Privacypolicy
This Policy explains what personal data Mesa de Casa processes, why it is used and how you can exercise your rights.
1. Controller and contact
Mesa de Casa determines how data is processed on this website. Privacy requests may be sent to contato@mesadecasa.com.br.
2. Data we process
We may process your name, username, email, photo and authentication identifier; reviews, favourites and messages; language, theme and cookie choices; and minimum technical data such as IP address, dates, browser and security logs.
Do not include sensitive data in contact messages or comments.
3. Purposes and legal grounds
Data is used to provide accounts and favourites, answer messages, moderate reviews, secure the service, prevent fraud, comply with law and improve the experience. Grounds may include service performance, consent, legitimate interests, legal obligations and legal claims.
4. Cookies and local storage
Necessary cookies support session, security, language and privacy choices. Theme and checklist preferences may remain in browser storage. Optional analytics or advertising technologies should only be enabled after a valid choice where required.
5. Sharing
Essential hosting, database, email, authentication and security providers may process limited data for us. Disclosure may also occur when legally required or to protect rights. We do not sell personal data.
6. International transfers
Infrastructure and authentication providers may process data abroad. Where applicable, recognised contractual and legal safeguards are used.
7. Retention
Data is kept only as necessary for the stated purposes, security, legal obligations and claims. Account data generally remains while the account is active; afterwards data is deleted or anonymised unless retention is required.
8. Security
We use proportionate safeguards including secure connections, access restrictions, session protection, input validation and audit records. No system is invulnerable; relevant incidents will be handled and notified as required.
9. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, portability, restriction, objection, review and withdrawal of consent. Identity verification and legally required retention may apply. You may also complain to the competent data protection authority.
10. Children and changes
The service is not directed to children for independent account creation. Guardians should supervise use and may request removal of improperly submitted data. External links have their own policies. Material changes will be dated on this page.