Yallah Lisboa
Privacy policy
Updated: 1 October 2026
Controller and contact
YALLAH, UNIPESSOAL LDA, operator of Yallah Lisboa, is the controller for personal data collected to respond to enquiries sent to the restaurant.
YALLAH, UNIPESSOAL LDA · NIF PT515199249
Rua de Santos-o-Velho 22, 1200-812 Lisboa, Portugal
yallahlisboa@gmail.com · +351 21 395 1456
Data and purposes
The form collects your name, email, guest count, preferred date or undecided date status, preferred service and enquiry type. Phone, time and message are optional. We use this information to reply and prepare your possible event. Required fields are marked; the form cannot be submitted without them. You can also contact us by phone or email. Please do not include sensitive personal information in your message. Hosting also processes technical information, such as IP addresses and request details, to deliver and secure the website.
Legal bases
Booking and event enquiries are processed to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). Other enquiries, website operation and abuse prevention rely on our legitimate interest in providing and securing the service (Article 6(1)(f)). Legally required processing relies on Article 6(1)(c). Submitting the form does not subscribe you to marketing. The website does not carry out profiling or automated decision-making that produces legal effects concerning you.
Recipients and service providers
Enquiries are stored in Netlify Forms and emailed to Hagay and the restaurant. Access is limited to people authorised to handle enquiries, and BIEN ALLUMÉS when technical maintenance requires it. Netlify provides hosting and form collection; Google/Gmail receives notifications in the restaurant’s mailboxes. These services may involve processing outside the European Economic Area, including in the United States. Netlify describes the safeguards it uses in its privacy documentation. You may ask us for details about recipients, processing locations and safeguards applicable to your enquiry.
Retention criteria
Retention depends on the progress of your enquiry: correspondence needed to answer it, preparation and follow-up if an event is confirmed, and any legal obligation or need to handle a dispute. Data no longer required for these purposes should be deleted or anonymised, including form and email copies. We do not advertise automatic deletion after a fixed period. You can request deletion of your enquiry or information about its retention using our contact email.
Map and external services
The OpenStreetMap map loads when you reach its section and sends connection information, including your IP address, to map servers. It does not request your geolocation. See the OpenStreetMap Foundation privacy policy. TheFork, Google Maps, Instagram and Facebook links take you off this website; their own policies apply when you open them. Fonts and photographs are served with the website files. No advertising or browser analytics script is embedded.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Contact yallahlisboa@gmail.com. We may request only information needed to verify your identity. A response is normally due within one month; if a lawful extension is needed, we will inform you within that period. You may complain to the Comissão Nacional de Proteção de Dados (CNPD), or the competent supervisory authority where you live in the European Union.
Security and updates
The website uses HTTPS. No transmission or storage can be guaranteed risk-free. This policy is updated when services or processing change. Local preferences are explained in the cookie policy.