Your data, clearly explained.

Who receives your request

PlantPass is Leonardo Telles Lattari’s vegan experiences project. At this stage, requests are handled by the PlantPass team and Legumi Sushi Vegan, where the experience takes place. For requests and privacy enquiries: plantzpass@gmail.com.

What we store and why

We store your name, email, phone number, chosen experience, requested date and time, and request status history. For automatic purchases, we also store PayPal order and transaction identifiers, payment confirmation, and the accepted menu and terms. Where applicable, we store payment status and a transaction reference to verify receipt. We use these details to respond, propose and manage your booking, as necessary for pre-contractual steps and the booking service. Your phone number is used for changes and questions about your experience. Reading this notice does not authorise advertising.

To limit abusive requests, we store a technical identifier derived from your IP address that changes daily. Our hosting platform may keep its own technical logs.

Where data is stored and for how long

Requests are stored in the site database on Sites/Cloudflare infrastructure. Management access is restricted to the authorised PlantPass account. Automatic purchases are retained while needed to provide the experience and resolve payment matters; contact us about your data. Manual requests without a points wallet whose experience dates are more than 90 days old are cleaned up when a new request arrives or the management list is opened.

Your account and saved details

Your PlantPass account uses email and password. We store your sign-in email, an account identifier, and cryptographically protected versions of your password and recovery code, never their original values. Your profile name, contact email and phone number, purchases, bookings and points wallet are linked to the account. Registration does not verify ownership of your email or grant access to previous purchases merely because the email matches.

We use this data to provide the requested account service, prefill future purchases, and let you view history and points after signing in. You can edit your profile. Previous bookings retain the details recorded when requested. Your contact email may differ from your sign-in email and does not change the account’s identity. Saving a profile does not authorise marketing.

Purchases made while signed in are linked to your account and fill an incomplete profile on first use. Previous guest purchases can be imported using their original private link and your confirmation of ownership. Importing includes bookings sharing the same points wallet. After linking, access requires signing in, including through old links. Email matching alone does not link purchases.

Your profile is stored in the database, not as a personal record in your browser. We retain it and linked records while needed for the account, bookings, points balance and adjustments. Contact plantzpass@gmail.com to exercise your rights or close your account; we will verify ownership and identify any data still needed. Authentication uses a necessary, secure cookie inaccessible to page scripts, lasting up to seven days. The server retains a protected session identifier. Signing out ends the current session; changing or recovering your password invalidates all sessions and the old recovery code. Temporary attempt counters use identifiers derived from IP and email for 15-minute periods, with expired entries cleaned on subsequent attempts. Recovery uses the private code shown at registration or password change. Recovery emails are not available yet. Sign out on shared devices.

PlantPass Points

We link a points wallet to your booking and store the credits, discounts and adjustments needed for the free programme. Each paid purchase reviewed on PlantPass earns 1 point for any rating. Reviews disclose this incentive. Balances, wallets and purchase history are private. Editing or deleting a review neither duplicates nor removes an earned point. A refund may adjust the balance.

For guest purchases, the private booking or points link grants access to the wallet, its transactions and spending. Account-linked purchases require signing in. Keep private links safe. Email alone cannot access or spend points. We do not automatically merge wallets by email: use the wallet link you want to continue using for future guest purchases. While signed in, your account wallet is linked automatically. Joining the programme does not authorise advertising.

We use this data to run the programme and prevent duplicate use. Wallet-linked requests and transactions are kept while necessary to maintain balances and resolve requests or adjustments, rather than being covered by the 90-day clean-up for requests without wallets. Contact plantzpass@gmail.com for access, correction, recovery or deletion; our team will verify ownership and any data still needed for bookings or applicable obligations. Records are stored in the site database with restricted management access.

PlantPass Club interest list

If you request a launch notification, we store your name, email, date, consent wording and version, a daily technical identifier to limit abuse, and a cryptographic digest of your private withdrawal link. The purpose is to record interest and send the requested notice, based on your specific consent. This does not create a paid subscription or add you to general campaigns.

