Costa Fria ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, make a reservation, or contact us. This policy complies with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

1. Data Controller Costa Fria R. Cap. João Lopes 4, 2655-295 Ericeira, Portugal eat@costafria.com

2. Information We Collect We may collect the following personal data:

• Reservation data: Name, email address, phone number, number of guests, date and time, and any special requests submitted via our booking platform.

• Communication data: Messages, inquiries, or feedback sent to us via email or contact forms.

• Technical data: IP address, browser type, device information, and pages visited on our website (collected via cookies and analytics tools).

We do not collect payment card information directly — payments are handled by third-party processors.

3. How We Use Your Information We use your data to:

• Process and confirm table reservations

• Communicate with you regarding your booking

• Respond to inquiries and requests

• Improve our website and services

• Comply with legal obligations

We will only send marketing communications with your explicit consent, and you may opt out at any time.

4. Legal Basis for Processing We process your data on the following legal bases:

• Contract performance: To manage your reservation and deliver our service.

• Legitimate interests: To improve our website and service quality.

• Legal obligation: Where required by Portuguese or EU law.

• Consent: For marketing communications and non-essential cookies.

5. Sharing Your Information We may share your data with trusted third-party service providers who assist us in operating our business — including our reservation platform (EatApp) and website analytics tools. These providers are contractually bound to process data only as instructed and in compliance with GDPR. We never sell your personal data.

6. Cookies Our website uses cookies to ensure functionality, analyse traffic, and improve your browsing experience. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

7. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Reservation data is typically retained for up to 3 years for operational and legal purposes.

8. Your Rights Under the GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request erasure of your data ("right to be forgotten")

• Object to or restrict certain types of processing

• Withdraw consent at any time (where processing is based on consent)

• Lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt

To exercise any of these rights, contact us at eat@costafria.com.

9. Data Security We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

10. Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised date.

11. Contact For any questions about this Privacy Policy or how we handle your data: 📍 R. Cap. João Lopes 4, 2655-295 Ericeira, Portugal ✉ eat@costafria.com 📞 +351 926 367 969