Privacy Policy

Last updated: April 2026

At Meal2Dream, we are committed to protecting your privacy and ensuring that your personal data is handled responsibly and in compliance with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, or interact with us.

1. Data Controller

The data controller responsible for processing your personal data is:

Meal2Dream
Lisbon, Portugal
Email: info@meal2dream.com
Website: meal2dream.com

2. What Data We Collect

We may collect and process the following categories of personal data:

2.1 Data You Provide Directly

• Name and surname
• Email address
• Phone number
• Correspondence and messages you send us
• Reservation or booking details
• Newsletter subscription preferences

2.2 Data Collected Automatically

• IP address
• Browser type and version
• Operating system
• Pages visited, date and time of access
• Referring website URL
• Device identifiers

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please refer to our Cookie Policy.

3. How We Use Your Data

We process your personal data for the following purposes:

• To operate, maintain, and improve our website and services
• To process reservations and manage bookings
• To respond to your inquiries and provide customer support
• To send you newsletters and marketing communications (only with your consent)
• To comply with legal obligations
• To analyse website usage and improve user experience
• To protect our legitimate business interests and prevent fraud

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Purpose	Legal Basis
Providing our services and managing bookings	Performance of a contract (Art. 6(1)(b))
Sending marketing communications	Consent (Art. 6(1)(a))
Website analytics and improvement	Legitimate interest (Art. 6(1)(f))
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))
Responding to inquiries	Legitimate interest (Art. 6(1)(f))

5. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients only when necessary:

• Service providers: hosting, email delivery, analytics, and payment processing partners who act as data processors on our behalf
• Legal and regulatory authorities: when required by law, regulation, or legal proceedings
• Business partners: where necessary for the performance of our services, subject to appropriate safeguards

Where data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. General retention guidelines:

• Customer and booking data: retained for the duration of our business relationship and up to 5 years thereafter for legal and accounting purposes
• Marketing data: retained until you withdraw your consent or unsubscribe
• Website analytics data: retained for up to 26 months
• Correspondence: retained for up to 2 years after last contact

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: you may request a copy of the personal data we hold about you
• Right to Rectification: you may request correction of inaccurate or incomplete data
• Right to Erasure: you may request deletion of your personal data, subject to legal obligations
• Right to Restriction: you may request that we restrict the processing of your data in certain circumstances
• Right to Data Portability: you may request to receive your data in a structured, commonly used, and machine-readable format
• Right to Object: you may object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@meal2dream.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD).

8. Consent

Where we rely on your consent to process personal data (e.g. marketing communications or non-essential cookies), you will be asked to provide clear, affirmative consent before any such processing takes place. You may withdraw your consent at any time by contacting us or using the unsubscribe mechanism provided in our communications.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

10. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Meal2Dream
Email: info@meal2dream.com
Website: meal2dream.com