PRIVACY POLICY

2. What we collect and why

The Bō Club newsletter. First name, last name and email address, to send you news, events and offers (about one email a month). Legal basis: your consent. Kept until you unsubscribe, which you can do at any time through the link in every email.

Messages and contact. The details you give us when you email, call or message us, to answer you. Legal basis: our legitimate interest in replying, or steps before a booking or contract. Kept for up to 12 months after our last exchange.

Job applications. The information you send through the “Join us” form (hosted on Google Forms) or by email, to assess your application. Legal basis: steps taken at your request before a possible contract. Kept for up to 12 months, unless you agree that we keep it longer for future openings.

Bookings, delivery and events. Table bookings go through TheFork and SevenRooms and delivery orders through Glovo; these companies process your data under their own privacy policies. We receive what we need to serve you (name, contact details, number of guests, time, any notes). Legal basis: performance of a contract. If you tell us about an allergy or dietary requirement, we use it only to prepare your meal safely, with your explicit consent.

Use of the website. Technical data such as IP address, device and browser type and pages visited, collected by our website provider Wix to run, secure and measure the Site. Essential cookies are used on the basis of our legitimate interest; any non-essential cookies are used only with your consent.

Invoices. If you ask for an invoice with your tax number, we keep it for 10 years, as required by Portuguese tax law.

 

3. Who we share it with

We do not sell your data. We only share it with service providers acting on our behalf – Wix.com (website, forms and newsletter), Google (forms and maps) and our certified accountant – and with public authorities when the law requires it.

 

4. Embedded content

Some pages show content from other services, such as Google Maps, our Google reviews and our Instagram feed. These services may collect data and set cookies when the content loads, under their own privacy policies.

 

5. Transfers outside the EU

Some providers, such as Wix and Google, may process data outside the European Economic Area. When they do, the transfer is protected by the EU–US Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission.

 

6. Your rights

You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. Write to hello@madambo.pt; we reply within one month. You also have the right to complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).

 

7. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

 

8. Children

The Site is not aimed at children under 16, and we do not knowingly collect their data.

 

9. Changes

We may update this policy. The current version is always the one published on this page, with its date.