Privacy Policy

1. Introduction

Rcj Alimentos e Bebidas LTDA ("we", "our", or "us"), registered under CNPJ 48.283.948/0001-28, with its principal place of business at R. Dr. Jorge Tibiriçá, 1495, Centro, Santo Antônio de Posse - SP, 13830-080, is committed to protecting your privacy and personal data.

This Privacy Policy describes how we collect, use, store, and share your personal information in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018) and other applicable regulations.

2. Data We Collect

• Identification data: full name, CPF, date of birth
• Contact data: email address, phone number, physical address
• Order data: purchase history, menu preferences, dietary requirements
• Loyalty data: rewards program participation and redemption history
• Payment data: billing information processed through secure payment systems
• Fiscal data: information required for NFC-e and tax compliance
• Navigation data: IP address, browser type, cookies, access logs

3. How We Use Your Data

• Processing food and beverage orders
• Managing customer accounts and order history
• Administering loyalty programs and promotions
• Accommodating dietary restrictions and allergy information
• Processing payments and issuing fiscal receipts (NFC-e)
• Communicating about menu updates, promotions, and events
• Improving our menu offerings and customer experience
• Complying with food safety, health, and tax regulations

4. Legal Basis for Processing

• Consent provided by the data subject
• Performance of a contract or preliminary procedures related to a contract
• Compliance with legal or regulatory obligations
• Legitimate interests of the controller, provided fundamental rights are preserved

5. Data Sharing

• Payment processors for secure transaction handling
• Delivery platforms when applicable
• Technology service providers for system maintenance
• Tax authorities as required by fiscal regulations
• Health and sanitary authorities when required by law

6. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Fiscal records and transaction data may be retained as required by tax regulations. Upon expiration, your data will be securely deleted or anonymized.

7. Your Rights

Under the LGPD, you have the following rights:

• Confirmation of the existence of data processing
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of data to another service provider
• Deletion of data processed with your consent
• Information about entities with which your data has been shared
• Information about the possibility of denying consent and its consequences
• Revocation of consent

To exercise any of these rights, please contact us using the information in Section 10.

8. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience. You may configure your browser to refuse cookies; however, some features may not function properly without them.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Despite our efforts, no method of electronic transmission or storage is completely secure.

10. Contact Information

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last updated" date.