Privacy Notice

Last updated 4 August 2026

Short version: I only collect what I need to turn up at your door with the right ingredients, and I do not sell or share your details with anyone for marketing.

1. Who is responsible for your data

Chez Julien is a sole trader business run by Julien Cassegrain, based in Maynooth, Co. Kildare, Ireland. For the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018, Julien Cassegrain is the data controller for the personal data described here.

• Email: hello@chezjulien.ie
• Phone: +353 85 164 5319
• Based in Maynooth, Co. Kildare, Ireland

Chez Julien is run from a private home and classes take place at customers' addresses, so no street address is published here. The full postal address is provided on request to anyone exercising a data protection right, and to the Data Protection Commission.

There is no legal requirement for a business of this size to appoint a Data Protection Officer, and none has been appointed. Write to either contact above and it reaches Julien directly.

2. What I collect, and why

This website itself collects nothing. It sets no cookies of its own, has no login, and stores nothing in your browser. Personal data only comes into play when you actively get in touch or book a class.

When you book a class

The booking form on this site collects, and passes to Cal.com once your payment succeeds:

• your name and email address
• the number of people taking part
• any dietary requirements or allergies you tell me about (see section 3)
• the class you chose, the dishes you picked and the date

Cal.com holds my calendar and sends the confirmations and reminders. The address where the class will take place is agreed with me afterwards, by email.

Why: to agree a date, prepare the right menu, buy the right ingredients and find your house. Legal basis: performance of a contract with you, and taking steps at your request before entering into one (Article 6(1)(b) GDPR).

When you pay

Payment is taken by Stripe, on Stripe's own payment page. Your card details go directly to Stripe and are never seen, handled or stored by Chez Julien or by this website. I receive only the confirmation that a payment succeeded, the amount, and the last four digits of the card.

Why: to hold your date and take payment. Legal basis: performance of a contract, and compliance with a legal obligation for the accounting records (Article 6(1)(b) and 6(1)(c) GDPR).

When you buy a gift voucher

Buying a gift voucher collects your email address, so that I can send you the code, and, if you fill them in, the first name of the person receiving it and the short message you want to go with it. Those two are optional and are used once, in that email, and nowhere else. No account is created for the person receiving the voucher, and I do not contact them.

The email itself is sent through Brevo. Legal basis: performance of a contract with you (Article 6(1)(b) GDPR).

When you email or call

If you email or phone, I keep the message and your contact details so I can reply and keep track of the conversation. Legal basis: legitimate interests, namely responding to people who contact me about the service (Article 6(1)(f) GDPR).

Photos and video during the class

I photograph and film the sessions, the dishes, hands at work, the table at the end, and I use those pictures to show what a class looks like: on this site, on Instagram and on Facebook. People taking part are sometimes recognisable in them.

This only happens if you agree to it. The booking form has a tick box for it, left unticked by default: if you do not tick it, no picture of you is taken for publication and nothing changes about the class itself. Ticking it is never a condition of booking, and it has no effect on the price.

You can change your mind at any moment, without giving a reason: tell me on the day, or email me afterwards, and I will stop filming, or take down what has already been published. Pictures of the food alone, with nobody in them, are used freely.

Legal basis: your consent (Article 6(1)(a) GDPR), recorded with your booking. Withdrawing it does not affect anything I published while it was valid, but I will remove it on request.

Website analytics

I intend to use Google Analytics 4 to understand how many people visit the site and which pages they read. Analytics will only run after you have given consent, and you can refuse or withdraw consent at any time without any effect on the service. Full detail, including the individual cookies, is on the cookies page.

Legal basis: your consent (Article 6(1)(a) GDPR and Regulation 5 of the Irish ePrivacy Regulations 2011).

I also use Google Search Console, which reports on how the site appears in Google search results. Search Console shows me aggregated, anonymous statistics only. It sets no cookies and does not identify individual visitors, so it needs no consent.

Hosting and server logs

This site is hosted on Cloudflare Pages. Like every website, the servers that deliver these pages record technical information about each request, typically the IP address, the time, the page requested and the browser used. Cloudflare also uses this information to distinguish real visitors from automated attacks. These logs exist for security and troubleshooting, are not used to build any profile of you, and are deleted on Cloudflare's normal cycle.

Legal basis: legitimate interests, namely keeping the site available and secure (Article 6(1)(f) GDPR).

Fonts

The site currently loads its typefaces from Google Fonts, which means your browser makes a request to a Google server and Google receives your IP address in the process. No cookie is set by this request. I intend to serve the fonts from my own domain instead, which removes this entirely.

3. Allergies and dietary requirements

Information about an allergy, an intolerance or a medical diet is data concerning health. Under Article 9 GDPR that is a special category of personal data with stronger protection, and it can only be processed with your explicit consent.

You are never obliged to give it. If you do tell me about an allergy when booking, you are giving explicit consent for me to use that information for one purpose only: planning and cooking a menu that is safe for you. It is not shared with anyone, it is never used for marketing, and it is deleted with the rest of your booking record.

You can withdraw that consent at any time by emailing me, though I should say plainly that if you withdraw it before a class I will not be able to guarantee a menu that suits you.

4. Who else sees your data

I do not sell your data, and I do not share it with anyone for their own marketing. It is handled by a small number of service providers who act as processors on my instructions:

I may also disclose data where I am legally required to, for example to a court or a regulator.

5. Transfers outside the EU

Some of the providers above are based in the United States. Where personal data is transferred outside the European Economic Area, it is protected by the safeguards required under Chapter V GDPR, in practice the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

6. How long I keep it

7. Your rights

Under GDPR you have the right to:

• Access the personal data I hold about you, and get a copy of it.
• Rectify it if it is wrong or incomplete.
• Erase it, where I have no overriding legal reason to keep it. Note that booking and payment records must be kept for the tax period above.
• Restrict how I use it while a dispute about it is resolved.
• Portability: receive the data you gave me in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, where consent is the basis. Withdrawing does not affect anything done before you withdrew.

Email hello@chezjulien.ie to exercise any of these. I will reply within one month. There is no charge, unless a request is clearly unfounded or excessive.

8. Security

The site is served over HTTPS. Booking and payment data sits with Cal.com and Stripe, both of which maintain security standards well beyond what an individual business could implement, and card data never reaches me. Correspondence and booking notes are held in password-protected accounts with two-factor authentication enabled.

9. Children

This service is aimed at adults and I do not knowingly collect data about children through this website. Children are very welcome at a class, but the booking is always made by an adult, and any information about a child, such as a food allergy, is provided by their parent or guardian and used only to cook safely.

10. Changes to this notice

If this notice changes, the new version appears here with an updated date at the top. If a change materially affects how your data is used, I will tell existing customers by email.

11. Contact and complaints

For anything about your data, write to hello@chezjulien.ie and I will deal with it directly.

If you are not satisfied with how I have handled it, you have the right to complain to the Irish supervisory authority:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
www.dataprotection.ie