Privacy Policy

Last updated: 3 September 2026

MGT Club Catering Ltd, trading as Event Kitchen (“Event Kitchen”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, why we use it, who we may share it with, how long we retain it and the rights available to you under the General Data Protection Regulation (“GDPR”), the Data Protection Act 2018 and applicable Irish data-protection legislation.

  1. Who we are

Event Kitchen is the trading name of MGT Club Catering Ltd.

For data-protection purposes, MGT Club Catering Ltd is the data controller responsible for the personal information described in this policy.

Business details

Legal entity: MGT Club Catering Ltd
Trading name: Event Kitchen
Company registration number: 730411
Email: info@eventkitchen.ie

  1. Information we collect

Depending on how you interact with us, we may collect the following information.

Contact information

This may include your:

  • Name;
  • Email address;
  • Telephone number;
  • Billing address;
  • Delivery address; and
  • Company or organisation name.

Order and event information

This may include:

  • Products and services ordered;
  • Event type, date, time and location;
  • Guest numbers;
  • Menu choices;
  • Delivery and access instructions;
  • Venue information;
  • Staffing and equipment requirements;
  • Dietary requirements;
  • Order history; and
  • Correspondence concerning your order or event.

Payment and transaction information

Online payments are securely processed by Stripe.

Event Kitchen does not normally receive or store your complete payment-card number or card security code. We generally receive:

  • Payment confirmation;
  • The amount paid;
  • Payment status;
  • Transaction and refund references;
  • Limited card information, such as the card type and last four digits; and
  • Billing and invoice information.

Stripe may separately collect and process complete payment details, authentication information, IP addresses, device information and information used to detect and prevent fraud.

Dietary and allergy information

We may collect information about food allergies, intolerances and other dietary requirements where this is necessary to safely prepare or supply food.

Some allergy information may reveal information about a person’s health and may therefore qualify as special-category personal data under the GDPR.

Where possible, dietary requirements should be provided without identifying the individual guest concerned.

Website and technical information

When you use our website, we may collect:

  • IP address;
  • Browser and device type;
  • Operating system;
  • Pages visited;
  • Referring website;
  • Date and time of visits;
  • Website interactions;
  • Cookie identifiers; and
  • General location derived from your IP address.

Some of this information is collected through cookies and similar technologies, including technologies used by Stripe during the payment process.

Communications

We may retain emails, quotation requests, website-form submissions, telephone notes, complaints, feedback and other communications exchanged with you.

Marketing preferences

We may record whether you have agreed to receive promotional emails or other marketing communications and whether you have subsequently opted out.

  1. How we collect information

We collect personal information when you:

  • Place an online order;
  • Request a quotation;
  • Complete a website form;
  • Contact us by telephone, email or social media;
  • Make a payment;
  • Attend an event catered by us;
  • Provide feedback or make a complaint;
  • Subscribe to marketing communications; or
  • Use our website.

We may also receive information from:

  • A company or event organiser making a booking on your behalf;
  • A venue hosting your event;
  • Stripe;
  • Delivery, staffing or equipment-hire providers;
  • Advertising or enquiry platforms through which you contact us; and
  • Publicly available business sources, where appropriate.

If you provide personal information about another person, you should ensure that you are authorised to do so and that the person understands how their information may be used.

  1. Why we use your information

We may use personal information to:

  • Respond to enquiries;
  • Prepare quotations;
  • Confirm and manage orders;
  • Process payments and refunds;
  • Deliver food and catering services;
  • Manage dietary and allergen requirements;
  • Arrange staffing, equipment and venue access;
  • Communicate changes or important service information;
  • Issue invoices and maintain accounting records;
  • Deal with complaints and disputes;
  • Improve our products, services and website;
  • Prevent fraud and protect our systems;
  • Comply with legal and regulatory obligations; and
  • Send marketing where legally permitted.

We will not use your information for an unrelated purpose without an appropriate legal basis and, where necessary, notifying you.

  1. Our lawful bases

Under the GDPR, we must have a lawful basis for using personal information.

