Privacy Policy

YouMe Specialty Cafe & Brunch ("we", "us", "our") is a food & beverage business located in Funchal, Madeira, Portugal. We operate the website www.youmemadeira.pt (the "Site"). For any privacy-related enquiries, contact us at ylemonparty2025@gmail.com.

We may collect the following categories of personal data when you use our Site: • Usage data — pages visited, time spent, referral source, browser type and device type, collected automatically via analytics tools. • Cookie data — small files stored on your device to remember your preferences (see Section 5). • Contact data — name and e-mail address if you submit an enquiry or reservation request.

We use your data to: • Operate and improve the Site and our services. • Process reservation and order enquiries. • Understand how visitors use the Site (analytics). • Comply with legal obligations under applicable EU/Portuguese law. We do not sell your personal data to third parties.

Where the General Data Protection Regulation (EU 2016/679) applies, we process your data on the following bases: • Legitimate interests — analytics and site operation. • Consent — non-essential cookies (you may withdraw at any time). • Contractual necessity — processing reservation or order enquiries.

We use the following types of cookies: • Essential cookies — required for the Site to function. No consent needed. • Analytics cookies — help us understand traffic patterns (e.g. page views). Only set after you accept. You can withdraw consent at any time by clearing your browser's cookies. Your preference is stored locally in your browser under the key `youme-cookie-consent`.

We may use the following third-party services which may set their own cookies or collect data: • Google Maps / Places — embedded maps and location data (Google's Privacy Policy applies). • Instagram — embedded reels (Meta's Privacy Policy applies). We have no control over data collected directly by these third parties.

We retain personal data only for as long as necessary for the purposes described above, or as required by law. Analytics data is anonymised after 14 months.

Under GDPR you have the right to: • Access — request a copy of the data we hold about you. • Rectification — ask us to correct inaccurate data. • Erasure — ask us to delete your data ("right to be forgotten"). • Restriction — ask us to limit processing in certain circumstances. • Portability — receive your data in a machine-readable format. • Object — object to processing based on legitimate interests. To exercise any of these rights, e-mail us at ylemonparty2025@gmail.com. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. Our Site is served over HTTPS.

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.