Privacy Policy

SpoonZoom Privacy Policy

Effective May 15, 2026

1.Who we are

This site is operated by SpoonZoom, LLC, a Florida limited liability company ("SpoonZoom," "we," "us"). SpoonZoom is an independent media company that publishes a directory of restaurants and their dietary accommodation information, supported by advertising. You can contact us at privacy@spoonzoom.com.

2.What this policy covers

This policy explains how we handle personal data on spoonzoom.com and in our outreach to restaurants. It covers two groups of people: restaurants and food service businesses whose information we list, and visitors who use the site to find places to eat.

3.Information about restaurants

We collect and publish business contact information about restaurants in Lisbon and other cities we expand to, including business name, address, cuisine type, phone number, website, email address, hours, and photographs.

When a restaurant responds to our outreach, we also collect what they tell us about the dietary restrictions they can and cannot accommodate, plus any practical kitchen details (shared equipment, cross-contamination risk, etc.) and dishes they'd like to highlight.

Sources. Initial business data comes from Google Places and from the restaurant's own website. Dietary accommodation data comes directly from the restaurant through our outreach emails and onboarding survey.

Why we process it. To build a public directory that helps people with dietary restrictions find restaurants that can accommodate them.

Lawful basis. For business contact information used to reach out, we rely on legitimate interest under Article 6(1)(f) of the GDPR: building a public-benefit directory with clear utility to diners with allergies and dietary needs, balanced against minimal intrusion since the data is business-context contact information already published by the restaurants themselves. For information restaurants give us directly through the survey, we rely on their consent, given by submitting the form.

How long we keep it. Listings remain published until the restaurant requests removal, goes out of business, or the email becomes invalid. Restaurants can remove their listing at any time using the link on their listing page or by replying "PARAR" / "STOP" to any of our emails.

4.Information about site visitors

What we collect about visitors depends on the choices you make in our cookie consent banner.

Essential data we always collect. When you visit spoonzoom.com, our hosting provider logs basic technical data (IP address, browser type, pages visited, timestamps) for security, fraud prevention, and to keep the site running. We rely on legitimate interest for this minimal processing. You cannot opt out of this - it is required for the site to function.

With your consent, we additionally collect:

  • Analytics data - how you use the site, which pages you view, which filters you apply, basic device and browser information. We use this to improve the directory.
  • Advertising data - identifiers that allow our advertising partners (see Section 7) to show you relevant ads on our site and elsewhere, measure ad performance, and limit how many times you see the same ad. This is shared with Meta, Google, and other advertising partners.

If you contact us by email, we retain those messages so we can respond and keep a record of your request.

5.Cookies and tracking technologies

We use cookies and similar technologies on spoonzoom.com. Cookies are small files stored on your device when you visit a website.

Categories of cookies we use:

CategoryPurposeExamplesSet without consent?
Strictly necessarySite functionality, security, language preferenceSession cookie, language selectorYes
AnalyticsUnderstand how the site is usedGoogle Analytics, Meta Pixel (analytics events)No - requires consent
AdvertisingPersonalized advertising and audience measurementGoogle Ads, Meta Pixel (ad targeting), other ad partnersNo - requires consent

How we ask for consent. The first time you visit, we show a cookie banner with three clearly visible options: Accept all, Reject all, and Customize. Reject all is given the same prominence as Accept all. You can use the site fully without accepting non-essential cookies. We do not use cookie walls.

Customizing your choices. The "Customize" option lets you accept or reject analytics and advertising categories independently.

Withdrawing or changing consent. You can change your cookie preferences at any time by clicking "Cookie settings" in the site footer. Withdrawing consent is as easy as giving it.

Lawful basis for cookies. For non-essential cookies, we rely on your consent under Article 6(1)(a) of the GDPR and Article 5 of the ePrivacy Directive (transposed in Portugal as Lei 41/2004). For strictly necessary cookies, we rely on legitimate interest.

6.How we use information

We use the information we collect to:

  • Build and maintain the public directory of restaurants
  • Send outreach to restaurants and respond to their replies
  • Process survey submissions and publish verified listings
  • Honor removal and update requests
  • Improve the site (with your consent, where analytics cookies are used)
  • Show you relevant advertising and measure its effectiveness (with your consent)
  • Comply with legal obligations

7.Sharing your information

Service providers (processors). We use third-party tools to operate the service, including hosting (Vercel), database (Neon), outbound email (Instantly), and a provider for our own email accounts. These providers process data on our behalf under written agreements that restrict their use of the data to providing the service.

Advertising partners. When you consent to advertising cookies, we share advertising identifiers and event data with:

  • Google (Google Ads, Google Analytics) - for analytics, audience measurement, and personalized advertising. Google's privacy policy: policies.google.com/privacy
  • Meta (Facebook, Instagram) - for analytics events and personalized advertising via Meta Pixel. Meta's privacy policy: facebook.com/privacy/policy
  • Other advertising partners we may add over time. Current partners are listed in the cookie settings panel.

These advertising partners act as independent data controllers for the data they receive in the context of their advertising services. They process this data under their own privacy terms and for their own purposes, including building advertising profiles. You can opt out of personalized advertising by rejecting advertising cookies in our banner or by using the opt-out controls these providers offer directly.

We do not sell personal data in the traditional sense (e.g., to data brokers), but sharing data with advertising partners for personalized advertising may be considered "sale" or "sharing" under some US state privacy laws.

8.International data transfers

SpoonZoom, LLC is based in Florida, United States. Personal data we collect from people in the European Economic Area, the United Kingdom, or Switzerland is transferred to and processed in the United States. Several of our service providers and all of our advertising partners are also based in the United States.

We rely on the European Commission's Standard Contractual Clauses (and equivalent UK and Swiss mechanisms) as the legal basis for these transfers. Where available, we also rely on transfer mechanisms such as participation in the EU-US Data Privacy Framework by service providers and advertising partners (Google and Meta are both DPF-certified).

If you have questions about how we protect data transferred internationally, contact us at the email above.

9.Your rights

If you are in the EEA, the UK, or Switzerland, you have the right to:

  • Access the personal data we hold about you
  • Correct information that is inaccurate or incomplete
  • Erase your personal data
  • Object to our processing of your personal data
  • Restrict how we process your data in certain circumstances
  • Port your data to another service in a structured, machine-readable format
  • Withdraw consent at any time, where we rely on consent (including for cookies)

To exercise any of these rights, email privacy@spoonzoom.com. We respond within 30 days. For restaurant listings specifically, the fastest route is the "Remove this listing" link on your listing page, or simply replying "PARAR" / "STOP" to any email we've sent you - both result in full deletion within 48 hours. To withdraw cookie consent, click "Cookie settings" in the site footer.

10.Right to complain

If you believe we have mishandled your personal data, you can complain to your local data protection authority. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD) - cnpd.pt. We'd appreciate the chance to address the issue first by contacting us at the email above, but you are not required to.

11.Children

SpoonZoom is not directed at children under 16 and we do not knowingly collect personal data from them. We do not show personalized or targeted advertising to anyone we know to be a minor. If you believe we have inadvertently collected data from a child, contact us and we will delete it.

12.Security

We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls on our database, and limiting access to data to people who need it for the operation of SpoonZoom.

13.Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of the page. If we make material changes - such as adding new categories of data we collect or new advertising partners - we'll surface the change on the site and refresh the cookie banner so you can re-confirm your preferences.

14.Contact

Questions, requests, or complaints: privacy@spoonzoom.com. SpoonZoom, LLC.