Privacy notice
Short version. This website has no cookies, no tracking and no ads. It collects two things: what you type into the booking form, which reaches us as an email, and the basic technical logs every web server keeps for a short time. We use your details to answer your enquiry and organise your event, and for nothing else. We never sell them and never use them for marketing.
The rest of this page is the long version, which the law (Article 13 of the EU General Data Protection Regulation, the “GDPR”) asks us to give you.
1. Who we are
HUP ENTERPRISES LTD, trading as Hungry Up, is the “controller” of your personal data. That means we decide how it is used, and we are responsible for it.
- Legal name: HUP ENTERPRISES LTD, a private limited company
- Registration number: HE 459152
- Registered office: Kallitheas 3, Flat 002, 8035 Paphos, Cyprus
- Email: hungryupbyargos@gmail.com
- Phone: +357 99 875581 or +357 99 985440
- WhatsApp: +357 99 875581
We are a small business and are not required to appoint a Data Protection Officer, so please write to us directly about anything on this page.
2. What we collect
When you send the booking form
- Always: your name, phone number and email address.
- If you fill them in: the type of event, the date, roughly how many guests, where it is, and anything you write in the message box.
- The tick box confirming you have read this notice (section 3 explains what it means).
- Technical details that travel with anything sent over the internet: your IP address, the time, your browser, and the page you sent the form from. Your browser sends the form straight to Web3Forms, the service that delivers it to us, so Web3Forms and its spam filters receive these (see section 4).
Please do not put health information in the form, such as a guest’s allergy. If allergies matter for your event, we will talk about them when we plan the menu. We only need to know what to leave out, not who it is for.
When you contact us another way
If you call us, WhatsApp us, email us or message us on Instagram, we receive what you send and your number, address or account name. We treat that exactly like a form enquiry. WhatsApp and Instagram belong to Meta, which handles your use of its apps under its own privacy policy.
When you visit any page
Our web server writes a line to its log for every request: your IP address, the date and time, the page or file asked for, the website that sent you here (if your browser says), your browser and device type as your browser reports them, and the other details every browser sends with a request, such as your preferred language, plus whether the request worked. Our hosting provider’s network keeps a similar log as the traffic passes through it. We do not use these logs to work out who you are, and we never combine them with enquiries.
What we do not collect
No cookies, no analytics, no advertising or social media trackers, and nothing stored in your browser. Our fonts and photos come from our own server, so opening a page does not contact Google or anyone else. That is why we do not ask you to accept cookies.
The “Where to find us next” dates come from our own public Google Calendar. Our server reads the calendar; your browser only talks to our website, so nothing about you is sent to Google.
3. Why we use it, and the legal basis
- Your enquiry and contact details
- To reply with a quote, ask any follow-up questions and plan your event.
- Legal basis: Article 6(1)(b) GDPR, because you asked us to take steps before a possible contract.
- Your booking, once you book
- To cater the event, invoice you and get paid.
- Legal basis: Article 6(1)(b), to carry out our contract with you.
- Invoices and booking records
- Tax and accounting law requires us to keep them.
- Legal basis: Article 6(1)(c), a legal obligation.
- An enquiry you send for your employer or another organisation
- To answer a business that asked us for a quote.
- Legal basis: Article 6(1)(f), our legitimate interest in replying to business enquiries.
- Server logs
- To keep the site working and secure, spot abuse and fix errors.
- Legal basis: Article 6(1)(f), our legitimate interest in a working, secure website.
- Spam checks on the form
- To keep junk and abuse out of our inbox.
- Legal basis: Article 6(1)(f), our legitimate interest in receiving real enquiries.
- Keeping records if there is a dispute
- To establish, exercise or defend legal claims.
- Legal basis: Article 6(1)(f), our legitimate interest in protecting the business.
Where we rely on legitimate interests, we have weighed them against yours: the data involved is the minimum, it is kept for a short time, and it is used only for the purpose given above.
About the tick box. The tick box on the form is there so you can confirm you have read this notice before you send. It is not “consent” in the legal sense, and we do not rely on it: we use your details because you asked us for a quote. You can still tell us at any time to stop contacting you, and we will.
Do you have to give us your details? No. But we need a name, a phone number and an email address to answer an enquiry, so the form will not send without them. Everything else is optional, and you can always call or WhatsApp us instead.
We make no decisions about you by purely automated means, and we do not profile you. Web3Forms filters spam automatically; if a message from you ever seems not to have reached us, call or WhatsApp us.
4. Who receives your data
We do not sell, rent or share your details for marketing. Only these receive them:
- Web3Forms (run by Web3Creative, India) receives the form, checks it for spam and forwards it to our inbox as an email. It works for us under a data processing agreement. To check for spam it passes your IP address and email address to CleanTalk Inc. and Automattic Inc. (Akismet), and it runs on Amazon Web Services, Cloudflare and Hetzner. Its own privacy policy is at web3forms.com/privacy.
- Google (Google Ireland Limited) provides our email inbox, where enquiries arrive and where we reply from.
