.png)
Privacy Policy
Last updated: 27 July 2026
Latteria Pte. Ltd. (UEN: 200912414R), trading as Casa Latteria ("we", "us", "our" or "Casa Latteria"), respects your privacy and is committed to protecting your personal data in compliance with the Singapore Personal Data Protection Act 2012 ("PDPA").
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit www.casalatteria.com (the "Website") or interact with us.
1. Who we are (Data Controller)
Legal entity: Latteria Pte. Ltd. (UEN 200912414R), trading as Casa Latteria
Registered office: 4 Cairnhill Rise, #03-02, The Cairnhill, Singapore 229740
Primary activity (SSIC): 56111 – Restaurants
Website: www.casalatteria.com
Hosting provider: Wix.com Ltd.
2. Data Protection Officer
We have appointed a Data Protection Officer (DPO). All privacy enquiries, requests and complaints should be directed to our DPO:
DPO: Giuseppina Stilli
Email: info@casalatteria.com
3. What personal data we collect
Depending on how you interact with our Website, we collect the following categories of personal data:
Category | Examples | When collected
Identity & contact data | Name, email address, phone number | Contact/inquiry forms, reservation/booking forms, event enquiries
Reservation & dining data | Date/time of booking, party size, special requests, dietary preferences | Online reservation or booking form
Marketing data | Email address, mobile number, subscription preferences, language | Newsletter sign-up
Communications data | Messages you send us | Contact forms, email, WhatsApp
Technical & usage data | IP address, browser type, device type, operating system, pages viewed, referring URL, timestamps, approximate location | Automatic collection via cookies and Wix analytics
Account & payment data | Billing address, payment card details (processed by Stripe/PayPal — we do not store full card data) | Online orders
We do not knowingly collect personal data from anyone under 18 years of age. If you are under 18, please do not submit any personal data through the Website.
4. How we collect your data
Directly from you – when you fill in forms on the Website, make a reservation, sign up for our newsletter, or email/call us.
Automatically – through cookies, server logs and analytics tools as you browse the Website.
5. Purposes of collection, use and disclosure (PDPA §18 – Consent Obligation)
We collect, use and disclose your personal data for the following purposes ("Purposes"):
1. To operate the Website and provide its core features (reservations, contact responses, displaying menus, location/Google Maps).
2. To send service messages related to your reservation (confirmations, day-of reminders, post-visit feedback requests). These are operational communications.
3. To respond to your enquiries submitted via contact, reservation or event request forms.
4. To confirm and manage reservations, bookings and dining services.
5. To send you marketing communications (newsletter, promotions, events) — only if you have opted in; you may unsubscribe at any time.
6. To analyse Website usage and improve content, layout, menus and user experience.
7. To comply with legal, regulatory and tax obligations applicable to our business in Singapore.
8. To detect and prevent fraud, abuse or security incidents.
9. To establish, exercise or defend legal claims.
We will not use your personal data for any purpose that is not listed above without first obtaining your further consent.
6. Disclosure of your personal data
We may disclose your personal data to the following categories of recipients, only as needed to fulfil the Purposes:
- Wix.com Ltd. – our website hosting and platform provider (stores form submissions, reservation data and website analytics).
- Payment processors (e.g. Stripe, PayPal) – only when you make a payment through the Website.
- Email/marketing platforms used to deliver our newsletter.
- Google – if we embed Google Maps on the contact page and, if enabled, Google Analytics or Google Ads.
- Meta (Facebook/Instagram) – if we embed Meta Pixel, social plugins or run ads.
- Professional advisors – auditors, lawyers, accountants
- Government authorities, courts or law enforcement – where required by Singapore law.
- A successor entity in the event of a merger, acquisition or reorganisation of Latteria Pte. Ltd.
We do not sell your personal data.
7. Consent and how to withdraw it (PDPA Part 4)
By submitting personal data through forms on the Website, you consent to our collection, use and disclosure of that data for the Purposes set out in this Policy.
For marketing communications, we use an opt-in model. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by emailing our DPO at info@casalatteria.com.
You may withdraw your consent at any time by contacting our DPO. Withdrawal will not affect any use of your data that was already lawful before withdrawal, and we may need to retain certain records where required by law.
8. Your rights under the PDPA
You have the following rights in respect of your personal data:
Right of access – Request a copy of the personal data we hold about you.
Right of correction – Ask us to correct any inaccurate or incomplete personal data.
Right to withdraw consent – Withdraw consent for any purpose that was consent-based.
