Privacy policy
Last updated: 01/01/2026
1. Who is responsible for your data
The controller of your personal data is Madeira Veggie (sole trader), based in Funchal, Ilha da Madeira, Portugal, email hello@madeiraveggie.com. We are the controller for data collected through madeiraveggie.com. We have not appointed a Data Protection Officer.
2. What we collect, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR art. 6) | Retention |
|---|---|---|---|---|
| Buying the Guide | Email, name (if given), invoice details, order data, payment confirmation (we do not receive your card number) | Supply the Guide, take payment, send the download link and updates, support | Performance of the contract (6(1)(b)) | While the contract runs and while needed for complaints and legal claims |
| Invoicing and accounting | Invoice data | Tax and accounting obligations | Legal obligation (6(1)(c)) | For the period required by tax and accounting law |
| Launch notification list (only if you sign up on the coming-soon page) | Email address | Email you once, when we launch | Consent (6(1)(a)) | Until we have sent the launch email, or until you ask us to delete it |
| Contact form / email | Name, email, message (the contact form opens your email app, so your message reaches us by email) | Answer you | Our legitimate interest in answering you, or steps you ask for before a contract (6(1)(f) / 6(1)(b)) | 12 months after the conversation ends |
| Reporting a change about a place | Name/email (optional), message | Correct our information | Legitimate interest (6(1)(f)) | 12 months |
| Website analytics (only if you accept analytics cookies) | Cookie identifiers, pages visited, device and browser data, approximate location, IP address | Understand how the site is used and improve it | Consent (6(1)(a)) | Cookies: see the Cookie policy. Data in the tool: up to 14 months |
| Marketing (only if you accept marketing cookies) | Cookie identifiers, pages visited and actions on the website, device and browser data | Measure and improve our advertising | Consent (6(1)(a)) | Cookies: see the Cookie policy. Data in the tool: as set by Meta under its own terms |
| Hosting and security logs | IP address, browser data, date and time | Run and protect the site | Legitimate interest (6(1)(f)) | 30 days |
You are not required to give us your data, but without the data for a purchase we cannot supply the Guide. We do not take decisions about you by automated means. We do not knowingly collect data from children.
3. Who receives your data
- Payment and checkout provider (to take your payment and deliver the Guide).
- Email delivery provider.
- Hosting provider.
- Accountant and invoicing software provider.
- Google (analytics) and Meta (advertising measurement), only if you accept analytics or marketing cookies.
- Authorities, when the law requires it.
Our service providers process data on our behalf and are bound to protect it. Google and Meta process data under their own terms.
4. Transfers outside the EU/EEA
Some of our providers, including Google and Meta, may process data outside the EU/EEA. Where this happens, it relies on appropriate safeguards such as an adequacy decision or standard contractual clauses.
5. Your rights
You have the right to: access your data; correct it; have it erased; restrict its use; object to processing based on legitimate interest; receive your data in a portable format; and withdraw consent at any time (this does not affect what was done before). To use these rights, write to hello@madeiraveggie.com. We answer within one month.
6. Complaints
If you think we are not respecting your data rights, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or to the authority of your country of residence.
7. Security
We use measures such as encrypted connections (HTTPS) and limited access. No system is perfectly secure; if there is a breach that puts your rights at risk, we will notify you and the authority as the law requires.
8. Changes
We will update this policy when needed and show the date at the top.