Privacy policy
What we collect, why, and how to get rid of it.
Last updated 21 September 2026
What we collect
Only what you send us. If you fill in the event enquiry form we receive your name, email, and whatever else you choose to enter: phone, date, event type, guest numbers, budget range and your message. If you email or call us we have whatever is in that email or call. We do not ask for anything else, and the site has no accounts, no logins and no newsletter.
Why we have it
To answer you. An event enquiry is stored so the team can reply to it and keep track of it while it is live. That is a legitimate interest in responding to someone who has asked us a question, and it is also the only way to organise an event.
How long we keep it
Enquiries are kept while the conversation is open and for a period afterwards, so we can pick it up if you come back to us. Ask and we will delete yours sooner.
Who else sees it
The restaurant team, and the services that carry the message: our email provider and the database the enquiry form writes to. We do not sell anything to anybody and we do not share your details for advertising.
Analytics
We use Google Analytics, Google Ads and the Meta pixel through Google Tag Manager to see which pages are useful and whether an advert brought you here. Consent is collected by Cookiebot. Until you accept in the banner nothing is stored on your device and nothing that identifies you runs, and you can change your choice at any time from Cookie settings at the bottom of every page. See the cookie policy.
The chat
The gorilla in the corner of the page is a chatbot. What you type to him, and what he answers, is kept for thirty days so we can see which questions he handles badly and fix them. Along with it we keep the language you read the page in and the country your connection reports, which Cloudflare tells us anyway. We do not keep your IP address, we set no cookie for it, and the reference the conversation is filed under is made fresh every time the page loads, so two visits are two unrelated records. It is deleted automatically thirty days after the last message. Please do not type a card number into it, and if you have told him something you would rather we did not keep, email [email protected] and we will remove it.
Our own counter
Separately from Google Analytics, the site counts how many times its own buttons are tapped: reserve, call, WhatsApp, delivery, and the chat. Each tap records three things and nothing else: which button, the time, and whether you had accepted statistics cookies at that moment. That last one is the same yes or no you already gave the banner, and we keep it because it is the only way to know how much of our own traffic Google Analytics never sees. There is no cookie, no identifier and no IP address in any of it, nothing that could be traced to you, and no way to connect one tap to another. That is why it runs whether or not you accept the banner: there is no personal data in it to consent to. We keep these tallies for ninety days.
Your rights
Under the GDPR you can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, and object to us holding it. Email [email protected] and we will deal with it. You can also complain to the Hellenic Data Protection Authority.
Other sites
Reservation, delivery, gift card and 3D tour links take you to other companies: i-host, e-food, Wolt, Giftspot and TopVirtualTours. Once you are there you are under their policies, not ours.
Who operates this site
Iguazu Athens, Laodikias 16 & Nimfeou 1, Brazil Square, Ilisia, 115 28 Athens, Greece. Phone +30 210 777 5225, email [email protected].
- Registered legal entity
- IGUAZU PRIVATE COMPANY (IGUAZU I.K.E.)
- VAT number (AFM)
- 801474580
- Commercial registry (GEMI)
- 157589601000