Privacy Policy

Last updated: March 28, 2026

Privacy Policy

Last updated: March 28, 2026

Nina – Brunch & Speciality Coffee (“Nina,” “we,” “us,” or “our”) operates the website ninabrunchcafe.pt. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Portuguese data protection law.

1. Data Controller

Nina – Brunch & Speciality Coffee
R. Cais das Naus 2 B, 1990-304 Lisboa, Portugal
Email: hello@ninabrunchcafe.pt
Phone: +351 915 541 973

2. What Data We Collect

We may collect and process the following personal data:

  • Contact form submissions: Name, email address, and message content when you contact us through our website.
  • Loyalty programme: Name, email address, and visit history when you join our loyalty card programme.
  • Website analytics: Anonymous browsing data such as pages visited, time on site, device type, and approximate location (city level) through Google Analytics 4.
  • Cookies: Essential cookies for website functionality, analytics cookies (Google Analytics), and performance cookies (LiteSpeed Cache).

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiries submitted through our contact form.
  • To manage your loyalty programme membership and rewards.
  • To understand how visitors use our website and improve our content and services.
  • To ensure the technical functionality and security of our website.

4. Legal Basis for Processing

We process your data based on:

  • Consent: For analytics cookies and marketing communications (where applicable).
  • Legitimate interest: For website security, fraud prevention, and improving our services.
  • Contractual necessity: For managing your loyalty programme membership.

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Google Analytics (Google LLC): Anonymous website usage data. Google processes this data under their own privacy policy.
  • Highlight Cards: Loyalty programme data for managing rewards.
  • Hostinger: Our hosting provider, which stores website data on servers in the European Union.

6. Data Retention

  • Contact form data: Deleted within 12 months of your enquiry being resolved.
  • Loyalty programme data: Retained for the duration of your membership plus 12 months after your last visit.
  • Analytics data: Retained for 14 months (Google Analytics default).

7. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data (“right to be forgotten”).
  • Restrict the processing of your data.
  • Port your data to another service.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at hello@ninabrunchcafe.pt or visit us at our cafe.

8. Cookies

Our website uses the following cookies:

  • Essential: WordPress session cookies, LiteSpeed Cache cookies — required for the website to function.
  • Analytics: Google Analytics (_ga, _ga_*) — help us understand how visitors use our site. You can opt out at tools.google.com/dlpage/gaoptout.
  • Language: Polylang (pll_language) — remembers your language preference.

9. International Transfers

Google Analytics data may be transferred to Google servers in the United States. This transfer is covered by the EU-US Data Privacy Framework.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact & Complaints

If you have questions about this policy or wish to exercise your rights, contact us at:

Nina – Brunch & Speciality Coffee
R. Cais das Naus 2 B, 1990-304 Lisboa
Email: hello@ninabrunchcafe.pt
Phone: +351 915 541 973

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.