Privacy Policy

1. Who We Are

Pão Vivo is an artisan sourdough bakery located in Laranjeiro, Almada, Portugal. We are the data controller for any personal information you provide when placing an order or contacting us.

Contact: paovivo.bakery@gmail.com  ·  +351 939 984 082

2. What Data We Collect

When you place an order through our website, we collect:

• Your name
• Phone number
• Delivery address (if applicable)
• Order details (products, quantities, preferred collection time)

We do not collect payment card data. Payments are handled in person at the bakery or via bank transfer.

3. How We Use Your Data

Your information is used exclusively to:

• Process and fulfil your order
• Contact you regarding your order (confirmation, changes, delays)
• Respond to enquiries you send us directly

We do not use your data for marketing without your explicit consent, and we never sell or share your data with third parties for commercial purposes.

4. Legal Basis for Processing

We process your personal data based on contract performance — it is necessary to fulfil the order you placed with us (Article 6(1)(b) GDPR).

5. Data Storage

Your order data is stored securely in Google Firebase Firestore, a cloud database service provided by Google LLC, operating under GDPR-compliant infrastructure within the European Economic Area.

We retain order records for up to 12 months for operational and accounting purposes, after which they are deleted.

6. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Object — object to how we process your data

To exercise any of these rights, contact us at paovivo.bakery@gmail.com. We will respond within 30 days.

7. Cookies

Our website does not use tracking or advertising cookies. Firebase may use essential technical cookies to ensure the order form functions correctly. No personal data is collected through cookies on this site.

8. Third-Party Services

We use the following third-party services on our website:

• Google Firebase — order data storage and hosting
• Google Fonts — typography (no personal data transmitted)
• Unsplash — photography (no personal data transmitted)

9. Changes to This Policy

We may update this policy from time to time. Any significant changes will be reflected with an updated date at the top of this page.