LGPD · Law 13.709/2018
Privacy Policy
Last updated: [CONFIRM date]
[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address, email or period below is real.]
1. Data controller
The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.
Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or “not applicable”].
2. What we collect and why
| Data | When | Purpose | Legal basis (LGPD art. 7) |
|---|---|---|---|
| Name | Booking / order form | Identify the booking or order | Pre-contractual steps (item V) |
| Phone / WhatsApp | Booking form | Confirm and notify changes | Pre-contractual steps (item V) |
| Date, time, party size | Booking form | Manage the dining room | Pre-contractual steps (item V) |
| Dietary restrictions and allergies | Booking form | Food safety — potentially sensitive data | Consent (item I) |
| Newsletter, if subscribed | Send communications | Consent (item I) | |
| Analytics cookies | Browsing, if permitted | Measure site usage | Consent (item I) |
| Marketing cookies | Browsing, if permitted | Measure campaigns | Consent (item I) |
3. Cookies
Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.
| Category | Default | Examples | Retention |
|---|---|---|---|
| Essential | Always on | Consent record (stored in your browser) | [CONFIRM] |
| Analytics | Off | [CONFIRM tool — e.g. Google Analytics 4] | [CONFIRM] |
| Marketing | Off | [CONFIRM tool — e.g. Meta Pixel] | [CONFIRM] |
4. WhatsApp
The buttons on this site open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control.
5. Sharing
We do not sell personal data. We share it only with processors necessary to deliver the service:
- Website hosting — [CONFIRM]
- Analytics tool, if permitted — [CONFIRM]
- WhatsApp / Meta Platforms, when you start the conversation
- Public authorities, where legally required
International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]
6. How long we keep it
Contact data and enquiries: [CONFIRM period]. Consent records: [CONFIRM period]. After that, data is deleted or anonymised, unless a legal retention duty applies.
7. Your rights (LGPD art. 18)
At any time, free of charge, you may request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary or non-compliant data;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share your data with;
- information about your right to refuse consent and the consequences;
- withdrawal of consent.
To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.
8. Security
We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.
9. Minors
This site is not directed at people under 18 and does not knowingly collect children's data. No image on this site depicts children or minors.
10. Changes
We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.
Who the controller is
Controller: Marquês da Lagoa, Lagoa da Conceição, Florianópolis (SC), Brazil. [CONFIRM the legal entity name, CNPJ and full address — none of it is published anywhere]. The only public channel we could identify is the Instagram profile @marquesdalagoaoficial, which sits behind a login wall. [CONFIRM the WhatsApp number, phone, e-mail and the data protection officer — LGPD art. 41].
The booking
The booking form asks for a name, WhatsApp number, date, time, party size, whether you would like a table by the water, and any notes. It sends nothing on its own: it composes the message and opens WhatsApp, and you decide whether to send it. The legal basis is your consent alongside pre-contractual dealings. The details are used only to confirm and arrange your table. [CONFIRM the retention period for bookings]. A booking is only confirmed once the venue replies.
The sunset time is worked out in here
The sunset time shown on this site is computed in your own browser, from the date and a fixed latitude and longitude for Florianópolis. There is no API, no key and no third-party request — which means no data leaves your browser to work out when the sun goes down. The time is approximate, informational, and tied to no promotion.
Allergens
Allergen declaration is mandatory under ANVISA RDC 26/2015 and covers wheat (gluten), milk, eggs, soy, tree nuts, peanut, fish, crustaceans and molluscs. A bar kitchen running a shared fryer makes the cross-contact statement especially important, because it is the sentence a customer with an allergy decides on. [CONFIRM per-item allergens and the real cross-contact policy]. Nothing in this build claims that any dish does or does not contain any allergen.
Alcohol
Selling alcohol to under-18s is prohibited. No image on this site depicts a minor, in any section — deck, sunset, groups or live music — and no image presents intoxication as the offer. If you drink, do not drive.
Cover charge and service charge
If a couvert artístico is charged, it must be disclosed before the customer sits down — on the site, beside each date in the agenda, and at the venue. The 10% service charge, where it applies, is optional and disclosed up front. [CONFIRM both].
Payments
No payment is processed on this site and no card details are collected here. [CONFIRM whether Pix is accepted and which cards].
What this site does not claim
No dish, drink, signature cocktail, price, serving size, opening hour, address, CNPJ, founding year, live act, cover charge or review appears in this build without being marked [CONFIRM]. Nor is there any statement or implication of a municipal permit, an environmental licence, a fire-safety certificate or a mooring authorisation for the waterside operation — it is simply not said until it is confirmed.