Privacy Notice

Courtesy translation. The Spanish version is the legally binding one under Mexican law.

Last updated: August 31, 2026.

1. Who is responsible for your data

Raúl Martínez Mejía, an individual with business activity, trading as La Casa de Todos
Calle López 15 C y D, esq. Independencia, Col. Centro, Cuauhtémoc, Ciudad de México
Phone: 55 5521 2435 · 55 5512 8009
Hours: Mon–Sat · 8:00 am – 5:30 pm

We are the controller of your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette on March 20, 2025.

2. What we collect

Only what we need to take and deliver your order:

  • Your 10-digit phone (WhatsApp) number, to identify your order and reach you.
  • Your name, to address you and deliver the right order.
  • Your delivery address, only when you request delivery.
  • Your order contents, requested time and special instructions.

We do not collect sensitive personal data, nor financial or asset information. Payment is made at the restaurant or on delivery: this site processes no payments and stores no banking information.

If you voluntarily note an allergy or dietary restriction in the special instructions field, that information may constitute health data. We use it solely to prepare your order, we do not keep it beyond the period in section 7, and providing it is not required.

3. What we use them for

Primary purposes, necessary to provide the service:

  • Receive, prepare and deliver your order.
  • Contact you if there is a question about your order or the delivery.
  • Recognize you when you order again, so you do not have to give everything twice.
  • Count how many orders are placed and which dishes are ordered most, using aggregate rather than individual data.

There are no secondary purposes. We do not use your data for advertising, we send no unsolicited promotions, and we do not profile you or make automated decisions about you.

4. When your data is stored and how your order is sent

Your data is stored in the restaurant's database at the moment you confirm the order on this page, before WhatsApp opens. This lets us have the order on record even if the message never arrives.

The site then opens WhatsApp on your device with your order already written out, and you decide whether to send it. If you do not send it, your data stays only in our database and you may request its deletion under section 8.

Once sent, the conversation takes place inside WhatsApp and is also governed by that platform's privacy policies, operated by Meta Platforms, Inc., which are outside this restaurant's control. This site does not connect to WhatsApp's servers: it only opens the app on your device.

5. How to limit the use or disclosure of your data

You may ask us at any time to stop using your data to recognize you on future orders, without affecting your ability to keep ordering. Just say so over WhatsApp, call the numbers in section 1, or ask at the restaurant. From then on your data will be used only for the order in progress and deleted once it is completed.

6. Who we share them with

No one. We do not sell, rent or transfer your personal data to third parties. Your data stays in the restaurant's database and is accessed only by staff authorized to run orders.

The only possible transfers are those set out in article 36 of the Law, which do not require your consent — among them, transfers legally required to safeguard a public interest or the administration of justice, or necessary to establish, exercise or defend a right in judicial proceedings.

7. How long we keep them

We keep your name, phone number, address and order history for 12 months from your most recent order.

Once that period ends, your data is blocked — no longer used, kept only to address any liability arising from its processing — and then deleted from our database. You may request deletion earlier at any time, under section 8.

8. Your ARCO rights

You have the right to Access your personal data, Rectify it when inaccurate or incomplete, Cancel it when you consider it is not needed for the purposes in this notice, and Object to its processing on legitimate grounds. You may also withdraw your consent at any time.

How to exercise them. Call 55 5521 2435 or 55 5512 8009 or come to the restaurant during business hours. We will ask you for:

  1. Your name and a means of giving you our answer.
  2. A document proving your identity, or legal representation where applicable.
  3. A clear description of the data concerned and which right you wish to exercise.

Deadlines. We will communicate our decision within a maximum of twenty days from receiving your request. If it is well founded, it will take effect within the following fifteen days. Both periods may be extended once by an equal period where circumstances justify it, which we will notify you.

There is no charge for handling your request. We may only charge justified shipping costs or the cost of reproduction in copies or other formats.

9. If you are not satisfied with our answer

If you believe your right has been infringed, or you receive no answer within the above deadlines, you may file a data protection request with the Secretariat for Anti-Corruption and Good Government, the authority that took over these functions, within fifteen days of the date we communicate our answer, or once our response deadline has passed.

10. Cookies

This site uses strictly necessary first-party cookies: one stores the language you chose, Spanish or English, and another keeps the restaurant's admin panel session. We use no advertising, tracking or third-party cookies, and there are no external analytics tools.

We do count, on our own server, how many times each screen is viewed and at which step of the assistant orders stop, so we know what to improve. That count uses no cookies and no identifiers: only a daily total is stored —for example «40 people opened the assistant»— with no time, no IP address and nothing that could reveal who anyone was, not even to us.

If you tick «Remember me» when placing an order, a third cookie is added so you don't have to type your phone number next time. That cookie holds neither your phone number nor your address: it stores only a random identifier that means nothing on its own, and that only our server can link back to you. It is created only if you tick the box, lasts one year, and you can remove it whenever you like with the «Not me» button in the order assistant, or by clearing the site data in your browser.

11. Security

We apply reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized processing. The site runs over an encrypted connection (HTTPS) and access to the admin panel is restricted by passcode.

12. Changes to this notice

Any change will be published on this same page, stating the date it was last updated. We suggest reviewing it periodically before placing a new order.