Kildare is home to a thriving business community, and catering companies in the Naas area and beyond are no exception. But many don’t realise the extent of their GDPR obligations — particularly around dietary and allergen data revealing health conditions or religious beliefs processed without appropriate safeguards for special category data. This guide breaks down exactly what’s required under Irish and EU data protection law.
Join 2,000+ Irish businesses already protected
Absolutely. Under the GDPR and the Irish Data Protection Act 2018, all catering companies in Kildare that collect, store, or process personal data must be fully compliant. This covers everything from booking details and payment information to CCTV footage and staff records. The DPC can impose fines of up to €20 million for non-compliance, and Irish businesses of all sizes are subject to enforcement.
RISK ASSESSMENT
Dietary and allergen data revealing health conditions or religious beliefs processed without appropriate safeguards for special category data
Guest lists received from event clients retained indefinitely rather than being deleted after the event
Temporary staff personal data (PPS numbers, bank details) stored on unsecured shared drives or spreadsheets
Customer enquiry data from website contact forms processed without a privacy notice or defined retention period
Food delivery order data including home addresses and phone numbers retained beyond the delivery purpose
DATA INVENTORY
FREE ASSESSMENT
See exactly where your Catering Company in Kildare stands on GDPR compliance — no signup required.
REQUIRED DOCUMENTS
Every Catering Company in Ireland needs these documents to demonstrate GDPR compliance.
STEP BY STEP
Implement a secure process for receiving, storing, and deleting attendee dietary and allergen information, treating it as potential special category data.
Create a standard data deletion procedure for guest lists and event-specific data, ensuring it is securely deleted within a defined period after each event.
Review how temporary staff data is collected and stored, ensuring PPS numbers and bank details are encrypted and access-restricted.
Add a clear privacy notice to the company website and ensure it is provided to clients at the point of engagement.
Establish Data Processing Agreements with corporate clients who share employee or guest data for catering purposes.
Train kitchen and event staff on the importance of handling dietary information confidentially and securely.
COMMON PITFALLS
Keeping dietary requirement sheets from past events in kitchen files indefinitely without any data deletion process.
Treating allergen information as ordinary business data rather than recognising it as potential special category data requiring additional protections.
Storing temporary staff personal data in unprotected Excel spreadsheets accessible to multiple team members without need-to-know restrictions.
FAQ
Everything you need to know about GDPR compliance for your business.
Contact usNEARBY COUNTIES
OTHER SERVICES
Every day your Catering Company in Kildare operates without proper GDPR compliance is a risk. The DPC is increasing enforcement across Ireland — get ahead of it today.
Join 2,000+ Irish businesses. No credit card required.