Privacy Policy

Effective date: April 3, 2023
Last updated: 12 September 2025

This Privacy Policy explains how Botânico Restaurant, Lda (“Botânico”, “we”, “us”, “our”) handles your personal data when you visit botanico.pt, contact us, or use our services. Botânico belongs to the Loyola Portugal Group.

0) Legal framework

We process personal data in accordance with the EU General Data Protection Regulation — Regulation (EU) 2016/679 (GDPR) and Portugal’s Law No. 58/2019. Our supervisory authority is the CNPD — Comissão Nacional de Proteção de Dados (Portugal).

1) Who we are (Controller)
  • Controller: Botânico Restaurant, Lda (part of Loyola Portugal Group)
  • Fiscal number: PT516823361
  • Registered fiscal address: Quinta Shopping, Número 111, Quinta do Lago, 8125-024 Almancil, Portugal
  • Phone: (+351) 289 098 810
  • Privacy contact email: marketing@loyolaportugal.pt
2) Data we collect
  • Identity & contact: name, email, phone, address.
  • Booking/enquiry data: reservation details, date/time, party size, special requests.
  • Purchase & billing: items/services purchased, totals, tax ID, invoice details (payments handled by providers).
  • Marketing data: newsletter sign-ups and preferences.
  • Communications: messages via forms, email, phone or social networks.
  • Website usage & cookies: IP, device/browser data, pages viewed, consent choices (see Cookies Policy).
    Children. Our site/services are not intended for children under 16.
3) Why we use your data (purposes & legal bases)
  • Provide quotes, take bookings and deliver servicescontract / pre-contractual steps.
  • Invoicing and tax/accounting compliancelegal obligation.
  • Customer support and operationslegitimate interests.
  • Email marketing/newslettersconsent (withdraw any time).
  • Website analytics & improvementconsent for non-essential cookies (strictly necessary rely on legitimate interests).
  • Security & fraud preventionlegitimate interests.
    If we wish to use photos/videos in which you are identifiable (e.g., events), we will ask for your consent first.
4) Who receives your data

Only what’s necessary is shared with trusted processors/partners under GDPR contracts, such as:

  • Website hosting/CDN & maintenance
  • Email & productivity tools
  • Email marketing provider (e.g., Brevo/Sendinblue, if used, for newsletters and campaign analytics)
  • Payment processors (if online payments)
  • Reservation/booking platforms (integrated with Resdiary)
  • Analytics/advertising vendors (only after consent for non-essential cookies)
  • We may disclose data to public authorities where required by law.

    5) International transfers

    If any processing occurs outside the EEA/UK, we rely on an adequacy decision or Standard Contractual Clauses (or equivalent safeguards). You may request details via the contact above.

    6) How long we keep data
    • Enquiries & general communications: up to 2 years after the last meaningful contact.
    • Reservations, clients & billing records: for the legally required period (e.g., accounting/tax).
    • Marketing data: until you withdraw consent or up to 24 months after your last interaction.
      After these periods, we delete or anonymise data securely.
    7) Your rights (GDPR)

    You can access, rectify, erase, restrict processing, object, and request data portability. Where processing relies on consent, you may withdraw it at any time (without affecting past processing).
    To exercise your rights, email marketing@loyolaportugal.pt. We respond within one month under the GDPR.
    You may also complain to the CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).

    8) Confidentiality statement (updated)

    The processing of your personal data is confidential and remains the responsibility of Botânico. You have the right to access and correct your personal data free of charge, under applicable law — namely the GDPR and Law No. 58/2019 (which replaced the former Law No. 67/98 of 26 October). You may exercise these rights via the contact in Section 1.

    9) Cookies & similar technologies

    We use strictly necessary cookies and, with your consent, analytics/advertising cookies. You can Accept all, Reject non-essential, or Manage preferences at any time via Cookie Settings. Where Google tags are used, we comply with Google’s EU User Consent Policy. See our Cookies Policy for details.

    10) Security

    We implement appropriate technical and organisational measures (e.g., encryption in transit, access controls, backups). No method is entirely risk-free; we continuously improve our safeguards.

    11) Consumer dispute resolution (ADR)

    According to Law No. 144/2015, in case of dispute the competent Alternative Dispute Resolution entity is the Centro de Arbitragem de Consumo do Algarve — Tribunal Arbitral.

    12) Changes to this policy

    We may update this Policy to reflect legal, technical, or business changes. We will post the new version here and update the “Last updated” date.

    13) Contact

    Questions about privacy or this Policy: marketing@loyolaportugal.pt
    Postal address: Quinta Shopping, Número 111, Quinta do Lago, 8125-024 Almancil, Portugal
    Controller: Botânico Restaurant, Lda (Loyola Portugal Group)
    Phone: (+351) 289 098 810