Privacy Notice

Who we are

Cater & Co LDA, trading as Cater & co. Marginal, Jardim Centenario, Maputo. Privacy questions: info@caterco.net.

What this website does

• You can browse the catering menu and send a quote request. A quote request is an enquiry: it is not a booking, nothing is charged and no date is reserved.
• There are no online payments and we collect no payment details.
• When you send a request, the website emails a notification of it to our team (your name, contact details, event details, notes and selection) so that we can reply. The website sends no email to you.
• We do not use your details for marketing and the website has no newsletter.

What we collect

• Required: full name, email address, event type, event date, number of guests, event location, the menu items and quantities you chose (with the prices shown at that time), and your tick-box agreement to be contacted with the time you gave it.
• Optional: phone number, notes and dietary notes. Please do not put sensitive information in the free-text boxes unless it is needed; dietary notes can reveal health information, for example an allergy.
• Automatic: a reference number starting “CC-” and a random submission token so that an accidental double send is stored once.
• Our staff may add an internal status and internal notes to your request.

Technical data and abuse protection

To stop spam, the server counts how often a connection and an email address submit requests. The counters store only keyed hashes of the connection identifier and of your email address, with a counter and an expiry time; the raw IP address is not written to our database and the counters expire within about a day. A hidden form field is used to detect automated submissions. Error logs contain only fixed event names and an error type, not your details. The website is delivered through Cloudflare, which processes visitors’ IP addresses to deliver and protect the site.

Cookies and similar storage

Visitors receive no cookies from this website and we use no analytics, advertising or tracking tools. Your browser’s local storage keeps your menu selection (item numbers and quantities only) so that it survives a page reload; it contains no contact details and you can clear it in your browser. Our staff area uses strictly necessary sign-in cookies that are not used for tracking.

Who can see your details and where they are processed

• Our staff with the owner or quote-manager role can see the contact details and notes of a request. Staff sign in with a password and an authenticator code, and their actions on requests are recorded in an audit trail that holds identifiers and status names, not your contact details.
• We do not sell your data.
• Database: Neon, in Frankfurt, Germany. Website delivery and a small state store: Cloudflare. Notification email: Resend, which processes data primarily in the United States and keeps sent-message logs for 30 days on its free plan.
• These providers are outside Mozambique, so your details are processed outside Mozambique.

How long we keep it

• Quote requests, their selected items, notification records and the staff audit trail are kept for up to 24 months after we receive them and are then deleted. At present this deletion is carried out by us manually; it is not yet automatic.
• We keep an encrypted daily backup: 14 daily and 8 weekly copies, about two months. Data deleted from the live database leaves the backups when the oldest copy that contains it expires.
• Staff sign-in sessions expire after 30 minutes without use or 8 hours at most.

Your choices

You can ask to see, correct or delete the details in your request, or ask us to stop contacting you, by writing to info@caterco.net. There is no self-service page for this; our staff handle it manually.

Changes

We will update this page and its date if how the website handles your details changes.