Privacy Policy

Last updated: 30/06/2025

Welcome to Calmaria. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or contact us.

1. Who We Are

Calmaria is a local brunch café in Portugal. Our website is designed to help people discover our café, learn about our offerings, and get in touch with us.

2. What Personal Data We Collect

• Email address and message content – when you use the contact form to send us a message.
• Analytics data – via Umami, a privacy-focused, GDPR-compliant tool that collects anonymous data like page views and device type. It does not collect personally identifiable information.

We do not collect payment details or sensitive personal information.

3. Why We Collect This Data

• To respond to your messages sent through our contact form.
• To understand how our website is performing using anonymous analytics.

4. Legal Basis for Processing Data

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent – You choose to provide your email and message via our contact form and check the box to give permission.
• Legitimate interest – For using anonymous website analytics to improve our services.

5. How We Obtain Your Consent

Before you submit your contact form, we ask for your consent through an optional checkbox that states:

“I consent to email communication for reply purposes (optional).”

If you don’t check this box, we won’t respond to your message via email.

6. How We Store and Protect Your Data

• Your emails are stored in our secure business inbox at info.calmaria@gmail.com.
• The website is secured with HTTPS and hosted on Netlify, which provides robust security and encryption.
• We do not create user accounts or store data in any database.

7. Data Sharing with Third Parties

We do not sell or share your personal data with any third parties for marketing or profiling.

We use the following GDPR-compliant services:

• Umami Analytics (anonymous and cookie-free)
• Netlify (hosting and HTTPS)

These services may process data as part of their operations, but they do not access your personal messages or emails.

8. International Data Transfers

Our email provider is Gmail (Google). Google may store data on servers located outside the European Union. However, Google complies with applicable data protection laws and uses safeguards such as Standard Contractual Clauses (SCCs) to protect EU user data.

9. Data Retention

We keep personal emails only in our inbox at info.calmaria@gmail.com. We do not set up user accounts or store messages in a database. If you'd like us to delete your email, please contact us directly.

10. Your Rights Under GDPR

As an EU citizen, you have the right to:

• Access your personal data
• Correct your personal data
• Request deletion of your data
• Withdraw consent at any time

To make any of these requests, email us at: info.calmaria@gmail.com

11. Updates to This Privacy Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page, and we recommend checking back periodically to stay informed.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

Email: info.calmaria@gmail.com

Thank you for visiting Calmaria. We respect your privacy and appreciate your trust.