Effective May 15, 2026 · Last updated September 9, 2026
This site is operated by SpoonZoom, LLC, a Florida limited liability company ("SpoonZoom," "we," "us"). SpoonZoom is an independent media company that publishes a directory of restaurants and their dietary accommodation information, supported by advertising. You can contact us at privacy@spoonzoom.com.
This policy explains how we handle personal data on spoonzoom.com, in the SpoonZoom iPhone app, and in our outreach to restaurants. It covers two groups of people: restaurants and food service businesses whose information we list, and visitors who use the site or app to find places to eat.
We collect and publish business contact information about restaurants in Lisbon and other cities we expand to, including business name, address, cuisine type, phone number, website, email address, hours, and photographs.
When a restaurant responds to our outreach, we also collect what they tell us about the dietary restrictions they can and cannot accommodate, plus any practical kitchen details (shared equipment, cross-contamination risk, etc.) and dishes they'd like to highlight.
Sources. Initial business data comes from Google Places and from the restaurant's own website. Dietary accommodation data comes directly from the restaurant through our outreach emails and onboarding survey.
Why we process it. To build a public directory that helps people with dietary restrictions find restaurants that can accommodate them.
Lawful basis. For business contact information used to reach out, we rely on legitimate interest under Article 6(1)(f) of the GDPR: building a public-benefit directory with clear utility to diners with allergies and dietary needs, balanced against minimal intrusion since the data is business-context contact information already published by the restaurants themselves. For information restaurants give us directly through the survey, we rely on their consent, given by submitting the form.
How long we keep it. Listings remain published until the restaurant requests removal, goes out of business, or the email becomes invalid. Restaurants can remove their listing at any time using the link on their listing page or by replying "PARAR" / "STOP" to any of our emails.
What we collect about visitors depends on the choices you make in our cookie consent banner.
Essential data we always collect. When you visit spoonzoom.com, our hosting provider logs basic technical data (IP address, browser type, pages visited, timestamps) for security, fraud prevention, and to keep the site running. We rely on legitimate interest for this minimal processing. You cannot opt out of this - it is required for the site to function.
Our own request log. We also keep a server-side record of requests to the site (the page address, time, referring site, approximate location at country and city level, browser type, and the name of any automated crawler) so we can see how people and search or AI services find our listings. This record contains no IP address and no identifier of any kind, so it cannot be linked to you. We rely on legitimate interest for this.
With your consent, we additionally collect:
If you contact us by email, we retain those messages so we can respond and keep a record of your request.
You can use spoonzoom.com fully without an account, including building an allergy card. A card you build is stored only in your own browser and is not sent to us.
If you choose to save your card, we create an account keyed to your email address and store: your email address, an optional display name, your language, and your saved dietary needs with their strictness. Dietary needs can reveal health information, which is special category data under Article 9 GDPR. We store them only after you tick the consent box and confirm your email address by clicking the link we send you, and we use them only to show your card on your devices, to show you which restaurants match your needs, and to attach your stated needs to reviews you choose to write. The lawful basis is your explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time by deleting your account.
Sign in links instead of passwords. We never store passwords. Signing in works through one time links sent to your email address by a transactional email provider acting as our processor (see Section 8).
Review confirmation. When you write a review, we may send you a one time link to confirm the review came from your address. Confirmed reviews carry an "email confirmed" mark.
Marketing email is separate and optional. When you save your card you can additionally tick a box asking us to email you occasionally about SpoonZoom. It is a separate choice from the consent above, it is never a condition of saving a card or of using the site, and we record the date you gave it. The lawful basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time from your profile page, or from the unsubscribe link in any marketing email we send, and withdrawing it does not affect the emails you ask for, such as sign in links and review confirmations.
Deleting your account. You can delete your account at any time from your profile page. Deletion immediately and permanently removes your account, your saved card, your reviews, and the audit records of those reviews. Sign in links expire on their own and are single use.
You can browse restaurants and make a dining card without an account. The app stores your card, saved places, language and search settings on your device. The dining card works offline after you save it. Optional account sign-in and profile sync use the account data and consent described in Section 5.
Restaurant searches send your search text, selected dietary filters and selected map area to our service to return matching results. These requests can reveal dietary interests and location. Our hosting provider processes technical request data, including IP addresses and requested URLs, to operate and protect the service. The app does not attach your account session to restaurant search requests.
Location access is optional and requested only when you tap Near me. It centers the map on your location. Searching that area sends the map bounds to our service; those bounds can reveal your location. We do not request background location. You can deny or revoke location access in iPhone Settings and continue browsing Lisbon manually. Apple provides the map service under its own privacy policy.
