Privacy Policy
Last updated: 7 October 2026
This policy explains how ONLYFOOD ("we", "us") collects, uses and protects personal information. It applies to people who apply to work with us, people who contact us on social media, and visitors to onlyfoodbrunch.com.
In short: if you apply for a job with us, we use your details only to consider you for that role and to contact you about it. We do not sell your information, we do not share it for advertising, and you can ask us to delete it at any time.
Who we are
ONLYFOOD is a brunch restaurant operating in Cyprus. For any question about this policy or about your personal information, contact us on Instagram at @onlyfoodcy, which is our primary contact channel.
Information we collect
If you apply for a role with us — for example through a form on a Facebook or Instagram advert, or by messaging us directly — we may collect:
- Your name
- Your phone number, email address, or social media handle
- Your work experience, qualifications and availability
- Your CV and anything else you choose to send us
Please only send what is relevant to the job. You do not need to send us sensitive information such as health details, identity documents, or financial information in order to apply, and we ask that you do not.
If you visit this website, we do not collect anything. This site has no contact form, no account system, no analytics, no advertising trackers and no cookies. Our hosting provider processes standard technical information such as IP address in order to deliver the pages to you securely.
Why we use it, and our legal basis
We use recruitment information solely to assess your application, to contact you about it, and to arrange a trial or interview. Under the GDPR, our legal basis is taking steps at your request before entering into a contract, and our legitimate interest in recruiting staff. Where we keep your details on file for future openings, we rely on your consent.
We do not use your application for advertising, we do not build advertising audiences from it, and we never sell personal information.
Adverts on Facebook and Instagram
We advertise our job openings on Facebook and Instagram. If you submit your details through an instant form inside one of those adverts, Meta Platforms collects that information and passes it to us, and Meta's own Privacy Policy governs their handling of it. Once we receive your details, this policy applies.
Who can see your information
Your application is seen only by the ONLYFOOD owners and managers involved in hiring. We may hold it within the business tools we use to receive and store messages — such as Meta's platforms and our email or messaging provider — which process the data on our behalf. We do not disclose it to anyone else unless we are required to by law.
How long we keep it
If we hire you, your details become part of your employment record. If we do not, we delete your application within 12 months, unless you have asked us to keep it on file for future openings. You can ask us to delete it sooner at any time.
Your rights
Under the GDPR you have the right to ask us to:
- Give you a copy of the information we hold about you
- Correct anything that is wrong or incomplete
- Delete your information
- Restrict or object to how we use it
- Transfer it to you or another organisation in a portable form
- Withdraw your consent, where we relied on it
Message @onlyfoodcy and we will respond within one month, free of charge. If you are not satisfied with our response, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the data protection authority in your country.
Keeping your information safe
We limit access to your application to the people who need it for hiring, and we rely on the security controls of the established platforms we use to receive and store it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect what you send us.
Children
Our recruitment is intended for people who are old enough to work legally in Cyprus. We do not knowingly collect information from children.
Not affiliated with Meta
This site is not part of the Facebook or Instagram website or Meta Platforms, Inc. Additionally, this site is not endorsed by Meta in any way. Facebook and Instagram are trademarks of Meta Platforms, Inc.
Changes to this policy
If we change this policy we will update the date at the top of this page. Any significant change will apply only from the date it is published.