Privacy Policy

For personal data processed to operate, secure, and improve Qardápio, Artizan acts as the data controller.

When a restaurant uses Qardápio to publish its own content, that restaurant remains responsible for the content it uploads and the editorial choices it makes on its public menu page.

We process only the data needed to provide the service and manage the relationship with Qardápio users.

We use data to create and maintain accounts, publish digital menus, host images, generate QR codes, measure product usage, respond to support requests, and keep the platform secure.

We may also use technical and statistical data to diagnose failures, prevent abuse, and improve the product. Qardápio does not currently use collected data for behavioral advertising.

We process personal data on the basis of contract performance or pre-contractual steps where this is necessary to provide the service, manage accounts, and publish menus at the user's request.

We rely on legitimate interests where we need to secure the platform, prevent fraud, resolve errors, and understand service performance in a proportionate way.

Where the law requires consent, such as for non-essential measurement technologies, processing depends on the choice made in the consent banner.

Qardápio relies on a limited set of technical providers to operate. These providers process data on Artizan's behalf or as part of the infrastructure they supply.

We keep personal data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, and protect the platform.

Menu content, images, and account data may remain while the account or restaurant workspace stays active. Technical logs and operational metrics may be retained for limited periods compatible with security, audit, and service-improvement needs.

When a menu is activated or shared, some of the content uploaded by the restaurant becomes publicly accessible through the menu link or its QR code.

The user is responsible for ensuring that any personal data included in that content has an appropriate legal basis and authorization for publication.

Under the GDPR and applicable Portuguese law, you may request access, rectification, erasure, restriction, objection, or portability where applicable.

You may also withdraw measurement consent at any time through the cookie preferences interface. For rights requests, identity verification, or retention and deletion questions, contact geral@artizan.pt.