To exercise any of these rights, email our DPO at info@casalatteria.com. We will respond to your request as soon as reasonably possible, and in any case within 30 days. If we are unable to respond within 30 days, we will inform you in writing of the revised timeframe and the reason for the delay. We may need to verify your identity before acting on the request, and we may charge a reasonable fee only where the request is frivolous or vexatious.
9. Accuracy of personal data (PDPA §22)
We rely on you to provide accurate and complete information. Please inform us promptly of any change to your personal data so that we can keep our records accurate.
10. Protection of personal data (PDPA Part VI – Protection Obligation)
We take reasonable steps to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include:
- Selecting reputable service providers (Wix) that implement industry-standard encryption (TLS/SSL) and access controls.
- Limiting internal access to personal data on a need-to-know basis.
- Using secure forms and restricting the types of sensitive data we collect.
While we take reasonable measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
11. Notification of data breaches (PDPA Part VIA – effective from 1 Oct 2024)
The Personal Data Protection (Notification of Data Breaches) Regulations 2021 require us to notify the PDPC and, in some cases, affected individuals when a data breach is "notifiable" — that is, a breach that is likely to result in significant harm to an individual, or a breach of significant scale.
If a notifiable data breach occurs, we will:
(a) Assess whether the breach is notifiable within 30 days of becoming aware of it. (b) Notify the Personal Data Protection Commission (PDPC) as soon as practicable, and in any event within 72 hours (3 calendar days) after our assessment that the breach is notifiable. (c) Notify affected individuals as soon as practicable where the breach is likely to result in significant harm to them, so they can take steps to protect themselves.
12. Cookies and similar technologies
Our Website uses cookies and similar technologies provided by Wix and, where enabled, third-party services (e.g. Google Analytics, Meta Pixel). Cookies are small text files placed on your device.
We use the following categories of cookies:
- Strictly necessary cookies – required for the Website to function (e.g. remembering your reservation form inputs, session security). These cannot be disabled.
- Analytics & performance cookies – help us understand how visitors use the Website so we can improve it (e.g. Wix Analytics, Google Analytics).
- Marketing cookies (only with your consent) – used to measure advertising effectiveness or personalise content.
You can manage cookie preferences via your browser settings or the consent banner presented when you first visit the Website. Note that disabling certain cookies may affect Website functionality.
13. International data transfers
Personal data collected through the Website is stored and processed on Wix's global infrastructure, which may include servers located outside Singapore (including the United States and the European Economic Area). By using our Website, you understand that your data may be transferred to, stored and processed in jurisdictions other than Singapore.
We rely on Wix's contractual and security commitments to provide a comparable standard of protection in line with PDPA requirements.
14. Retention of personal data
We apply the retention-limitation principle under the Singapore Personal Data Protection Act. We will stop retaining your personal data once (a) the original purpose for collecting it no longer requires it and (b) there is no longer any business or legal reason to keep it.
However, we do not delete records on a fixed automatic schedule. We continue to retain records while any of the following still applies:
Ongoing operational need – recognising repeat customers, recalling dining preferences, responding to follow-up questions
Security and fraud prevention – maintaining site-activity logs to investigate incidents
Legal and regulatory obligation – e.g. Singapore tax law requires invoice and revenue records to be kept for at least 5 years from the relevant Year of Assessment
Pending or reasonably anticipated legal claim – retention is permitted where the record may be needed as evidence
We perform an internal review of the data we hold at least once a year to confirm that each category continues to satisfy one of the reasons for retention listed above. Any data that no longer qualifies is securely deleted or anonymised.
15. Third-party links
The Website may contain links to third-party websites (e.g. social media, mapping services). We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of every website that collects your personal data.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. The "Last updated" date at the top will indicate when the latest revisions took effect. Material changes will, where appropriate, be notified via the Website or by email.
17. Do Not Call (DNC) Registry
We comply with the Do Not Call (DNC) provisions of the PDPA. Before sending marketing voice calls, SMS or fax messages to a Singapore telephone number, we check the national Do Not Call Registry unless the individual has given clear and unambiguous consent to receive such messages. Service messages directly related to a confirmed reservation (e.g. appointment reminders) are treated as transactional and not subject to the DNC check.
18. Governing law
This Privacy Policy is governed by the laws of the Republic of Singapore, and any dispute relating to it or to your personal data will be subject to the jurisdiction of the Singapore courts, with the Personal Data Protection Commission (PDPC) as the relevant supervisory authority.
18. How to contact us
For any questions, requests, complaints, or to exercise your rights under the PDPA, please contact our Data
Protection Officer:
Giuseppina Stilli – Data Protection Officer
Email: info@casalatteria.com
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.