Privacy

Privacy Policy

Last updated: 15 August 2026

This website is operated by Restaurante Malveiro, Rua de Vale de Éguas 169, 8135-033 Almancil, Loulé, Portugal ("we", "us"). We are the data controller for any personal data processed through this site. This policy explains, in plain terms, what happens to your data when you visit.

1. The short version

This is a simple information website. We do not use analytics, advertising pixels, tracking scripts, contact forms, newsletters or online booking. We do not sell, share or profile your data. The only way to book a table is by telephone.

2. Data we process

2.1 Server logs (hosting)

The site is hosted by Netlify, Inc. (San Francisco, USA). When you load a page, Netlify's servers automatically receive technical data needed to deliver it: your IP address, date and time of the request, the page requested, browser type and operating system, and the referring page. Netlify processes this data on our behalf for security and to keep the service running, and retains it only for a short period. Netlify acts as our processor under a data processing agreement and transfers to the USA are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.

Legal basis: our legitimate interest in operating a secure, reliable website (Art. 6(1)(f) GDPR).

2.2 Your cookie choice

When you make a choice in the cookie notice, we store that choice in your browser's local storage under the key mv-consent so we do not ask you again. This is stored only on your device, is never sent to us, and contains no personal data. See our Cookie Policy.

Legal basis: strictly necessary for the service you asked for (Art. 6(1)(f) GDPR and Art. 5(3) ePrivacy Directive exemption).

2.3 Fonts

All typefaces are served from our own hosting. No font requests are made to Google or any other third party.

2.4 Telephone reservations

If you call us to book a table, we note the name, phone number, date, time and party size needed to hold your reservation. This information is used only to manage your booking and is deleted once it is no longer needed.

Legal basis: performance of a contract or steps at your request before a contract (Art. 6(1)(b) GDPR).

3. Links to other services

The site links to Instagram, Facebook, Tripadvisor and Google Maps. Nothing is loaded from those services on our pages; data is only shared with them if you click a link and leave our site. Their own privacy policies then apply.

4. What we do not do

• No analytics or statistics tools
• No advertising, remarketing or social media pixels
• No third-party embeds (maps, videos, widgets)
• No contact forms, newsletters or accounts
• No sale or sharing of personal data

5. Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise any right, contact us at the address above or by phone on +351 917 824 131. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1º, 1200-651 Lisboa.

6. Security

The site is served exclusively over HTTPS (TLS encryption). We keep the amount of data processed to the minimum required.

7. Changes

We may update this policy if the site changes. The date at the top shows the current version.