Who This Policy Covers
This Privacy Policy explains how Cafe Eighteen (“Cafe Eighteen,” “we,” “us” or “our”), located at Vinodeep Towers, Plot No. 37/88, Baricho Road, Industrial Area, Nairobi, 00100, Kenya, collects, uses, shares and protects personal information.
It applies to:
- Visitors who browse our website;
- Customers who submit table reservations, place orders or contact us through the website, by phone or by email.
We handle personal data in line with the Kenya Data Protection Act, 2019 and other applicable laws.
Information We Collect
Information you give us directly
- Your name, phone number and email address;
- Reservation details, such as date, time, party size and any special requests (for example, dietary needs or celebrations);
- Order details, such as the items you select, pickup times and order notes;
- Anything you choose to include when you contact us.
Information collected automatically
When you visit our website, we and our analytics providers automatically collect some technical information through cookies and similar technologies, including:
- Your IP address and approximate location derived from it;
- Browser type, device type and operating system;
- Pages you visit, the time spent on them, the referring website and the links you click.
How We Use Your Information
- To process, confirm and manage your reservations and orders;
- To contact you about your booking or order, for example to confirm a time or tell you about a change;
- To answer your questions and requests;
- To understand how the website is used and to improve its content, speed and usability;
- To keep the website secure and prevent fraud or misuse;
- To meet our legal and accounting obligations.
We will only send you marketing messages if you have agreed to receive them, and you can unsubscribe at any time.
Data Retention & Security
We keep personal information only as long as we need it for the purposes described in this policy. Reservation and order records are generally kept for up to 24 months. Records we need for tax or accounting reasons are kept for as long as the law requires. Analytics data is kept in line with the retention settings of the analytics provider, which is usually no more than 14 months.
We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) connections, access controls and working only with trusted service providers. No method of sending or storing data is completely secure, so we cannot guarantee absolute security.
Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Be told how your personal data is used;
- Access the personal data we hold about you;
- Ask us to correct data that is wrong or misleading;
- Ask us to delete your data, where the law allows;
- Object to processing, including for direct marketing;
- Withdraw your consent at any time, where we rely on consent.
To make a request, contact us using the details below. We will respond within the time the law allows. If you are unhappy with how we have handled your data, you can also complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
Vinodeep Towers, Plot No. 37/88
Baricho Road, Industrial Area
Nairobi, 00100, Kenya
Phone: +254 722 847 316
Email: privacy@cafeeighteen.co.ke
Changes to This Policy
We may update this Privacy Policy from time to time, for example if we change how we use cookies or add new services. When we do, we will post the updated version on this page and change the “Last updated” date. If the changes are significant, we will make that clear on our website.
Last updated: 21 October 2026