DailyDishes

Privacy policy

Last updated: 4 June 2026

This Privacy Policy explains how Curly Idea Lda ("we", VAT PT518580547), operating the DailyDishes brand, collects, uses, shares, and protects personal data when you use our websites, restaurant dashboard, onboarding flows, APIs, and WhatsApp-based services (together, the "Service").

We act as data controller for account and billing data relating to restaurants. For customer phone numbers and subscription preferences, restaurants are generally independent controllers of their subscriber relationships; we process that data on their behalf to deliver menus and manage opt-outs.

1. Data we collect

Restaurant owners

  • Business name, timezone, currency, and restaurant code.
  • Owner WhatsApp phone number (for verification and service messages).
  • Menu text, schedules, broadcast content, and subscriber counts.
  • Stripe customer and subscription identifiers, billing status, and payment history metadata.
  • Dashboard session data (see Cookie Notice for technical cookies).

Customers (diners)

  • WhatsApp phone number and chosen restaurant code when subscribing.
  • legal.privacy.s1.customers2

Automatically collected

  • Device/browser type, IP address, pages visited, and referral information on our websites.
  • Analytics events when you accept analytics cookies (see our Cookie Notice).
  • Server and security logs.

2. How we use data

We use personal data to:

  • Provide, secure, and improve the Service.
  • Authenticate owners, deliver menus, and send broadcasts requested by restaurants.
  • Process subscriptions, trials, credit purchases, and invoices via Stripe.
  • Respond to support requests and enforce our Terms.
  • Comply with legal obligations and defend legal claims.
  • Analyse aggregated usage where you have consented to analytics cookies.

3. Legal bases (EEA/UK)

Where GDPR applies, we rely on:

  • Contract — to perform our agreement with restaurant customers and deliver the Service.
  • Legitimate interests — security, fraud prevention, product improvement, and B2B communication, balanced against your rights.
  • Consent — non-essential cookies/analytics, and where required for certain marketing.
  • Legal obligation — tax, accounting, and regulatory requirements.

4. Sharing and processors

We share data only as needed with:

  • Stripe — payments and subscriptions (Stripe Privacy Policy).
  • Meta / WhatsApp Cloud API — message delivery (WhatsApp Privacy).
  • Google Analytics — website analytics when enabled and consented (measurement ID G-5WXKLM5DYQ).
  • Hosting and infrastructure providers — to run the application and databases.

We do not sell personal data. We may disclose information if required by law or to protect rights and safety.

5. International transfers

Some providers may process data outside the European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our vendors.

6. Retention

  • Active restaurant accounts: data retained while the account exists and as needed for the Service.
  • Billing records: typically up to 7 years for tax and accounting purposes.
  • Customer subscriptions: until unsubscribed and for a limited period thereafter in logs.
  • Analytics: per Google's retention settings when analytics cookies are accepted.

7. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, object, port data, and withdraw consent. You may also lodge a complaint with your local supervisory authority; in Portugal, the CNPD (www.cnpd.pt).

legal.privacy.s7.manage

8. Security

We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, and signed session tokens. No method of transmission over the internet is 100% secure.

9. Children

The Service is not directed at children under 16. We do not knowingly collect children's personal data for restaurant accounts.

10. Cookies and similar technologies

See our Cookie Notice for details on cookies, local storage, and your choices.

11. Changes

We may update this policy. The "Last updated" date at the top reflects the current version.

12. Contact

Data controller: Curly Idea Lda, VAT PT518580547
Email: [email protected]