Privacy Policy – Prado 264
Last Updated: February 14, 2026

1. Introduction
Prado 264, located at 1514 Bardstown Rd, Louisville, KY 40205, operates the website prado264.com (“Site”). We are committed to protecting your privacy and complying with the Kentucky Consumer Data Privacy Act (KCDPA, SB 175) and all applicable federal privacy laws.

2. Information We Collect
We collect only the data necessary to operate our restaurant reservation service:

2.1 Reservation Data (BOOK Form):

• Selected area: ARIA, PROTOCOL, PASEO DEL PRADO, GARDEN DI LISA, CIELO APERTO

• Reservation date and time (February 2026 calendar+)

• Number of people

2.2 Contact Data (upon reservation confirmation):

• Full name

• Email address

• Phone number (for SMS/email confirmation)

2.3 Automatic Technical Data:

• IP address

• Browser type and device

• Pages visited and time on site

• HTTP referrers (Google, social media)

3. How We Use Your Data
We use information exclusively for:

• Processing, confirming, and managing your reservations

• Sending email/SMS confirmations

• Analyzing area popularity to optimize operations

• Preventing fraud and reservation system abuse

• Complying with legal obligations

4. We DO NOT Share Your Data

• We do not sell, rent, or share your personal data with third parties

• Only share with payment processors (if applicable) under DPA contracts

• May disclose data if required by law or to protect legal rights

5. Marketing & Communications (Future Opt-in)
We currently do NOT collect consent for commercial communications. Soon we will implement:

You can withdraw consent anytime by emailing (see section 13)

6. Data Retention

• Reservation data: 30 days after reservation date

• Technical logs: maximum 12 months

• Legally required data: legally established period

7. Your Rights Under KCDPA (Kentucky Residents)
Kentucky residents have the right to:

7.1 Access to Data
Request a copy of personal data we hold about you

7.2 Correction
Correct inaccurate or incomplete data

7.3 Deletion
Request deletion of your data (subject to legal obligations)

7.4 Opt-out of Sale
We don’t sell data, but you can request preemptive opt-out

How to exercise rights: Email (see section 13)
Response time: 45 days (extendable 45 days for complexity)
Verification: We may require identification to prevent fraud

8. Data Security
We implement:

• HTTPS connection across entire site

• Encrypted forms via JetFormBuilder

• Restricted data access

• Encrypted backups

However, no system is 100% immune to breaches. We will notify you immediately if a security breach affects you.

9. Cookies & Similar Technologies
We use:

• Essential cookies (site functionality)

• Google Analytics (anonymous analysis, you can opt-out)

• Session cookies (expire when browser closes)

Manage cookies: Browser settings or tools like CookieBot.

10. Children
Our site is not directed at children under 16. We do not knowingly collect children’s data.

11. International Rights (GDPR/CCPA)
We respect additional rights if applicable:

• EU residents: GDPR Articles 15-22

• CA residents: CCPA/CPRA

12. Updates to This Policy
We may update this policy. Material changes will be posted here with 30 days notice. Review periodically.

13. Contact
For any privacy questions: