Privacy Policy

Last updated: [YYYY-MM-DD]

This policy explains how we handle your personal data when you use the "Os Magalhães" app (Android and iPhone) to order from the Os Magalhães restaurant in Amadora. The Portuguese version prevails.

1. Controller

[Denominação social ou nome do empresário em nome individual], NIF 292437714, Rua João de Deus, 33, Loja, Venda Nova, 2700-487 Amadora, Portugal. Privacy contact: [email de contacto, ex.: geral@osmagalhaes.pt].

2. Data we collect

Account (name, email, mobile, sign-in method); orders (items, notes, amounts, delivery addresses, optional tax number); location only if you allow it, to check the delivery area; payment references (card data is handled by Stripe — we only keep brand and last 4 digits of saved cards); device token for order notifications; your marketing choice.

Customer support: the messages you exchange with us in Profile › Chat with us, with your name, email and mobile number, so we can reply.

Alcohol: when an order includes alcohol, we keep your confirmation that you are 18 or older.

Fraud prevention: during payment, Stripe collects technical data from your phone (for example the model, the operating system and how the payment form is used) to detect fraud.

3. Purposes and legal bases (GDPR Art. 6)

Account and orders — contract; tax and accounting — legal obligation; security and fraud prevention — legitimate interest; news and offers — consent (withdraw any time in Profile › Edit profile).

4. Processors

Google (Firebase, which also hosts the admin website and the public pages), Stripe (payments), Zoho Corporation (ZeptoMail: sending emails, such as the order confirmation), Expo (push notifications) and OpenStreetMap/Nominatim (address check). Some may process data outside the EEA (e.g. USA) under adequacy decisions (EU-US Data Privacy Framework) or Standard Contractual Clauses.

With the email sending account currently used, emails are processed in Zoho's data centre in India, outside the European Economic Area. [to confirm with a lawyer]

5. Retention

Account data while the account is active; invoices and order records for the statutory tax period (currently 10 years); marketing data until you withdraw consent.

Customer support messages are deleted when you delete your account.

6. Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Delete your account in the app (Profile › Delete account) or contact us. You may complain to the Portuguese authority CNPD — www.cnpd.pt.

How to delete your account, and what is deleted and kept: Delete your account.

7. Minors

The app is intended for people aged 16 and over. Alcoholic drinks are only sold to people aged 18 and over.

8. Security

Data always travels encrypted (HTTPS) between the app, our servers and the providers above. The database is on Google (Firebase) servers in the European Union; each customer can only reach their own data, and only the restaurant team, with their own accounts, can see orders.

Passwords are managed by Google (Firebase Authentication) and are never stored in readable form. Card details are handled only by Stripe, which is certified under the PCI DSS security standard, and never pass through our servers.