Privacy Policy.

This Policy applies to all personal data processed in connection with our churrascaria activities — guests who dine in person or make reservations, guests who request invoices, corporate clients who book events or group meals on CNPJ, website visitors who submit enquiries and any person whose data we process. Most guests dine without any personal data being collected — an anonymous transaction is our default. Data is collected only when the guest makes a reservation, requests an invoice, or books a corporate event.

• Anonymous walk-in (default): Guests who arrive without a reservation and pay without requesting an invoice — no personal data collected or retained. Anonymous dining is the default.
• Reservation data: Name, WhatsApp and date/session when making a table reservation — to confirm the booking and communicate any changes. Deleted after the meal or after 30 days if unused.
• Invoice data (NF-e / NFC-e — when requested): CPF or CNPJ when the guest requests a formal invoice — for corporate meal reimbursement, event expense documentation or personal records.
• Event and group booking data: Company name, CNPJ, contact name, number of guests, event date and meal preferences for corporate lunches, private events and large group bookings. Retained for the duration of the event planning and for the invoice retention period thereafter.
• Dietary restrictions (when voluntarily shared): Allergies or dietary requirements shared for event or group meal planning. Treated as health-related data (LGPD Art. 5º, II) — used only to accommodate the specific booking and deleted after the event.
• Website contact data: Name, WhatsApp and message when using the reservation or enquiry form.
• Technical website data: IP address, browser type and pages visited.

• SEFAZ-SP / Receita Federal: NF-e or NFC-e with identification — mandatory electronic transmission. Anonymous walk-in transactions generate no personal data transmission.
• ISS / Prefeitura de Birigüi: ISS bookkeeping on restaurant services rendered in Birigüi.
• VISA-SP / CVS-SP: During food safety inspections — institutional data of the churrascaria (permits, temperature logs, food handler records) is shared with the authority. Guest personal data is not part of mandatory food safety records and is not shared with VISA-SP except under formal, documented legal requirement.
• PROCON-SP / Senacon: When required in consumer disputes under the CDC.
• Legal authorities: When required by court order or administrative authority.

Our operation is based in Birigüi, SP. All guest data is processed in Brazil. Tax records (NF-e) are processed exclusively in systems certified by the Receita Federal and SEFAZ-SP. Any communication platforms operating on international servers do so under the guarantees of Art. 33 of the LGPD.

• Anonymous walk-in transactions: No personal data collected or retained.
• Reservation data (no invoice): Deleted 30 days after the reservation date.
• Dietary restrictions: Deleted at the close of the event or meal — not retained.
• NF-e and NFC-e (ISS Birigüi / SEFAZ-SP): Minimum 5 years as required by Brazilian federal and São Paulo state tax legislation.
• Corporate event data: Retained for the duration of the event planning and for 5 years after the last invoice — consistent with tax retention requirements.
• Website contact data without booking: Up to 3 months from the date of contact.
• Website analytics: Aggregated and anonymised after 12 months.

• Anonymous walk-in as the default — no data collected for guests who do not reserve or request invoices;
• Dietary restriction data for events communicated verbally or by internal kitchen note — not stored in any system without consent;
• NF-e issued using a certified digital certificate (A1/A3) approved by the Receita Federal;
• Reservation data via WhatsApp handled with discretion;
• Website encrypted (HTTPS);
• Incident response procedures in accordance with LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data and receive a copy.
• Deletion (Art. 18, IV): Request deletion — subject to mandatory invoice retention (5 years). Reservation data without invoice can be deleted upon request at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days.

Our website may use cookies for essential functionality and aggregated performance analytics. We do not use behavioural tracking or advertising cookies. Cookie preferences can be managed through your browser settings.

M.F. Churrascaria welcomes families with children. When a reservation or event booking is made by an adult including children, we process only the adult's data. We do not collect data from minors via the website. Regarding alcoholic beverages, M.F. Churrascaria complies with the prohibition on serving alcohol to persons under 18 years of age under Brazilian Law nº 9.294/96 and the ECA. Age verification documents are checked visually only — not copied, photographed or recorded in any system.

This Policy may be updated to reflect changes in our activities, in the LGPD, in ANPD guidance, in ANVISA or VISA-SP food safety regulations, or in the tax legislation of the Municipality of Birigüi or the State of São Paulo. Material changes will be communicated via our website.

All privacy requests should be directed to our Data Protection Officer (LGPD Art. 41):