LGPD · Law 13.709/2018
Privacy Policy
Last updated: [CONFIRM date]
[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address, email or period below is real.]
1. Data controller
The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.
Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or “not applicable”].
2. What we collect and why
| Data | When | Purpose | Legal basis (LGPD art. 7) |
|---|---|---|---|
| Name | Booking / order form | Identify the booking or order | Pre-contractual steps (item V) |
| Phone / WhatsApp | Booking form | Confirm and notify changes | Pre-contractual steps (item V) |
| Date, time, party size | Booking form | Manage the dining room | Pre-contractual steps (item V) |
| Dietary restrictions and allergies | Booking form | Food safety — potentially sensitive data | Consent (item I) |
| Newsletter, if subscribed | Send communications | Consent (item I) | |
| Analytics cookies | Browsing, if permitted | Measure site usage | Consent (item I) |
| Marketing cookies | Browsing, if permitted | Measure campaigns | Consent (item I) |
| Delivery address and landmark | Weekly subscription | To deliver the marmita. On a recurring plan this is a home address, held for as long as the plan runs | Performance of a contract (art. 7, V) |
| The day and time window you receive | Weekly subscription | To plan the route. Combined with the address it reveals a routine, which is why access is restricted and it goes into no marketing tool | Performance of a contract (art. 7, V) |
| Dietary restriction, allergy and chosen line | Plan selection | Sensitive health data (art. 5, II). Used only to prepare and label the meal safely, under the specific, highlighted consent of art. 11, I | Specific consent (art. 11, I) |
| Employee names on a corporate account | Company form | To identify each person’s marmita. The buyer is handing over third-party data and cannot waive those people’s rights | Performance of a contract (art. 7, V) |
| Pix payment details | Plan billing | To reconcile payment. The key and the receipt stay with the financial institution; this site processes no card | Performance of a contract (art. 7, V) and tax obligation (art. 7, II) |
Dietary restrictions and allergies are sensitive health data under LGPD art. 5, II. Art. 11 requires specific, highlighted consent for a stated purpose — here, preparing and labelling the meal safely. It is not there to segment a mailing list, build an ad audience or feed a recommendation.
3. Cookies
Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.
| Category | Default | Examples | Retention |
|---|---|---|---|
| Essential | Always on | Consent record (stored in your browser) | [CONFIRM] |
| Analytics | Off | [CONFIRM tool — e.g. Google Analytics 4] | [CONFIRM] |
| Marketing | Off | [CONFIRM tool — e.g. Meta Pixel] | [CONFIRM] |
4. WhatsApp
The buttons on this site open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control.
5. Sharing
We do not sell personal data. We share it only with processors necessary to deliver the service:
- Website hosting — [CONFIRM]
- Analytics tool, if permitted — [CONFIRM]
- WhatsApp / Meta Platforms, when you start the conversation
- Public authorities, where legally required
International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]
6. How long we keep it
Contact data and enquiries: [CONFIRM period]. Consent records: [CONFIRM period]. After that, data is deleted or anonymised, unless a legal retention duty applies.
7. Your rights (LGPD art. 18)
At any time, free of charge, you may request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary or non-compliant data;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share your data with;
- information about your right to refuse consent and the consequences;
- withdrawal of consent.
To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.
8. Security
We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.
9. Minors
This site is not directed at people under 18 and does not knowingly collect children's data. No image on this site depicts children or minors.
10. Changes
We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.
Terms and conditions of service
This section is deliberately empty. The site footer points at «Terms», and no terms document exists anywhere in this build. A weekly plan is a contract: cancellation notice, refund policy, delivery window, what happens when nobody answers the door, automatic renewal and price changes. None of it has been supplied, and none of it can be invented by whoever builds the site.
[CONFIRM — have the terms drafted before launch, ideally with legal review. Until they exist, the footer's «Terms» link lands here and says so.]
A subscription holds a home address and a routine
A one-off delivery uses an address once. A weekly plan holds where you live, which day you are home to receive and how often — and holds it for as long as the plan runs. Together those three fields describe a routine, which is why access is limited to the day’s route and they are not exported to a marketing tool, a shared spreadsheet or a messaging group.
Who runs the route, whether delivery is in-house or by app, and what the courier can see of the order [CONFIRM]. If delivery is outsourced, the partner is a processor and needs a contract with a data-protection clause [CONFIRM who it is].
Allergens: the label is an obligation, not a courtesy
ANVISA RDC 26/2015 requires food allergens to be declared, and Lei 10.674/2003 requires the statement “contém glúten” or “não contém glúten”. That applies to the packaging, not only to the website. What is printed on the marmita label today [CONFIRM].
A kitchen producing several lines on the same bench carries a cross-contamination risk, and that has to be said before the purchase, not after. [CONFIRM the exact wording the kitchen can stand behind]
Corporate accounts: third-party data
When an office subscribes for its team it hands over other people’s names and often their dietary restrictions. Each employee remains a data subject: they can ask us directly for access, correction and deletion, and the buying company does not waive those rights on their behalf. The company also needs its own legal basis for having collected that information.
Payment by Pix
Pix settles at the financial institution. This site processes no card and stores no card number. Which payment methods are actually accepted, and whether there is a recurring charge [CONFIRM].
The right to withdraw — and its limit
CDC art. 49 gives seven days to withdraw from a purchase made away from the premises. Perishable food already cooked and delivered is a case where that right runs into the nature of the product, and what the kitchen will accept — cancel before the cutoff, swap, credit the following week — has to be written down before payment. [CONFIRM the full policy]
Retention
Enquiries that did not become a plan [CONFIRM]. Delivery history for as long as the plan is active, plus the applicable tax period [CONFIRM with the accountant]. Dietary restrictions are deleted when the plan ends, unless you ask us to keep them [CONFIRM].
Who the controller is
Registered name, CNPJ, address and the data officer (DPO) who receives art. 18 requests [CONFIRM all of them]. None of them was invented to fill this page. The contact channel today is the Instagram inbox, which is not enough as a data-subject channel — a dedicated e-mail address solves it [CONFIRM].