Privacy Policy

We are delighted that you have shown interest in Cedar Tree Catering. Data protection is a high priority for our management. This Privacy Policy explains what personal data we collect through this website, how we use it, and the rights you have in relation to it.

Where required, our processing of personal data complies with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and, where a visitor is located in the European Economic Area, the EU General Data Protection Regulation (“GDPR”).

Although Internet-based data transmissions can never be guaranteed to be completely secure, we have implemented reasonable technical and organisational measures to protect personal data processed through this website. If you would prefer not to submit personal data online, you are welcome to contact us directly by phone instead.

1. Who we are

The controller responsible for the personal data described in this policy is:

Cedar Tree Hospitality

Al Quoz, Street 21 9b, Dubai, United Arab Emirates

Email: admin@cedartreecatering.ae
Phone:

Website: cedartreecatering.ae

Any questions or requests relating to this Privacy Policy can be sent to the contact details above.

2. Key terms

Personal data — any information relating to an identified or identifiable individual (e.g. name, phone number, email address).
Processing — any operation performed on personal data, whether by automated means or not (collection, storage, use, disclosure, deletion, etc.).
Consent — a freely given, specific, informed indication of your agreement to processing of your personal data.
Third party — any person or entity other than you and Cedar Tree.

3. What personal data we collect

Depending on how you interact with our website, we may collect:

Enquiry and quote-request data: name, email address, phone number, event type (corporate or private), event date and details, and any message content you submit through our enquiry form.
Consent records: when you tick the box confirming you have read and accept the Privacy Policy, and separately, if you opt in to receive future updates, we record both of those choices along with your contact details.
Online order data: if you place an order through Click & Eat, we collect delivery address, order details, and payment confirmation (processed by our secure payment gateway — we do not store full card numbers).
Communication records: if you email, call, or message us via WhatsApp, we keep a record of that correspondence to respond to you and manage the relationship.
Technical and security data: browser type and version, operating system, referring website, pages visited, date and time of access, and IP address, collected automatically via server logs, analytics tools, and our hCaptcha spam-prevention check.

4. How and why we use your data

We do not sell personal data to third parties.

Purpose	Legal basis
Responding to enquiries and quote requests	Necessary for pre-contractual steps / legitimate interest
Processing and delivering Click & Eat orders	Performance of a contract
Delivering catering services once a booking is confirmed	Performance of a contract
Sending event and promotional updates	Consent (where you have opted in)
Verifying enquiries are genuine (hCaptcha)	Legitimate interest
Operating, securing, and improving this website	Legitimate interest
Complying with legal or tax obligations	Legal obligation

5. Cookies

Our website uses cookies to support functionality and to understand how visitors use the site. Full details of the cookies we use, their purpose, and how to manage them are set out in our separate Cookie Policy.

6. Analytics, security, and advertising tools

We use tools such as Google Analytics and Google Tag Manager to understand website traffic and usage, and may use Google Ads/remarketing or similar tools to show relevant advertising to previous visitors. Our enquiry form is protected by hCaptcha, a third-party service that helps prevent spam and abuse; use of hCaptcha is subject to its own privacy policy and terms of service. These tools may set cookies and receive technical data such as your IP address, which may be processed outside the UAE, including in the United States. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout), and can manage Google ad personalisation at adssettings.google.com.

7. Payment processing

Where you place an order through Click & Eat, your payment is handled by a secure third-party payment gateway supporting Visa and Mastercard. That provider processes your card details directly and in accordance with its own privacy and security standards; Cedar Tree does not store your full card number on its own systems.

8. Social media and messaging

We maintain a presence on Facebook, Instagram, and LinkedIn, and offer a direct WhatsApp contact option. If you interact with embedded social content, follow us, or message us through these channels, the relevant platform’s own privacy policy governs how it processes your data:

Facebook / Meta: facebook.com/privacy/policy/
Instagram / Meta: instagram.com/about/legal/privacy/
LinkedIn: linkedin.com/legal/privacy-policy
WhatsApp / Meta: whatsapp.com/legal/privacy-policy

9. Sharing your data

We share personal data only with:

Staff and contractors of Cedar Tree who need it to respond to your enquiry, process your order, or deliver a booked service;
Service providers who support our website, payments, and communications (e.g. hosting, email, analytics, payment gateway, hCaptcha), acting on our instructions;
Authorities, where required by law.

We do not transfer personal data to third parties for their own independent marketing purposes.

10. International transfers

Where data is processed by service providers located outside the UAE (for example, analytics, security, or hosting providers based in the United States or European Union), we take reasonable steps to ensure it is handled in line with this Policy and applicable data protection law.

11. How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected — for example, enquiry data is generally kept for a reasonable period to respond to and follow up on your request, and order/booking data is retained in line with our contractual and tax record-keeping obligations. Marketing data is kept until you withdraw consent.

12. Your rights

Subject to applicable law, you may have the right to:

Confirm whether we hold personal data about you, and obtain a copy of it;
Request correction of inaccurate or incomplete data;
Request erasure of your data, where there is no legal reason for us to keep it;
Object to or restrict certain processing, including direct marketing;
Withdraw consent at any time, without affecting processing carried out before withdrawal;
Request data portability, where applicable.

To exercise any of these rights, contact us at admin@cedartreecatering.ae. You may unsubscribe from marketing communications at any time using the link in any marketing email or by contacting us directly.

13. Children

Our website and services are not directed at children, and we do not knowingly collect personal data from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the effective date shown below.

15. Contact us