Privacy Policy
This policy explains what personal data CoffeeUP Machine Care ("we", "us") collects when you book a coffee machine service, why we collect it, and your rights over it.
Who we are
CoffeeUP Machine Care provides coffee machine cleaning and repair in the greater Lisbon area, Portugal. For any privacy question or request, contact us at the email address you were given when booking.
What we collect
When you submit the booking form we collect only what we need to arrange and carry out your visit:
- Your name, phone number and email address
- Your service area, street address and (optionally) postal code
- Optionally, the approximate GPS location you choose to share
- Optionally, a photo of your machine that you upload
- The service type, chosen date/time, and any details you write
- Technical data sent automatically by your browser: your IP address and the approximate country/city Cloudflare derives from it (used to prevent fraud and abuse)
We do not use advertising or analytics trackers, and we do not build profiles of you.
Cookies and local storage
We do not use tracking or advertising cookies, so there is no cookie banner. The site stores only functional information on your device: your chosen language, an in-progress booking draft (so you don't lose what you typed), and — for the owner only — an admin login session. These are strictly necessary or functional and are not shared with anyone.
Why we use it, and our legal basis
We use your data to contact you, confirm and schedule the visit, find your address, bring the right parts, and carry out the service you requested. The legal basis is the performance of the service you asked for (and our legitimate interest in preventing fraud for the technical data).
We also use an AI assistant to help the owner manage bookings, for example to look up the day's schedule or prepare a change. Your data was collected to schedule and carry out your visit; using it to answer the owner's own questions about the business is a related, additional purpose based on our legitimate interest in running the business efficiently. No automated decision with a legal or similarly significant effect is made about you.
Who processes it (sub-processors)
Your booking data is handled by a small number of service providers acting on our behalf:
- Cloudflare — website hosting and the database where bookings are stored
- Telegram — delivers your booking as an instant notification to us, and stores any photo you upload
- Twilio — sends an SMS only if we have to decline a booking
- Google Maps Platform — suggests addresses as you type and converts an address, map place, or shared GPS location into a precise address so we can confirm we cover your area (it receives only what you type in the address field or the coordinates you share, never your contact details). GeoAPI.pt validates Portuguese postal codes
- Anthropic — provides the AI assistant the owner uses privately to help manage bookings; to answer the owner's questions, booking details such as names and addresses may be sent to it. Under Anthropic's terms this data is not used to train its models and operational logs are kept only briefly; transfers outside the EU are covered by Standard Contractual Clauses
How long we keep it
We keep booking records for as long as needed to provide the service and for our own records of work carried out. You can ask us to delete your data at any time (see below).
Your rights
Under the GDPR you have the right to access the data we hold about you, to correct it, to have it deleted, and to object to or restrict its use. To exercise any of these, just contact us and we'll action it. You also have the right to complain to the Portuguese data protection authority (CNPD).
Changes
We may update this policy from time to time; the current version always lives at this page.