Privacy Policy — Kesiyos
Effective date: May 10, 2026 Last updated: May 10, 2026
This Privacy Policy describes how Fusión Gastronómica, Sociedad Anónima ("we", "us", "Kesiyos"), a Guatemalan corporation with Tax ID (NIT) 120347539, operating the Kesiyos restaurant brand and the website https://kesiyos.com, collects, uses, stores, and discloses information when you interact with us — whether ordering food online, visiting our restaurant, or messaging us on social platforms (WhatsApp, Facebook Messenger, Instagram).
By using our website, services, or messaging channels, you agree to the practices described here.
1. Who we are
- Legal name: Fusión Gastronómica, Sociedad Anónima
- Trade name: Kesiyos
- NIT: 120347539
- Registered office (correspondence and legal notices): 4 Avenida 20-44, Ciudad de Guatemala, Guatemala
- Restaurant location (customer service in person): 59 Avenida 7-15, Ciudad de Guatemala, Guatemala
- Email: info@kesiyos.com
- WhatsApp: +502 3010 5018
2. What information we collect
2.1 When you order on our website (kesiyos.com)
- Name and surname
- Delivery address
- Phone number
- Email address
- NIT (Tax ID) for electronic invoicing (FEL)
- Order contents and selections
- Payment information (processed by our payment provider; we do not store card numbers ourselves)
- Browser data: IP address, device type, timestamps, page views
2.2 When you message us on social platforms
- Your platform user ID (Facebook PSID, Instagram user ID, WhatsApp phone number)
- Your display name on the platform
- The content of messages you send us
- The timestamp of each interaction
- Any media you send (photos, voice notes, attachments)
2.3 When you visit our restaurant (59 Avenida 7-15)
- Your order at the point of sale
- NIT for electronic invoicing if you request a non-final-consumer invoice
- No CCTV recordings are processed by automated systems beyond on-premises security; recordings are not retained beyond standard restaurant operations.
3. How we use your information
We use the information collected for the following purposes:
- Order fulfillment: preparing, packaging, invoicing, and delivering your order
- Electronic invoicing (FEL): issuing the legally required Documento Tributario Electrónico (DTE) through our certifier INFILE; this requires sharing your name and NIT with INFILE and ultimately with SAT (Superintendencia de Administración Tributaria)
- Payment processing: processing your payment via our payment partner Recurrente
- Customer service: responding to your messages on WhatsApp, Messenger, Instagram, or email
- Automated replies via AI: messages you send us through Meta channels (WhatsApp, Messenger, Instagram) may be processed by an artificial intelligence system (Anthropic Claude) to generate a reply. The AI is instructed to keep responses on-topic for Kesiyos services and to escalate any sensitive matter to a human team member.
- Delivery coordination: sharing your address and phone number with the delivery service (e.g., InDrive) selected for your order
- Order status updates: sending you confirmations, status changes, and delivery updates via WhatsApp, email, or other channels you have used to contact us
- Service improvement: aggregated and anonymized analytics to improve our menu, website usability, and customer experience
- Legal compliance: complying with tax, accounting, and regulatory obligations under Guatemalan law
4. Who we share your information with
We share information only with the following categories of recipients, and only for the purposes listed:
| Recipient | Purpose | What is shared |
|---|---|---|
| INFILE | FEL electronic invoicing certification | Name, NIT, invoice contents |
| SAT (Guatemalan Tax Authority) | Legally required tax records | DTE data (invoice contents, NIT, amounts) |
| Recurrente (payment processor) | Processing your payment | Order amount, your email, contact info |
| Meta Platforms (WhatsApp, Messenger, Instagram) | Delivering messages between you and us | Message content (the platform already has this — it's the messaging channel itself) |
| Anthropic (AI provider) | Generating AI auto-replies | The text content of your message |
| InDrive (or other delivery service) | Delivering your order | Your delivery address, phone, order details |
| Our hosting provider (Amazon Web Services) | Hosting our systems | All data we store, encrypted in transit and at rest |
We do not sell your personal information to third parties. We do not share your information for advertising purposes outside our own marketing.
5. Where your data is stored
Your information is stored on servers operated by Amazon Web Services (AWS) in the United States (region us-east-2). Some data may also reside temporarily with our service providers (INFILE in Guatemala, Anthropic in the United States, Meta worldwide, Recurrente in Guatemala/Latin America).
