سياسة الخصوصية

Who we are

Jospereno Smokey Meat and More Restaurant L.L.C (trade licence 986091, Dubai Department of Economy and Tourism) runs the Jospereno steakhouse at Al Murooj Complex, Sheikh Zayed Road, DIFC, Dubai, United Arab Emirates. We operate this website at jospereno.com and the Steakholders Club loyalty programme, including its member app at app.abnarhospitality.com.

For the purposes of data protection law, we are the controller of the personal data described on this page. That means we decide what is collected and why, and we are responsible for it.

We are licensed in Dubai by the Department of Economy and Tourism, so the law that applies to this policy is the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). The UAE Data Office supervises it.

What we collect

When you visit this website

Our website does not require you to create an account, and we do not take bookings — Jospereno is walk-in only. So on an ordinary visit we collect very little about you personally:

• Technical and usage data. Your IP address, browser and device type, operating system, the pages you view, how you arrived, and roughly where you are (city level). This comes from our server logs and from the analytics and advertising tools described below.
• Identifiers stored on your device. Cookies and similar technologies set by us and by Google and Meta. See Cookies and tracking.

When you contact us

• By WhatsApp or phone (+971 52 420 6404): your phone number, your name if you give it, and the content of your messages.
• By email (hello@jospereno.com): your email address and whatever you write to us.
• Through a form on this site, if and when we publish one: the fields you fill in. We will always tell you at the point of collection what each field is for.

If you join the Steakholders Club loyalty programme

When you join — on the sign-up page, in the member app, or with our team at the restaurant — and while you are a member, we collect and keep:

• Your mobile number (required). It is how our team recognises you at the till and matches your bills to your membership.
• Your email address. We send the six-digit codes you use to sign in to the member app, and messages about your account and changes to the programme. Sign-in codes are stored only in scrambled (hashed) form and expire after a few minutes.
• Your name, if you give it, so we can greet you properly.
• Your programme history: the bills credited to you (date, restaurant, amount and points), the rewards you redeem, your level, the prizes you win and the games you play for points, and any corrections our team makes, with the reason.
• Your acceptance of the programme terms: which version you accepted, when, and how (on the sign-up page, in the app, or at the till with our team).
• Your offers choice: whether you said yes to offers and news, when and where, and any opt-out.
• A sign-in cookie in the member app, so the phone you signed in on can reopen your card. You can sign out on one phone or everywhere from the app.

Offers and news are sent only if you say yes, and every marketing message carries a one-click unsubscribe. Saying no, or stopping them later, costs you no points. We will not add you to any list because you contacted us about something else.

What we never collect on this website

We do not take payments online, so this website never handles card or bank details. We do not collect passport or ID numbers. We do not ask for, and do not want, any information about your health, religion, ethnicity or any other special category of data.

Why we collect it, and on what basis

Where we rely on legitimate interests, we have weighed those interests against your rights, and we have kept the data to what is genuinely needed for the purpose. You can object to that processing — see Your rights.

Cookies and tracking

This site uses cookies and similar identifiers for three things: to make it work, to measure how it is used, and to support our advertising.

• Necessary. Set by our hosting and caching to serve pages correctly and keep the site secure. The site does not work properly without these.
• Analytics. Google Analytics 4, loaded through Google Tag Manager. These tell us which pages people read and where they arrive from. We do not use them to identify you personally.
• Advertising. The Meta pixel, which supports our advertising on Facebook and Instagram and tells us whether an ad led to a visit.

You can clear or block cookies in your browser settings at any time. You can opt out of Google Analytics with Google's browser add-on, and you can control how Meta uses your activity in your Facebook or Instagram ad settings. Blocking cookies will not stop you using this website.

Where the law requires your consent before non-essential cookies are set — which includes visitors in the European Economic Area and the United Kingdom — that consent is requested before those tools load.

Who we share it with

We do not sell your personal data. We do not rent it, and we do not trade it. We share it only with the categories of service provider we need to run the business, and only for the purposes above:

• Our hosting and website security provider — to serve this website and keep it available and protected.
• Google — analytics and advertising measurement, through Google Analytics and Google Tag Manager.
• Meta — advertising and measurement on Facebook and Instagram, and WhatsApp if you choose to message us there.
• Our restaurant operations platform and its hosting and database providers — to run the Steakholders Club and its member app.
• Our point-of-sale provider — so the bills you pay can be matched to your membership.
• Our email delivery provider — to deliver sign-in codes and programme messages, and marketing email only if you agreed to it.

We name Google and Meta specifically because their cookies and tags run in your browser on this site, and because you may want to use their own opt-out controls, which we link to in Cookies and tracking. For the other categories, if you want to know exactly which company we use, write to us and we will tell you.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Where your data goes

Some of the providers above process data outside the UAE, including in Japan (where the loyalty programme's database is hosted), the United States and the European Union. Where we transfer personal data out of the UAE, we do so only on a basis the UAE Personal Data Protection Law permits — to a country with adequate protection, or under contractual safeguards with the provider.

How long we keep it

• Server logs: a short rolling window kept by our host for security and troubleshooting.
• Analytics and advertising data: for the retention period set in the relevant Google and Meta products, which is measured in months, not years.
• Emails and WhatsApp messages: as long as we need them to deal with what you asked, and a reasonable period afterwards in case you come back to us.
• Mailing list data: until you unsubscribe or ask us to delete it. If you stop opening our emails for a long time, we will remove you rather than keep mailing.
• Loyalty programme data: for as long as you are a member. When you leave or delete your profile, we remove your name, mobile number and email; we keep bill records the law requires without your name, and what we need for fraud, disputes or legal claims.

Your rights

Under the UAE Personal Data Protection Law you have the right to:

• Access the personal data we hold about you, and get a copy.
• Correct anything that is wrong or incomplete.
• Have it erased, where we no longer have a good reason to keep it.
• Restrict how we use it while a question about it is resolved.
• Object to processing we base on legitimate interests, including profiling for advertising.
• Receive it in a portable format, where the processing is based on consent or a contract and is automated.
• Withdraw consent at any time, where consent is what we relied on. Withdrawing it does not undo what was lawful beforehand.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make any such decisions.

To exercise any of these, email hello@jospereno.com. We will respond within one month. We may ask you to confirm who you are first, so that we do not hand your data to someone else. Exercising these rights is free.

If you are not satisfied with how we have handled your request, you may complain to the UAE Data Office.

Children

This website is meant for adults. We do not knowingly collect personal data from children. Families are very welcome in the restaurant, but if you believe a child has given us personal data through this website, write to us and we will delete it.

Changes to this policy

When we change how we handle personal data, we update this page and change the date at the top. If a change materially affects your rights, and we have a way to reach you, we will tell you directly rather than leave you to notice.