Updated on 16 October 2026.

1. Data controller

The company Detronik, Lda., which operates the shop STOUT GRILL, is the controller of personal data collected through stout-grill.pt. Its company tax identification number is 510 672 094 and its registered office is at EN 116, Condomínio Portela do Texugo, bloco C, 1.º Esq., 2665-194 Malveira, Portugal.

For privacy enquiries or to exercise your rights, contact geral@stout-grill.pt or write to STOUT GRILL — Largo da Feira, n.º 7, 2665-228 Malveira, Portugal. You can also contact us on +351 967 605 262, a call to the Portuguese mobile network, charged at your network provider’s rates.

2. Data we process

Depending on how you use the shop, we process identification and contact details such as name, email, telephone number, billing and delivery addresses and tax identification number, where provided; customer account details; ordered items and quantities, amounts, invoices, payment references and status; and communications concerning enquiries, orders, returns, guarantees and complaints.

We may also process technical data such as IP address, browser and device information, access and security logs, shopping basket contents and cookie choices. If you publish a review, we process its content and the identification details shown in the relevant form. Do not include other people’s personal data or sensitive information in public reviews.

We receive data mainly through forms, customer accounts and checkout. Payment providers also communicate the information needed to confirm transactions. Collection through cookies and external services is explained in the Cookie Policy.

3. Purposes and legal bases

Orders, payments, deliveries and support: we use the data needed to respond to pre-contractual requests and perform the contract, including managing purchases, confirming payments, delivering products and handling returns and guarantees — Article 6(1)(b) GDPR.

Invoicing and other legal obligations: we process data required by tax, accounting and consumer protection rules — Article 6(1)(c).

Security and defence of rights: we may process information necessary to prevent abuse and fraud, maintain shop security and manage or defend claims, on the basis of legitimate interests after considering your rights — Article 6(1)(f).

Analytics and non-essential external services: technologies requiring consent are loaded subject to your choice in the cookie manager. Consent can be withdrawn at any time — Article 6(1)(a) GDPR and applicable electronic communications legislation.

Marketing communications: any subscription is optional and separate from the purchase. Where based on consent, you can refuse or cancel it without affecting orders or support. Messages needed to fulfil a purchase do not constitute an advertising subscription.

4. Required and optional data

Mandatory fields are identified on forms. Without the data needed for invoicing, payment or delivery, we may be unable to fulfil the order or answer the request. Refusing non-essential cookies does not, in itself, prevent a purchase.

Some external features, such as maps or forms protected by reCAPTCHA, may be unavailable until you authorise the relevant service. You can contact us directly by email or telephone without consenting to those services.

5. Who we share data with

We disclose only the data needed to hosting, maintenance and IT support providers; communication and customer support services; carriers or logistics operators; payment providers; accounting and invoicing services; and authorities or bodies to which disclosure is legally required. Providers acting on our behalf must process data in accordance with the applicable instructions and data protection obligations.

EasyPay: Multibanco and MB WAY payments are processed through Easypay — Instituição de Pagamento, Lda. Data needed to carry out and confirm the transaction is transmitted. You must not send us banking passwords, PINs or authentication codes. EasyPay processes data in connection with its services and legal obligations, as set out in its Privacy Policy.

Google: the website uses services identified in the Cookie Policy, including Analytics and external services such as Maps, Fonts and reCAPTCHA, when loaded under the conditions described there. Google may process technical and usage data in accordance with its Privacy Policy. Use of these services does not authorise indiscriminate sharing of order data.

If you follow a social media link or start a WhatsApp conversation, you will be using an external service, also subject to that provider’s rules. We do not sell our customers’ personal data.

6. International transfers

Using providers with international infrastructure, particularly Google services, may involve processing outside the European Economic Area. Transfers must be covered by an applicable legal mechanism, such as an adequacy decision or standard contractual clauses and, where necessary, supplementary measures.

Google publishes the mechanisms it uses, including the EU–US Data Privacy Framework where applicable and standard contractual clauses, in its information on legal frameworks for data transfers. You can ask us for information about providers and safeguards applicable to the processing of your data.

7. How long we keep data

Invoicing and tax documentation: for the legally required retention periods, generally ten years, without prejudice to circumstances requiring a different period.

Orders, returns and guarantees: for the period needed to fulfil the purchase and handle legal obligations, guarantees and possible complaints, including applicable periods for defending rights. This does not justify retaining data that is no longer necessary.

Customer account: while it remains active and necessary for the customer relationship, or until a valid deletion request, while preserving records that must legally be retained.

Contact requests: while the matter is being handled and for the time needed for follow-up or to defend related rights. Marketing communications: while a valid subscription exists; after an objection or withdrawal of consent, the minimum record needed to respect that choice may be retained.

Cookies and technical logs: according to the purpose and periods shown in the Cookie Policy or for the period needed for security and incident resolution. Deleting an account does not automatically delete invoices or other documents subject to mandatory legal retention.

8. Your rights

Subject to the conditions in the GDPR, you may request access to, rectification or erasure of your data, restriction of processing and data portability. You may object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send your request to geral@stout-grill.pt. We may ask for only the information strictly necessary to confirm your identity. We generally respond within one month; if the complexity or number of requests justifies a statutory extension, we will inform you within that period.

Exercising your rights is generally free and may be subject to statutory limitations, particularly where documents must be retained. You may lodge a complaint with the Comissão Nacional de Proteção de Dados, via cnpd.pt.

9. Cookies and changing preferences

Strictly necessary cookies provide functions such as the shopping basket, session and recording consent choices. Analytics cookies and non-essential external services depend on the relevant choice in the notice.

You can accept, reject non-essential cookies or choose categories. To reopen the notice and change or withdraw your choice, use “Manage cookies”, available on the website including on mobile devices, or the controls in the Cookie Policy. This policy identifies the services, purposes and durations available in the inventory.

10. Security and updates

We apply appropriate technical and organisational measures to protect data, including access controls and secure communications. Absolute security cannot be guaranteed; contact us if you identify an incident. Never publish credentials or banking information in reviews or support forms.

This policy may be updated to reflect actual changes to services or legal obligations. The update date is shown on this page. Where a change requires it, additional information will be provided or fresh consent requested before the relevant processing.