The form collects no phone or payment details. Access is restricted to PlantPass management on the site’s infrastructure. Records have an operational retention limit of 90 days; expired records are deleted when management opens or a new registration arrives. Scheduled clean-up is not yet active. Expired records are not used for contact.

You can withdraw consent and delete that record using the private link shown after submission or by emailing plantzpass@gmail.com. Each link removes its corresponding registration; ask our team to remove all if you registered more than once. Withdrawal does not affect bookings or other permissions. Automatic confirmation and launch emails are not configured yet. Consent does not grant Club benefits.

Campaigns: your choice

You may separately choose weekly campaigns and confirmed-partner updates by email and WhatsApp. All four choices begin unchecked and are optional. Refusing or withdrawing does not prevent booking or change the price. These communications rely on your consent.

If you opt in, we store the selected channel contact, authorised purposes, date, form source, and consent wording and version. We require confirmation through the email inbox or a message from the WhatsApp number before sending campaigns. We do not sell contacts or give them to guide restaurants for their own advertising.

Email and WhatsApp delivery are in preparation. When activated, an email provider (integration prepared for Resend) and Meta’s WhatsApp Business Platform will receive the contact and message content needed for delivery. Processing terms and safeguards for transfers outside the European Economic Area will be checked before activation. External accounts and links have their own privacy policies.

The planned campaign schedule is Monday from 10:00 Lisbon time. Partner notices concern confirmed partnerships only. You can withdraw in each message, through your private booking link, by email to our team, or by replying PARAR on WhatsApp. Our team also accepts requests through other contact channels. No account is required to withdraw.

Consent retention

Confirmation remains pending for up to 30 days. Confirmed consent has an operational validity of 24 months; campaigns are then suspended until renewed consent. Withdrawn or expired marketing contacts are deleted after 30 days. Evidence of consent and withdrawal, without the contact address after deletion, is retained for up to 24 months from the event. Delivery logs are kept for 30 days from their last update. These are PlantPass operational policies, not universal legal deadlines.

Clean-up runs when the campaign service runs or contact management is opened. Until scheduling is active, it is done through management. Removing a marketing contact does not automatically remove data still needed for a booking. Exports made by our team must follow the same purposes and retention periods.

Your rights

You may request access, correction, deletion, restriction or portability where applicable, and object to direct marketing. You may withdraw consent without affecting prior processing. Contact plantzpass@gmail.com; we will request only the identity verification needed to protect your data. You may complain to the Portuguese Data Protection Authority. We do not make automated decisions with legal effects or advertising profiles.

Tracking and contact

Your private link lets you view and accept a proposal or withdraw an unconfirmed request. Keep it safe. Automatic booking emails are not configured yet. Our team may contact you by email or phone about your request. Marketing preferences are managed separately.

To view, correct or request deletion of your details, email plantzpass@gmail.com from the request email address. Do not submit banking details, identity documents or health information through the form.

Payments

We do not collect card details. For new purchases, you pay with PayPal and choose a date after the server verifies payment. Booking is confirmed automatically when you choose an available date. PayPal processes payment in its own service. For manual requests, our team verifies receipt. For automatic purchases, the server validates payment with PayPal and enables date selection after payment confirmation. The site also receives verified payment and refund notifications. If a PayPal link is unavailable, contact our team for payment instructions. A booking is secured only after confirmation and verified payment.

Experience reviews

If you publish a review, we store its stars, chosen public name and comment, linked internally to your booking. Only the public name, rating, comment and publication date are shown publicly. You can edit or delete it through your private link while available, or contact us. Reviews remain published until deleted. Google Maps and HappyCow links open external services with their own privacy rules; we do not send your review to them.

Essential cookies

We install no advertising or visitor analytics tools. Management authentication is provided by the platform and may use necessary cookies. The app stores only public files needed for operation; it does not cache private pages or availability.