At El Anfitrión we take care of the information of the people who visit us, book with us or write to us. This policy explains what data we collect, what we use it for, how long we keep it and how you can exercise your rights. It is adopted under Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Single Decree 1074 of 2015) and the rules that amend or complement them. This English version is provided for information; if there is any difference, the Spanish version prevails.

1. Data controller

2. Definitions

We use the definitions of article 3 of Law 1581 of 2012 and Decree 1377 of 2013: authorization (the data subject’s prior, express and informed consent), database, personal data, sensitive data (data that affects privacy or could lead to discrimination, such as health data), processor (a party that processes data on the controller’s behalf), data subject, processing, and transmission and transfer of data inside or outside Colombia.

3. Principles

We process data under the principles of legality, purpose, freedom, accuracy, transparency, restricted access and circulation, security and confidentiality set out in article 4 of Law 1581 of 2012.

4. Data we collect

We ask for your ID only to identify the booking holder. Card, bank account and password details are received and processed directly by the payment gateway; El Anfitrión never sees or stores them.

5. Purposes

We process data to:

1. Receive, manage, confirm, change and cancel bookings for tables, tejo courts, bolirana, events and plans.
2. Prepare quotes, collect deposits through the payment gateway and process refunds.
3. Send booking confirmations, reminders, changes and notices by email or WhatsApp, in the language you choose.
4. Identify you on arrival, assign your table or court and serve you.
5. Tell the kitchen and your server about allergies you share, so your order is prepared with care.
6. Run the points program: add points for each visit and, when available, let you redeem them.
7. Ask for your feedback after the visit, follow up on low ratings and improve our service.
8. Produce internal statistics on bookings, visits, spending and the channels through which people find us.
9. Protect people and property through video surveillance.
10. Handle inquiries, requests, complaints and claims.
11. Comply with accounting, tax and legal obligations and with requests from competent authorities.
12. Only with a separate, voluntary authorization: send you news about events, plans, promotions and offers by WhatsApp or email. You can withdraw it at any time without affecting your bookings or points.

6. Sensitive data: allergies and dietary restrictions

Allergies are health data and therefore sensitive data. Telling us about them is optional: you are not required to, and you can book without doing so. If you choose to share them, we ask for a separate, express authorization. We use them only to prepare your order safely and to warn you if something you booked contains them. They are seen by the staff serving your booking and the kitchen, and stay on your customer record for future visits until you ask us to delete them. No service depends on you giving us this data.

7. Children and adolescents

Bookings are always made by an adult. For minors we only record how many are coming, to apply the rule that they must be with an adult and leave by 9:00 p.m.; we do not collect their names or other data. Any data of a minor would be processed respecting their best interests and fundamental rights, with the authorization of their legal representative (article 7 of Law 1581 of 2012).

8. Authorization

We obtain your prior, express and informed authorization online (by ticking the box on the booking form), by phone or WhatsApp (when our team reads or sends you the privacy notice and you accept), or verbally at the venue (when our team reads you the privacy notice, you accept and they record it in the system). We keep proof of each authorization: channel, date and time, policy version and, as applicable, the IP address or the staff member who recorded it. Without your authorization we can still serve you, but we do not keep your data in our customer database or add points. No authorization is required in the cases of article 10 of Law 1581 of 2012.

9. Video surveillance

The venue has cameras in the entrance and stairs, the main room, the courts and bolirana area, and the cashier, marked with visible signs. There are no cameras in restrooms or private areas. Images are used only for the safety of people and property, kept for up to 30 days and then deleted, unless needed for an incident or a request from an authority. Only the owners can view them, and they are not published or shared except with competent authorities.

10. Your rights

Under article 8 of Law 1581 of 2012 you have the right to: know, update and correct your data; request proof of your authorization; be told how your data has been used; revoke your authorization and ask us to delete your data when there is no legal or contractual duty to keep it; access your data free of charge; and file complaints with the Superintendence of Industry and Commerce (SIC) after first submitting your inquiry or claim to us.

11. Our duties

We comply with the duties in article 17 of Law 1581 of 2012, including guaranteeing your right of habeas data, keeping proof of your authorization, informing you of the purpose of processing, keeping data secure and up to date, handling inquiries and claims within the legal deadlines and reporting security breaches to the SIC.

12. How to exercise your rights

Email datos@tejoelanfitrion.com, message +57 310 436 9618 on WhatsApp or bring your request to Calle 53 No. 27A-48, 2nd floor, Bogotá. Include your name, ID number, contact details and what you are asking for. Requests are handled by El Anfitrión’s management.

• Inquiries: answered within ten (10) business days, extendable by up to five (5) more with notice of the reasons (article 14).
• Claims: to correct, update or delete data, or for an alleged breach, include your ID, the facts, a reply address and any supporting documents. If something is missing, we will ask you to complete it within five (5) business days; after two (2) months without a reply, the claim is considered withdrawn. Claims are answered within fifteen (15) business days, extendable by up to eight (8) more with notice of the reasons (article 15). While in progress, your record is marked “claim in progress”.

To stop receiving promotions, just reply “no more promotions” on WhatsApp or reply to the email.

13. Processors, transmission and transfer

We share data only with providers that process it on our behalf, under a duty of confidentiality and only for the purposes of this policy: Wompi (Bancolombia), payment of deposits, Colombia; Hostinger, website, booking system and email hosting, servers that may be outside Colombia; Telegram, internal notices to our team about bookings, outside Colombia; WhatsApp (Meta), messages from our team about your booking, outside Colombia; and Loggro Restobar, invoicing at the venue and, once connected, customer and spending sync (location to be confirmed). Sending data to providers outside Colombia is an international transmission, made with providers that offer adequate protection and with your authorization. We do not sell or assign personal data to third parties for commercial purposes. If you leave a Google review, you post it directly on Google under its own terms; we do not send them your data.

14. Security

We apply reasonable technical, human and administrative measures: encrypted connection (HTTPS); access to the staff app only with personal usernames and passwords; role-based permissions (for example, servers cannot see customers’ phone numbers, emails or records); a log of who views or changes each booking; and payments processed directly by the gateway without storing financial data.

15. How long we keep data

Your browser keeps the booking you are making on your device so you don’t lose your progress if you close the page; it is cleared once the booking is confirmed.

16. Changes to this policy

Any significant change will be published at tejoelanfitrion.com/politica-de-datos/ before it applies. If a change affects the purposes, we will ask for a new authorization. Version 2.0 is effective from October 21, 2026 and replaces the previous version.

Privacy notice