6. How long we keep your data
| Category | Retention period |
|---|---|
| Order records (invoices, financial records) | Minimum 4 years from the end of the fiscal year, as required by Guatemalan tax law (Código Tributario) |
| Customer contact information | Until you request deletion, or 2 years after your last interaction with us |
| Messaging conversations (WhatsApp, Messenger, Instagram) | 2 years from the date of the last message in the conversation |
| Website browsing data | 12 months |
| AI processing logs | 30 days for debugging; the AI provider (Anthropic) does not retain message content beyond its operational caches |
7. Your rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information (subject to legal retention obligations, e.g. fiscal records)
- Object to processing for marketing or AI-based auto-replies
- Withdraw consent at any time for processing based on consent
- Lodge a complaint with the relevant Guatemalan authority
To exercise these rights, contact us at info@kesiyos.com with the subject "Privacy Request" and a description of what you would like done. We will respond within 30 calendar days.
8. AI-generated responses
When you message us on WhatsApp, Facebook Messenger, or Instagram, an AI assistant (powered by Anthropic Claude) may draft an automatic reply. The AI is configured to:
- Direct you to https://kesiyos.com when you wish to place an order
- Provide basic information about our hours, location, and services
- Escalate to a human team member when your request is sensitive, complex, or outside the AI's scope
The AI's responses may contain mistakes. Do not rely on AI responses for medical, legal, financial, or other regulated advice. For any binding commitment (price quotes, allergen confirmations, order changes after payment), please confirm with a human team member at +502 3010 5018.
You may at any time request that we stop using AI auto-replies for your conversations by writing "hablar con persona" or by emailing info@kesiyos.com.
9. Cookies, analytics, and tracking technologies
Our website uses the following categories of cookies and similar technologies:
9.1 Essential cookies
Required for the website to function: keeping your shopping cart, your session during checkout, language preference, and security tokens. These cannot be disabled without breaking the site.
9.2 Analytics
We use Google Analytics to understand how visitors use our website (which pages they view, how long they stay, which device they use, which country they connect from). Google Analytics assigns a pseudonymous identifier to your browser and may set cookies under the _ga family. We have IP anonymization enabled. We do not link Google Analytics data to your name, email, or order history. Data is processed by Google LLC in the United States.
9.3 Advertising and conversion measurement
We use the Meta Pixel (Facebook Pixel) to measure the effectiveness of advertising on Facebook and Instagram, and to build "Custom Audiences" of website visitors so we can show them relevant ads on Meta platforms. The Meta Pixel sends information about pages you view, products you add to cart, and orders you complete to Meta Platforms, Inc.
9.4 Your choices
You can: - Block cookies in your browser settings (this will break checkout) - Opt out of Google Analytics by installing the official browser add-on at https://tools.google.com/dlpage/gaoptout - Opt out of Meta personalization in your Facebook/Instagram settings under "Ads off Meta" - Use private/incognito browsing to limit persistence between sessions
We do not respond to Do Not Track ("DNT") browser signals because there is no industry consensus on the meaning of those signals.
10. Children's privacy
Our services are intended exclusively for adults age 18 and over.
10.1 No collection from minors
We do not knowingly collect, use, or disclose personal information from any person under 18 years of age. Our website, online ordering, AI replies, and messaging channels are not directed at children.
10.2 Children under 13
In line with the U.S. Children's Online Privacy Protection Act (COPPA) and equivalent best practices, we apply heightened protection to children under 13 even though we do not target the U.S. market:
- We do not knowingly collect personal information from any child under 13.
- If we discover that we have collected personal information from a child under 13, we will delete that information immediately from our active systems.
- Parents or legal guardians who believe their child under 13 has provided personal information to us can contact info@kesiyos.com to request immediate deletion. We will act on such requests within 7 calendar days.
10.3 Verification by parents/guardians
If you are a parent or legal guardian and become aware that your minor child has interacted with us (placed an order, sent a DM, etc.), you may at any time: - Review the personal information we hold about your child - Request that we stop processing it - Request its deletion
To exercise these rights, email info@kesiyos.com from an address you can prove is yours, with the subject "Minor's Information Request" and any identifying details (e.g., order number, channel username) that help us locate the data.
11. Security
We use industry-standard measures to protect your data, including HTTPS encryption, password-protected access to our internal systems, and limited access controls. No system is perfectly secure; we cannot guarantee absolute protection.
If a data breach occurs that materially affects you, we will notify you and any required authorities as soon as practicable.
12. Updates to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. If changes are material, we will notify users via email or a prominent notice on our website at least 14 days before the new version takes effect.
13. Contact
For any privacy-related question or request, please contact:
Fusión Gastronómica, S.A. (Kesiyos) 4 Avenida 20-44, Ciudad de Guatemala, Guatemala Email: info@kesiyos.com WhatsApp: +502 3010 5018
This Privacy Policy is governed by the laws of the Republic of Guatemala. The Spanish-language version of this Policy is the binding version in case of any discrepancy.