Privacy Policy

Who we are

Sharky's Bar ("we", "us", or "our") operates sharkys-albufeira.com. We are the data controller for personal data processed through this website.

What data we collect

We collect limited information depending on how you use the site:

• Website visitors: technical data such as IP address, browser type, device type, and pages viewed. This is collected automatically by our hosting provider to deliver the site securely.
• When you contact us: if you email, call, WhatsApp, or message us via social media, we receive the information you choose to share (for example your name, phone number, or message content).
• Admin area: if you log in to the private gallery admin at /admin, we set a session cookie to keep you signed in. Login credentials are verified on our server and are not stored in the cookie.

We do not operate a public contact form on this website and we do not sell personal data.

How we use your data

• To operate, maintain, and secure the website.
• To respond to enquiries about bookings, events, menu items, or general questions.
• To manage gallery content through the password-protected admin area.
• To comply with legal obligations where required.

Legal basis (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on:

• Legitimate interests - to run and protect our website and respond to routine business enquiries.
• Contract or pre-contractual steps - when you ask us about private events, reservations, or similar services.
• Consent - where you choose to contact us or follow links to third-party platforms.
• Legal obligation - where we must retain or disclose information to comply with law.

Cookies

This website uses essential cookies only. The admin session cookie (sharkys_admin_session) is set when an authorised user logs in to manage gallery images. It expires after 24 hours or when you log out.

We do not use advertising cookies or third-party marketing trackers on the public pages of this site.

Third-party services

Some parts of the site rely on external providers:

• Vercel - hosts the website and may process server logs for security and performance.
• Vercel Blob - stores gallery images and hosted video files served on the site.
• Google Maps - embedded map on our location page; Google may collect data according to its own privacy policy when you interact with the map.
• External links - we link to Facebook, TripAdvisor, Google Maps, and WhatsApp. Those services have their own privacy policies and are not controlled by us.

How long we keep data

Server logs are kept for a limited period by our hosting provider. Messages you send us are kept only as long as needed to handle your enquiry and for reasonable business record-keeping. Admin session cookies expire automatically after 24 hours.

Your rights

If you are in the European Economic Area or UK, you have rights under GDPR, including to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Portuguese data protection authority (CNPD).

To exercise any of these rights, contact us at Chris.whatley@hotmail.co.uk.

Changes to this policy

We may update this page from time to time. The "Last updated" date at the top will change when we do. Continued use of the website after changes means you accept the updated policy.