A BaleeiraRegional Kitchen · Floripa

LGPD · Law 13.709/2018

Privacy Policy

Last updated: [CONFIRM date]

[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address or email below is real.]

1. Data controller

The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.

Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or "not applicable"].

2. What we collect and why

DataWhenPurposeLegal basis (LGPD art. 7)
NameBooking formIdentify the bookingPre-contractual steps (item V)
Phone / WhatsAppBooking formConfirm the booking and notify changesPre-contractual steps (item V)
Date, time, party sizeBooking formManage the dining roomPre-contractual steps (item V)
Notes (e.g. allergies, accessibility)Booking formHandle the request and food safetyConsent (item I) — potentially sensitive data
Analytics cookiesBrowsing, if permittedMeasure site usageConsent (item I)
Marketing cookiesBrowsing, if permittedMeasure campaignsConsent (item I)

We do not collect payment data on this site. There is no account sign-up and no document collection. [CONFIRM]

3. Cookies

Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.

CategoryDefaultExamplesRetention
EssentialAlways onConsent record (stored in your browser)[CONFIRM]
AnalyticsOff[CONFIRM tool — e.g. Google Analytics 4][CONFIRM]
MarketingOff[CONFIRM tool — e.g. Meta Pixel][CONFIRM]

4. WhatsApp

The booking buttons open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control. A booking is only confirmed once the restaurant replies.

5. Sharing

We do not sell personal data. We share it only with processors necessary to deliver the service:

International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]

6. How long we keep it

Booking data: [CONFIRM period] after the booking date. Consent records: [CONFIRM]. After that, data is deleted or anonymised, unless a legal retention duty applies.

7. Your rights (LGPD art. 18)

At any time, free of charge, you may request:

To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.

8. Security

We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.

9. Minors

This site is not directed at people under 18 and does not knowingly collect children's data. The site features alcoholic drinks [CONFIRM]; sale to under-18s is prohibited in Brazil.

10. Changes

We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.

← Back to site Ler em português