Privacy & Cookie Policy

The Sorrento is an Italian & Mediterranean restaurant in Mysuru, Karnataka, India. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), The Sorrento is the Data Fiduciary that determines how and why your personal data is processed through this website. This policy explains what we collect, why, how we protect it, and the rights you have as a Data Principal.

We collect only what we need to serve you:

• Reservations: your name, phone number, email, party size, date, time, and any special requests you choose to add.
• Orders: the items you select and the contact details you provide for pickup.
• Technical data: basic, standard server logs (such as IP address and request time) used for security and to prevent abuse.

We do not sell your data, we do not use it to retarget or personalise ads to you, and we do not use it to make solely automated decisions about you.

If you accept it in the privacy notice shown on your first visit, we use Google Analytics to understand which pages people find useful, how visitors reach the site, and which of our contact options they use. This sets a first-party cookie in your browser and shares your IP address and page activity with Google as our processor.

We also advertise on Google. Google Ads cookies let us see whether someone who clicked one of our ads went on to book, call or message us, so we can tell which ads are worth paying for. We use this only to measure our ads. We do not enable ad personalisation or remarketing, so we do not follow you around the web with ads, and we do not combine any of it with your reservation details.

You can decline it. If you do, the analytics cookie is removed from the equation entirely: nothing identifying you is stored in your browser, and what reaches us is an anonymous count that cannot be linked to you or followed between visits. The rest of the site works exactly the same. You can change your mind at any time by clearing this site's storage in your browser, which brings the notice back.

Visitors in the EEA, the UK and Switzerland are opted out by default and analytics only begins if they accept.

We process your personal data on the basis of your consent, given when you submit a reservation or order, and for the certain legitimate uses permitted under the DPDP Act. We use it only to:

• manage and confirm your reservation or order;
• contact you about that reservation or order;
• operate, secure, and improve the restaurant's service.

We will not use your data for a new, unrelated purpose without asking you first.

You may withdraw your consent at any time by contacting us (details below). Withdrawing consent is as easy as giving it, and does not affect processing already carried out. Where consent is withdrawn, we will stop processing and erase your data unless we are required to retain it by law.

Aside from the optional analytics cookie described above, we use your browser's local storage for strictly functional purposes:

• remembering the reference of a reservation or order you made, so you can see its live status without an account;
• remembering your name, phone, and email for the booking form by default so you don't have to retype them. This stays on your device only; tick "Don't remember my details" to switch it off, which removes anything stored immediately;
• recording that you have seen this privacy notice.

This information lives only in your browser. You can clear it any time from your browser settings.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it;
• Correction & erasure of your personal data that is inaccurate, incomplete, or no longer needed;
• Grievance redressal from us in the first instance;
• Nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, contact our Grievance Officer below. We respond within the timelines required by law.

Booking and order data is stored with our hosting provider on servers located in India. Data is transmitted over encrypted HTTPS connections, access to the management dashboard is restricted to authorised staff, and submissions are rate-limited to protect against abuse. If a personal-data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.

We retain reservation and order records only as long as needed to operate the restaurant and to meet legal or accounting obligations, after which they are erased or anonymised.

This site is intended for adults making dining arrangements. We do not knowingly process the personal data of anyone under 18 without the verifiable consent of a parent or guardian, and we do not track, profile, or target advertising at children. If you believe a child has provided us data, contact us and we will erase it.

For any question, request, or grievance about your personal data, contact our Grievance Officer:

The Sorrento, Mysuru, Karnataka, India
Phone: +91 86607 67018

If you are not satisfied with our response, you may raise the matter with the Data Protection Board of India.

We may update this policy as the restaurant or the law changes. The "last updated" date above reflects the latest revision; material changes will be highlighted on this page.