Privacy policy

Last updated: October 2026

1. Data controller

Controller: LA PURA PURITA S.L, Tax ID B13860663

Address: Calle Turia 36, 46008 Valencia

Contact email: hola@defectobar.com

2. What data we process

Bookings: name, phone, email, number of guests, date, time and any notes you write.

Allergies or intolerances: only if you tell us in the notes, to prepare your visit.

Visit history: previous bookings, whether you came, and internal staff notes related to the service.

Enquiries: the details you send us by email, phone or WhatsApp.

Technical data: basic server logs (IP address, browser, date) for security.

3. Why we use it and on what legal basis

Managing your booking and emailing you the confirmation, changes and cancellation: performance of the booking you request (art. 6.1.b GDPR).

Catering for allergies or intolerances: your explicit consent when you tell us (art. 9.2.a GDPR). You can withdraw it at any time.

Running the service (visit history, no-shows and, where relevant, restricting new bookings): our legitimate interest in managing capacity and preventing unattended bookings (art. 6.1.f GDPR).

Answering your enquiries: your request and our legitimate interest in replying.

Website security: legitimate interest.

We do not use your data to send you advertising and we do not build commercial profiles.

4. How long we keep it

Booking data is kept for as long as needed to run the service and for no more than 24 months after your last visit, unless the law requires us to keep it longer. Server logs are deleted after 30 days.

5. Who we share it with

We do not sell or hand over your data. Only service providers working for us access it, under a data processing agreement:

Website hosting: [hosting provider to be added].

Sending booking emails: Resend (United States).

When you visit pages with third-party content, such as the Google map or the Fora Wine digital wine list, those providers receive your IP address. See the Cookie policy.

6. International transfers

Sending emails through Resend may involve transferring data to the United States, covered by the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to hola@defectobar.com and saying which right you wish to exercise. If you feel we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. Minors

Online bookings are for people aged 14 and over. If you are younger, please ask an adult to book for you.

9. Changes

We may update this policy to reflect changes in the law or in our service. The date of the latest update is shown at the top of this page.