want to reach the house, you use the email or the telephone printed on the contact page and in the footer. Do not send payment card numbers, passwords or copies of identity documents by email. A table needs the day, the hour, the number of guests and any allergy. A privacy request needs a description of what you want done and a way to reply. Neither needs a document scan.
How long we keep it
The notice preference stays in your browser until you clear site data for this address. We cannot delete it from here, because it never reached us. Hosting logs are kept for the period the hosting provider sets for security and abuse prevention, and are then deleted or reduced so they no longer point at a particular device. Messages you send us are kept while we answer them. A table note is kept until the meal has passed or you have released the seats, and for a short ordinary period after that in case the bill or the booking is disputed. A complaint or a privacy request is kept long enough to show how it was handled and for the time a legal claim could still be brought. After that, the message is deleted. We do not keep a permanent guest book drawn from the inbox. If you write once to ask for a table and never come, the practical record is small and it does not earn a long life. If you write often, each message is still a message, not a profile we score. We do not attach a rating to a guest, we do not note who spent what for a marketing file, and we do not combine the inbox with the technical log of who opened which page. They are different tools for different jobs. Mixing them would create a picture of a person this restaurant does not need in order to cook. The picture is not built.
Who else sees it
The hosting provider processes technical logs in order to serve the pages and to defend them. Staff at the restaurant read a message you actually send. We do not pass guest details to advertisers, data brokers, or other restaurants. We do not use a marketing platform that would receive your email when you write about a table. If the host stores logs on a server outside Chile, that processing is limited to delivering and securing the site. It is not a transfer of a reservation file, because the reservation file is not on the website. Anyone who handles a message for us does so to answer it, not to build a list of their own.
Your rights
Under Law No. 19.628 you may ask what personal data we hold about you, ask us to correct it if it is wrong, incomplete or out of date, and ask us to cancel or block it when the law allows the holding to stop. You may also object where further use would go past the purpose you were told. From 1 December 2026 the rights in Law No. 21.719 also apply, including access, rectification, erasure, opposition and portability where that law requires them. Portability matters where data sits in a structured file you could take elsewhere. On this site there is no account file to export. The practical right is to know whether an email you sent is still in the house inbox, to correct a name or an hour that was written down wrong, and to have a stale table note deleted once the meal and any dispute are over.
Send the request to [email protected] . The telephone on the contact page can start the same conversation if you would rather speak. Say what you want done, which message or visit you mean, and how we can reach you. We aim to answer within 15 business days. We may ask for enough detail to be sure the request is yours and not someone else's attempt to read your booking. We will not ask for a copy of an identity card if a detail only you would know is enough. If we refuse, we will say why, including where the law requires us to keep a record. From 1 December 2026 you may also complain to the Agencia de Protección de Datos Personales once that authority is operating. Until then, a privacy complaint can still be put to the house, and a consumer complaint can still go to SERNAC.
Children
The site is written for adults who are planning a meal. We do not knowingly collect personal data from children through the website, and the website has no account a child could open. A family eating in the dining room is served in the room. The adults with them are responsible for the table. If a parent emails to book for a family, we treat the parent's address as the contact for that booking. We do not build a separate record on a child. If you believe a child's data reached us in error, write to the privacy address and we will delete what should not be there.
Changes
If this policy changes, the new text will be posted on this page with a new date at the top. A change that starts to collect data we do not collect today — a form, an account, an analytics script, a payment page — will be described here before it begins, not buried in a revision after the fact. Continuing to read the site after the date changes means you have the new notice available. It does not mean you agreed to a new use that the law requires a separate consent for. The previous text is replaced on this page. We do not keep a public archive of old versions, so if you need the wording that applied on a given day, ask and we will tell you what was in force.