Privacy & Cookie Policy

The Sorrento is an Italian & Mediterranean restaurant in Mysuru, Karnataka, India. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), The Sorrento is the Data Fiduciary that determines how and why your personal data is processed through this website. This policy explains what we collect, why, how we protect it, and the rights you have as a Data Principal.

We collect only what we need to serve you:

• Reservations: your name, phone number, email, party size, date, time, and any special requests you choose to add.
• Orders: the items you select and the contact details you provide for pickup.
• Technical data: basic, standard server logs (such as IP address and request time) used for security and to prevent abuse.

We do not run third-party advertising or behavioural tracking, we do not sell your data, and we do not use it to make solely automated decisions about you.

We process your personal data on the basis of your consent, given when you submit a reservation or order, and for the certain legitimate uses permitted under the DPDP Act. We use it only to:

• manage and confirm your reservation or order;
• contact you about that reservation or order;
• operate, secure, and improve the restaurant's service.

We will not use your data for a new, unrelated purpose without asking you first.

You may withdraw your consent at any time by contacting us (details below). Withdrawing consent is as easy as giving it, and does not affect processing already carried out. Where consent is withdrawn, we will stop processing and erase your data unless we are required to retain it by law.

Instead of tracking cookies, we use your browser's local storage for strictly functional purposes:

• remembering the reference of a reservation or order you made, so you can see its live status without an account;
• keeping items in your cart between pages;
• optionally remembering your name, phone, and email for the booking form, only if you tick "Remember my details". This stays on your device and is removed the moment you untick it;
• recording that you have seen this privacy notice.

This information lives only in your browser. You can clear it any time from your browser settings.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it;
• Correction & erasure of your personal data that is inaccurate, incomplete, or no longer needed;
• Grievance redressal from us in the first instance;
• Nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, contact our Grievance Officer below. We respond within the timelines required by law.

Booking and order data is stored with our hosting provider on servers located in India. Data is transmitted over encrypted HTTPS connections, access to the management dashboard is restricted to authorised staff, and submissions are rate-limited to protect against abuse. If a personal-data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.

We retain reservation and order records only as long as needed to operate the restaurant and to meet legal or accounting obligations, after which they are erased or anonymised.

This site is intended for adults making dining arrangements. We do not knowingly process the personal data of anyone under 18 without the verifiable consent of a parent or guardian, and we do not track, profile, or target advertising at children. If you believe a child has provided us data, contact us and we will erase it.

For any question, request, or grievance about your personal data, contact our Grievance Officer:

The Sorrento, Mysuru, Karnataka, India
Phone: +91 86607 67018

If you are not satisfied with our response, you may raise the matter with the Data Protection Board of India.

We may update this policy as the restaurant or the law changes. The "last updated" date above reflects the latest revision; material changes will be highlighted on this page.