Legal
Privacy Policy
Last updated May 28, 2026
This Privacy Policy explains how Casa de Flora Bar collects, uses and protects information when you visit our website, make a reservation or interact with us. We collect only what we need to take care of you and to run our business.
1. Information We Collect
When you make a reservation, send an inquiry or sign up for updates we collect your name, email address, phone number, the booking details you provide (date, party size, special requests, dietary notes), and, for paid bookings, billing details processed through Square. We do not store full card numbers on our servers. When you browse the site we automatically collect technical information such as your IP address, device type and pages visited.
2. How We Use Your Information
We use your information to confirm and manage your bookings, send transactional emails (confirmations, status updates, payment receipts), respond to your inquiries, prevent fraud and abuse, comply with our legal obligations, and — only with your consent — send occasional updates about events, menu launches and special promotions.
3. Sharing With Third Parties
We share your information with the service providers that make our business run: Square processes payments; our SMTP provider delivers transactional and marketing email; our analytics provider helps us understand site usage in aggregate. These providers are contractually bound to use your information only for the services they provide to us. We never sell your personal information.
4. Cookies & Analytics
We use a small number of cookies to keep the site functional (for example, to remember your admin login) and to measure traffic. You can disable cookies in your browser settings; doing so may break some features. We do not use cookies for cross-site advertising.
5. Marketing Emails
We will only send marketing email to addresses that have opted in. Every marketing email includes an unsubscribe link, and you can opt out at any time. Transactional emails (booking confirmations, status updates) are not affected by the marketing opt-out.
6. Data Retention
We keep booking and customer records for as long as necessary to provide our services, resolve disputes, and meet our legal and tax obligations — typically up to seven years from the date of the last interaction. You may request earlier deletion as described below.
7. Your Rights
You can ask us to confirm what information we hold about you, correct any inaccuracies, delete your personal data, or restrict how we use it. To make a request, email us using the details at the bottom of this page. We will respond within 30 days. If you are an EU/UK resident you also have the right to lodge a complaint with your local data protection authority.
8. Children's Privacy
Our site is intended for adults. We do not knowingly collect personal information directly from children under 13. Our summer enrichment program (for girls ages 10–18) is enrolled by a parent or guardian, who is responsible for the personal information shared on behalf of the participant.
9. Security
We use industry-standard safeguards to protect the information we hold, including encrypted connections (HTTPS) for the public site and the admin dashboard, hashed admin passwords, and one-time codes for admin login. No system is perfectly secure, but we work hard to limit access to the people who need it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of the page and, for significant changes, send a notice to customers who have opted in to email updates.
Contact Us
For any privacy question or request, email events@casadeflorabar.com, call (973) 606-0787, or write to Casa de Flora Bar, 73 & 75 Washington Street, Bloomfield, NJ 07003.