Performance of a contract

We process information where it is necessary to:

  • Prepare a requested quotation;
  • Take steps before entering into a contract;
  • Process and fulfil an order;
  • Deliver catering services;
  • Process payments or refunds; or
  • Communicate about a booking.

Legal obligation

We process certain information to comply with our legal obligations, including:

  • Tax and accounting requirements;
  • Food-safety obligations;
  • Allergen-information requirements;
  • Responding to lawful requests from authorities; and
  • Establishing required business records.

Legitimate interests

We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights.

These interests may include:

  • Operating and improving our business;
  • Responding to business enquiries;
  • Maintaining appropriate business records;
  • Protecting our website and systems;
  • Preventing fraud;
  • Recovering unpaid amounts;
  • Managing complaints and legal claims; and
  • Understanding how customers use our services.

Consent

We rely on consent where required, including for:

  • Certain electronic marketing communications;
  • Non-essential cookies and website analytics; and
  • Certain uses of health-related allergy information.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Vital interests

In an emergency, we may use allergy or health-related information where necessary to protect someone’s life or physical safety.

  1. Allergies and special-category information

Information about an allergy or medical dietary requirement may constitute health information and receive additional protection under the GDPR.

We only request information reasonably necessary to prepare and provide food safely.

Where you disclose allergy information about another guest, you should:

  • Have their permission to provide it;
  • Avoid supplying unnecessary medical information; and
  • Where practical, describe the requirement without naming the individual.

We may share relevant allergen information with chefs, service staff, venues or suppliers where necessary to safely fulfil the order. We will limit the information shared to what is reasonably required.

We cannot guarantee that food will be completely free from traces of allergens due to the possibility of cross-contact in our kitchens or supply chain.

  1. Marketing communications

We may send marketing emails or messages where:

  • You have expressly agreed to receive them; or
  • Another lawful exception applies to an existing customer relationship.

Agreeing to marketing is optional and is not a condition of placing an order.

You can opt out at any time by:

  • Selecting the unsubscribe link in a marketing email;
  • Following the opt-out instructions in the message; or
  • Contacting us using the details in this policy.

We may retain limited information on a suppression list after you unsubscribe to ensure that we respect your preference.

Service communications about an active order, quotation or event are not marketing and may still be sent where necessary.

  1. Cookies and website technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website, shopping cart, checkout, security and payment functions to work. These may include cookies placed or used by Stripe to securely process payments, prevent fraud and authenticate transactions.

Strictly necessary cookies do not generally require consent.

Other cookies, including analytics, advertising and social-media cookies, will only be used where you have provided any consent required by law.

You can accept, reject or manage non-essential cookies through the cookie controls displayed on our website.

Our separate Cookie Policy should identify:

  • Each cookie or service used;
  • The provider;
  • Its purpose;
  • How long it remains active; and
  • Whether information is transferred outside the European Economic Area.

Withdrawing consent will not affect the lawfulness of cookies used before consent was withdrawn.

  1. Who we share information with

We may share relevant information with trusted third parties that help us operate our business, including:

  • Stripe, which securely processes our online payments;
  • Website-hosting and technical-support providers;
  • Online ordering and e-commerce providers;
  • Email and communications providers;
  • Accountants, bookkeepers and professional advisers;
  • Delivery providers;
  • Event staff and catering contractors;
  • Venues;
  • Equipment-hire companies;
  • IT-security and data-storage providers;
  • Marketing platforms, where permitted; and
  • Government bodies, Revenue, regulators, law-enforcement authorities or courts where legally required.

These recipients only receive the information reasonably necessary for their role.

Where a supplier processes personal information on our behalf, we require it to use the information appropriately, keep it secure and comply with applicable data-protection requirements.

We do not sell your personal information.

  1. Payment processing through Stripe

We use Stripe to securely process online payments.

When you make an online payment, your payment information is collected and processed directly by Stripe. This may include:

  • Your name;
  • Billing address;
  • Email address;
  • Payment-card or bank information;
  • Transaction details;
  • IP address;
  • Device information; and
  • Information used to prevent fraud and authenticate the payment.

Event Kitchen does not receive or store your complete payment-card number or card security code.