- Railway (Railway Corporation, United States) hosts this website and keeps its server logs. It works for us under a data processing agreement.
- Our accountant, and the Cyprus Tax Department where the law requires it, see invoices and booking records if you book.
- Meta (WhatsApp, Instagram), only if you choose to contact us there.
- Courts, police or other authorities, only if the law requires us to share something.
5. Transfers outside the EU
Some of these services store or access data outside the European Economic Area (EEA):
- Web3Forms is run from India and stores submissions mainly on Amazon Web Services servers in the United States. India does not have an EU “adequacy decision”, so Web3Forms’ data processing agreement includes the EU Standard Contractual Clauses for these transfers. Its US spam filters and infrastructure providers state that they take part in the EU-U.S. Data Privacy Framework.
- Railway has its main operations in the United States, and relies on the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses.
- Google may store email in data centres outside the EEA, including in the United States. Google LLC takes part in the EU-U.S. Data Privacy Framework, and Google also uses the Standard Contractual Clauses.
The EU-U.S. Data Privacy Framework is an EU adequacy decision (Commission Implementing Decision (EU) 2023/1795) covering US companies that sign up to it. The Standard Contractual Clauses are the EU’s standard data protection contract (Commission Implementing Decision (EU) 2021/914). Ask us and we will send you a copy of the safeguards that apply.
6. How long we keep it
- An enquiry that does not lead to a booking
- We delete it 12 months after the date of your enquiry. If you ask, we delete it sooner.
- We keep it that long because enquiries often come back months later (an event that moved, or the same party next year), and this saves you telling us everything again.
- An enquiry that leads to a booking
- We delete it 12 months after the date of the event. The invoice and our record of the booking are kept for longer, as the next item explains.
- Invoices and booking records
- As long as tax and accounting law requires us to keep business records: currently 6 years, counted from the tax return deadline for the year of your event, or from the day the return was filed if it was filed late. If there is a dispute, until it is settled.
- The copy Web3Forms keeps
- 30 days, then deleted automatically.
- Spam-check data at CleanTalk and Akismet
- CleanTalk: about 7 days, then anonymised. Akismet: between two weeks and 90 days for most of it, then deleted automatically.
- Server logs
- Deleted automatically after a fixed period set by our hosting plan.
- Phone, WhatsApp, email and Instagram messages
- The same as an enquiry, above.
7. Your rights
You have these rights over your personal data:
- Access: ask whether we hold anything about you, and get a copy.
- Rectification: have anything wrong or incomplete corrected.
- Erasure: have your data deleted. We will, unless the law makes us keep it (invoices, for example).
- Restriction: ask us to keep your data but stop using it for a while, for example while we check that it is correct.
- Portability: receive the details you gave us for a quote or a booking in a common electronic format, or have us send them to someone else.
- Objection: object to how we use your data where we rely on our legitimate interests (see the box below).
- Withdrawing consent: nothing on this website relies on your consent. If we ever ask for it (say, to post a photo of your event), you can withdraw it at any time. That does not affect anything we did before you withdrew it.
- No automated decisions: you have the right not to be subject to decisions made solely by automated means, including profiling, that have legal or similarly significant effects on you. We make no such decisions.
Your right to object. Where we use your data because of our legitimate interests (enquiries sent on behalf of an organisation, server logs, spam checks, and records kept in case of a dispute), you can object at any time, on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.
How to use your rights. Email us at hungryupbyargos@gmail.com. Call us on +357 99 875581 or +357 99 985440. Or message us on WhatsApp at +357 99 875581. It is free. We will answer within one month. If a request is complicated we may need up to two months more, and if so we will tell you why within the first month. We may ask you to confirm it is you, for example by writing from the email address or number you used with us. Our server logs contain no names, so to find your entries we need your IP address and the rough time of your visit.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to a data protection supervisory authority. In Cyprus that is the Office of the Commissioner for Personal Data Protection:
- Address: Kypranoros 15, 1061 Nicosia, Cyprus
- Post: P.O. Box 23378, 1682 Nicosia, Cyprus
- Phone: +357 22 818456
- Email: commissioner@dataprotection.gov.cy
- Website: gov.cy/dataprotection
- How to complain: Lodge a complaint, on the Commissioner’s website
If you live or work in another EU country, you can also complain to the authority there.
9. Keeping it safe
The whole site is served over an encrypted connection (HTTPS), and the booking form travels encrypted from your browser to Web3Forms.
10. Children
Booking a food truck is something adults do. This website is not aimed at children, and we do not knowingly collect children’s details. If you are under 18, please ask a parent or guardian to get in touch for you. If you think a child has sent us their details, tell us and we will delete them.
11. Links to other websites
This site links to other websites, such as WhatsApp, Instagram and, in our event listings, the organisers’ own pages. Once you follow a link, that website’s own privacy policy applies, not this one.
12. Changes to this notice
We update this page when the website or the services behind it change, and the date below shows the latest version. If we ever want to use your details for something new, we will tell you before we do.
Last updated: October 2026.