Legal
Privacy Policy
Izushi Izakaya ("we", "us"), 3–4 Bedford Row, Temple Bar, Dublin 2, D02 HD77, Ireland, is the data controller for personal data collected through this website and our messaging channels. This policy is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), the Irish Data Protection Acts 1988–2018 and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. No. 336 of 2011). Last updated: 6 October 2026.
1. Who we are and how to contact us
Controller: Izushi Izakaya, 3–4 Bedford Row, Temple Bar, Dublin 2, D02 HD77, Ireland. Email izushidublin@gmail.com or phone +353 1 515 5070 for any data protection question. We are a small business and are not required to appoint a Data Protection Officer under Article 37 GDPR; requests are handled by management.
2. What we collect, why, and our legal basis
Reservations — name, email, phone, party size, date/time, seating preference, occasion and notes. Purpose: to take and manage your booking. Legal basis: performance of a contract (Art. 6(1)(b)).
Allergies and dietary notes — if you tell us about allergies, this may reveal health data (Art. 9). We use it only to prepare your food safely, on the basis of your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.
Guest records and no-shows — visit history and no-show/cancellation notes, which may lead to a booking being reviewed ("watch") or declined ("blocked"). Legal basis: our legitimate interest in protecting table availability (Art. 6(1)(f)). No decision is made solely by automated means — a staff member always reviews it, and you can contest it.
Marketing — we send offers by email or SMS only where you consented, or where you are an existing customer and we offer similar services with an easy opt-out in every message (Regulation 13, S.I. 336/2011). Legal basis: consent (Art. 6(1)(a)). Unsubscribe at any time via the link in the message or by emailing us.
Instagram messages and comments — your username and message content, so we can reply (partly via an automated assistant). Legal basis: legitimate interest in answering enquiries (Art. 6(1)(f)). You can ask for a human reply at any time.
Menu assistant — questions you type are processed by an AI service to suggest dishes. Do not enter personal or health details. Legal basis: legitimate interest (Art. 6(1)(f)). Not used for profiling.
NFC and usage analytics — anonymous, aggregated counts of taps and link clicks on izushi.ie/go. No identifying data is collected.
3. Recipients (processors)
We share data only with processors bound by Article 28 contracts: our hosting and database provider (Lovable Cloud, EU servers); Meta Platforms Ireland Ltd (Instagram messaging); Google Ireland Ltd (Maps, fonts, reviews); our AI model provider (menu assistant and Instagram replies); and our email provider. Everdish handles online orders as an independent controller under its own privacy policy. We never sell your data.
4. International transfers
Data is stored in the EU. Where a provider may process data outside the European Economic Area (for example in the United States), the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses (Art. 45–46).
5. How long we keep data
Reservations and guest records: up to 24 months after your last visit. Allergy notes: deleted after your visit. Marketing contacts: until you unsubscribe or after 24 months without contact. Instagram conversations: up to 12 months after the last message. Accounting records may be kept for 6 years where Irish tax law requires.
6. Cookies (S.I. 336/2011)
We only use strictly necessary storage (for example the staff login session), which does not require consent. We do not use advertising or tracking cookies. Embedded Google Maps may set its own cookies when you interact with the map; you can avoid this by using the "Get directions" link instead.
7. Your rights
Under Articles 15–22 GDPR you have the right to: access your data; have it corrected; have it erased; restrict processing; data portability; object to processing based on legitimate interest or to direct marketing (always honoured); and withdraw consent at any time without affecting earlier processing. Email izushidublin@gmail.com or call +353 1 515 5070. We reply free of charge within one month (extendable by two months for complex requests) and may ask you to verify your identity.
You may complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — www.dataprotection.ie.
8. Security, breaches and children
Data is encrypted in transit, access is limited to approved staff by role, and changes are logged. If a breach is likely to put you at risk, we will notify the DPC within 72 hours and inform you without undue delay (Art. 33–34). Our services are not aimed at children under 16, the digital age of consent in Ireland.
9. Changes to this policy
We may update this policy; the date above shows the current version. Significant changes will be highlighted on this page.