We generally receive payment confirmation, the amount paid, limited card information such as the card type and last four digits, and a Stripe transaction reference.

Stripe may process personal information to:

  • Complete and authenticate payments;
  • Detect and prevent fraud;
  • Manage refunds or disputed payments;
  • Comply with financial and regulatory requirements; and
  • Provide, maintain and improve its payment services.

Stripe may use cookies or similar technologies when its payment services are displayed on our website.

Stripe provides its services in Europe through Stripe entities including Stripe Payments Europe, Limited and Stripe Technology Europe, Limited.

Stripe processes personal information in accordance with its own privacy policy, available at:

https://stripe.com/ie/privacy

  1. International transfers

Some of our technology providers, including Stripe, may store or access information outside Ireland or the European Economic Area.

Where personal information is transferred outside the European Economic Area, appropriate steps must be taken to protect it. Depending on the provider and destination, these may include:

  • Confirming that the destination benefits from an adequacy decision;
  • Using European Commission-approved Standard Contractual Clauses; or
  • Applying another transfer mechanism permitted by data-protection law.

Stripe is responsible for applying appropriate safeguards to international transfers that it undertakes as part of its services.

Further information about relevant transfer safeguards may be requested using the contact details below.

  1. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting and reporting requirements.

Our general retention periods are:

  • Unsuccessful or inactive quotation enquiries: up to 24 months after the last communication;
  • Order, invoice, payment and accounting records: generally six years after the relevant accounting period or transaction;
  • Contracts and significant event records: generally six years after completion, or longer where a dispute or legal requirement applies;
  • Routine customer correspondence: up to three years after the matter is concluded;
  • Complaint and incident records: for the period reasonably necessary to investigate and manage the matter and any related claim;
  • Allergy and dietary information: for no longer than reasonably necessary to provide the service and manage any resulting food-safety issue or legal claim;
  • Marketing information: until consent is withdrawn, you opt out or the information is no longer required;
  • Marketing suppression records: for as long as necessary to honour your opt-out; and
  • Cookie information: for the period identified in our Cookie Policy.

We may retain information for longer where required by law, where a claim is ongoing or where preservation is necessary for the establishment, exercise or defence of legal rights.

  1. How we protect information

We use reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include:

  • Password and access controls;
  • Restricted staff access;
  • Secure payment processing through Stripe;
  • Software and security updates;
  • Secure storage and backups;
  • Staff confidentiality requirements; and
  • Appropriate arrangements with service providers.

No website, email system or internet transmission is completely secure. You should avoid sending payment-card information or unnecessary sensitive information by ordinary email.

  1. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Be informed about how your information is used;
  • Request access to your personal information;
  • Ask us to correct inaccurate or incomplete information;
  • Request deletion of your information;
  • Request restriction of processing;
  • Object to processing based on legitimate interests;
  • Object at any time to direct marketing;
  • Request transfer of certain information in a portable format;
  • Withdraw consent; and
  • Make a complaint to the Data Protection Commission.

These rights are not absolute and may be limited where we have a legal obligation or another lawful reason to continue processing the information.

We may need to verify your identity before responding to a request.

We will normally respond within one month. We will notify you if additional time is permitted and required due to the complexity or number of requests.

  1. Making a data request

To exercise your rights or ask a privacy-related question, contact:

Event Kitchen – Data Protection

Email: [insert privacy email] Address: [insert postal address] Telephone: [insert telephone number]

Please provide sufficient information to help us identify you and understand your request.

  1. Complaints

If you have concerns about how we use personal information, please contact us first so that we can investigate.

You also have the right to complain to:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Website: www.dataprotection.ie

  1. Third-party websites

Our website may contain links to websites operated by other organisations, including Stripe.

We are not responsible for the privacy practices, security or content of third-party websites. You should review their privacy policies before providing personal information.

  1. Children’s information

Our services are not directed at children, and children should not place orders or submit personal information through our website.

Information about a child’s dietary requirement should be provided by their parent, guardian or the person responsible for arranging the event.

  1. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, suppliers, website or legal obligations.

The latest version will be published on our website with its effective date. Where a change is significant, we may provide an additional notice where appropriate.