This Privacy Policy describes how Bin-Jun Sushi Ltda ("we," "our" or "the Company") collects, uses, stores and protects the personal data of our guests, website visitors and all others whose data is processed in connection with our restaurant activities in Bom Retiro, Blumenau, Santa Catarina.
As a registered limited company (Ltda), we are fully committed to compliance with the Brazilian General Data Protection Law — LGPD (Lei nº 13.709/2018), the Brazilian Consumer Protection Code — CDC (Lei nº 8.078/1990), applicable ANVISA and VISA-SC food safety requirements, and applicable tax legislation in the State of Santa Catarina.
Introduction and Scope
This Policy applies to all personal data processed by our restaurant — including guests who dine in or make reservations, customers who order via WhatsApp or telephone, website visitors and anyone whose data is processed in connection with our activities. Most walk-in restaurant visits are anonymous; this Policy covers the specific circumstances in which we do collect personal data.
Identity of the Controller
Entity type: Sociedade Limitada (Ltda)
CNPJ: 48.272.717/0001-19
Activity (CNAE): Restaurantes e Similares
Address: Rua Hermann Hering, 300, Sala 02, Bom Retiro, Blumenau — SC, CEP 89010-600, Brasil
Email: privacidade@binjunsushi.com.br
Personal Data We Collect
- Reservation data: Name, phone number and party size — collected when guests make table reservations by telephone, WhatsApp or website form. Used solely to manage the reservation.
- Dietary and allergen notes: Where guests voluntarily provide information about food allergies, intolerances or dietary restrictions as part of a reservation — collected to ensure we can accommodate them safely. This information is used only for the specific reservation and is not retained beyond the dining occasion.
- NF-e with CPF or CNPJ (when requested): Where a guest requests the NF-e to be issued with their CPF or CNPJ for tax purposes — collected and processed solely for that fiscal purpose, always at the guest's request.
- WhatsApp order and delivery data: Name, phone, address and order details — where guests order via WhatsApp.
- Contact and enquiry data: Name, phone and message when submitting enquiries via our website form.
- Technical website data: IP address, browser type, pages visited and access times.
Purpose and Legal Basis
| Purpose | Legal Basis (LGPD) |
|---|---|
| Anonymous in-person dining (no data collected) | N/A — no personal data processed |
| Reservation management and table allocation | Performance of contract; Pre-contractual measures (Art. 7º, V) |
| Allergen and dietary accommodation — guest safety | Consent; Legitimate interest in guest safety (Art. 7º, I, IX) |
| NF-e with CPF/CNPJ — when requested by guest | Legal obligation + Customer request (Art. 7º, II, V) |
| Issuing NF-e; SEFAZ-SC tax compliance | Legal obligation (Art. 7º, II) |
| ISS — Prefeitura de Blumenau | Legal obligation (Art. 7º, II) |
| ANVISA / VISA-SC food safety compliance record-keeping | Legal obligation (Art. 7º, II) |
| Consumer rights under CDC — restaurant service quality | Legal obligation; Legitimate interest |
| Website analysis and improvement | Legitimate interest; Consent (cookies) |
Data Sharing
- SEFAZ-SC / Receita Federal: Tax data transmitted with NF-e issuance — in compliance with SEFAZ-SC electronic invoice requirements and applicable federal tax legislation.
- Prefeitura de Blumenau (ISS): For ISS/ISSQN obligations on restaurant service activities.
- VISA-SC / ANVISA: Where required for food safety inspection records or regulatory compliance — we maintain records in accordance with applicable food safety legislation.
- PROCON-SC: When required in a consumer dispute mediation under the CDC.
- Legal authorities: When required by a competent judicial or administrative order.
We do not share guest reservation data, dietary information or contact details with any third party for marketing or profiling purposes.
International Transfers
Our restaurant is in Blumenau, SC. All guest and operational data is stored in Brazil. Any technology platforms used for reservations, website or communications that operate on international servers do so under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.
Retention Periods
- NF-e and fiscal records (SEFAZ-SC): Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-SC).
- Reservation records: Deleted within 30 days of the reservation date unless required for a dispute or complaint. Allergen/dietary notes are deleted immediately after the dining occasion.
- WhatsApp order data: Deleted within 30 days of order fulfilment unless a dispute arises.
- Contact and enquiry data: Up to 6 months from last contact if no ongoing relationship arises.
- ANVISA/VISA-SC food safety records: Retained in accordance with applicable health surveillance record-keeping requirements.
- Website analytics: Aggregated and anonymised after 12 months.
Security Measures
- Payment terminals PCI-DSS certified — card data never retained by us;
- CPF/CNPJ data for NF-e used only for that transaction and transmitted securely to SEFAZ-SC;
- Dietary/allergen data treated as sensitive operational information — accessible only to kitchen staff directly responsible for that reservation;
- Reservation data accessible only to front-of-house management;
- Website encrypted in transit (HTTPS);
- As a Ltda, formal internal data handling protocols maintained;
- Incident response procedures and breach notification per LGPD Art. 48.
Your Rights under the LGPD
- Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data — note that most dining visits are anonymous and leave no personal data record.
- Correction (Art. 18, III): Request correction of inaccurate data.
- Anonymisation / Blocking / Deletion (Art. 18, IV): Request deletion — subject to fiscal retention requirements for NF-e records.
- Portability (Art. 18, V): Receive your data in a structured format.
- Deletion of consent-based data (Art. 18, VI): Request deletion of data processed by consent — including dietary notes.
- Information on sharing (Art. 18, VII): Find out which entities your data was shared with.
- Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
- Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.
We respond within 15 business days. You may also speak with us in person at Rua Hermann Hering, 300, Sala 02, Bom Retiro, Blumenau.
Cookies and Tracking
Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.
Protection of Minors
Our restaurant welcomes guests of all ages including children and families. We do not collect personal data from children under 13 beyond what is provided by a parent or guardian as part of a reservation. Where a reservation is made for a group including children, the data collected (party size, any dietary notes) is provided by the adult making the reservation. We do not engage children directly in any data collection activity.
Sensitive Data — Allergens & Food Safety
Dietary restrictions and food allergy information may constitute health-related data under LGPD Art. 5º, II. We treat allergen data with the heightened care required for sensitive data:
For guests with severe allergies, we recommend informing us at reservation and again on arrival. In compliance with ANVISA labelling requirements, our menu indicates the presence of the major allergens (gluten, shellfish, fish, eggs, milk, peanuts, soy, sesame) in our dishes — including the fish and shellfish categories that are particularly relevant for a Japanese restaurant menu.
Updates to this Policy
This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance, ANVISA requirements or applicable tax legislation in Santa Catarina. Material changes will be communicated via our website or in-restaurant notice.
Contact & Data Protection Officer
All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41). You may also speak with our management team in person at the restaurant:
Privacy Contact — Bin-Jun Sushi Ltda
ANPD — Autoridade Nacional de Proteção de Dados
www.gov.br/anpd