The current app does not run advertising trackers or send analytics or crash reports to Sentry. Website links open separately, where the website cookie choices apply. If you choose to share or print your dining card, its contents are passed to the app, person or print service you select. Files you save or send are controlled by you and that destination.
Use Delete my account in the app account section to open the website deletion page. You may need to sign in there before confirming deletion. Deleting the account does not erase the separate card on your iPhone; use Clear saved needs to remove it. Saved restaurants can be removed in Saved. For other privacy requests, contact privacy@spoonzoom.com.
We use cookies and similar technologies on spoonzoom.com. Cookies are small files stored on your device when you visit a website.
Categories of cookies we use:
| Category | Purpose | Examples | Set without consent? |
|---|---|---|---|
| Strictly necessary | Site functionality, security, language preference | Session cookie, language selector | Yes |
| Analytics | Understand how the site is used | Google Analytics, Meta Pixel (analytics events) | No - requires consent |
| Advertising | Personalized advertising and audience measurement | Google Ads, Meta Pixel (ad targeting), other ad partners | No - requires consent |
How we ask for consent. The first time you visit, we show a cookie banner with three clearly visible options: Accept all, Reject all, and Customize. Reject all is given the same prominence as Accept all. You can use the site fully without accepting non-essential cookies. We do not use cookie walls.
Customizing your choices. The "Customize" option lets you accept or reject analytics and advertising categories independently.
Withdrawing or changing consent. You can change your cookie preferences at any time by clicking "Cookie settings" in the site footer. Withdrawing consent is as easy as giving it.
Lawful basis for cookies. For non-essential cookies, we rely on your consent under Article 6(1)(a) of the GDPR and Article 5 of the ePrivacy Directive (transposed in Portugal as Lei 41/2004). For strictly necessary cookies, we rely on legitimate interest.
We use the information we collect to:
Service providers (processors). We use third-party tools to operate the service, including hosting (Vercel), database (Neon), outbound email (Instantly), a transactional email provider for account sign-in and confirmation links, and a provider for our own email accounts. These providers process data on our behalf under written agreements that restrict their use of the data to providing the service.
Advertising partners. When you consent to advertising cookies, we share advertising identifiers and event data with:
These advertising partners act as independent data controllers for the data they receive in the context of their advertising services. They process this data under their own privacy terms and for their own purposes, including building advertising profiles. You can opt out of personalized advertising by rejecting advertising cookies in our banner or by using the opt-out controls these providers offer directly.
We do not sell personal data in the traditional sense (e.g., to data brokers), but sharing data with advertising partners for personalized advertising may be considered "sale" or "sharing" under some US state privacy laws.
SpoonZoom, LLC is based in Florida, United States. Personal data we collect from people in the European Economic Area, the United Kingdom, or Switzerland is transferred to and processed in the United States. Several of our service providers and all of our advertising partners are also based in the United States.
We rely on the European Commission's Standard Contractual Clauses (and equivalent UK and Swiss mechanisms) as the legal basis for these transfers. Where available, we also rely on transfer mechanisms such as participation in the EU-US Data Privacy Framework by service providers and advertising partners (Google and Meta are both DPF-certified).
If you have questions about how we protect data transferred internationally, contact us at the email above.
If you are in the EEA, the UK, or Switzerland, you have the right to:
To exercise any of these rights, email privacy@spoonzoom.com. We respond within 30 days. For restaurant listings specifically, the fastest route is the "Remove this listing" link on your listing page, or simply replying "PARAR" / "STOP" to any email we've sent you - both result in full deletion within 48 hours. To withdraw cookie consent, click "Cookie settings" in the site footer.
If you believe we have mishandled your personal data, you can complain to your local data protection authority. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD) - cnpd.pt. We'd appreciate the chance to address the issue first by contacting us at the email above, but you are not required to.
SpoonZoom is not directed at children under 16 and we do not knowingly collect personal data from them. We do not show personalized or targeted advertising to anyone we know to be a minor. If you believe we have inadvertently collected data from a child, contact us and we will delete it.
We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls on our database, and limiting access to data to people who need it for the operation of SpoonZoom.
We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of the page. If we make material changes - such as adding new categories of data we collect or new advertising partners - we'll surface the change on the site and refresh the cookie banner so you can re-confirm your preferences.
Questions, requests, or complaints: privacy@spoonzoom.com. SpoonZoom, LLC.