Privacy Policy

Effective 19 May 2026

This page explains what personal information we collect when you visit bartolobakehouse.com or use our services, why we collect it, how we use it, and the rights you have under Malaysia’s Personal Data Protection Act 2010 (PDPA).

If anything is unclear, write to us at inquiries@bartolobakehouse.com and a human will reply.

Who we are

“We,” “us,” and “Bartolo” refer to Bartolo Lisboa Bakehouse, the Portuguese restaurant and bakery operating from Central Market and BSC (Bangsar), Kuala Lumpur, Malaysia. Our addresses are listed at the bottom of this page.

What we collect

We collect personal information you give us voluntarily:

• Name and email when you subscribe to our newsletter
• Name, email, phone, and your message when you fill out a contact, catering, host-an-event, or careers form
• Name and party size when you make a reservation via WhatsApp or our forms

We also collect a small amount of technical information automatically when you visit the website:

• IP address and basic browser/device information so the website works properly
• Cookies — essential cookies for site functionality and, with your consent, analytics cookies
• Pages you visit and how you arrived at our site, in aggregate

How we use it

• To reply to your inquiries and confirm your reservations
• To send the newsletter you subscribed to (only if you opted in — you can unsubscribe at any time)
• To improve the website by understanding which content is useful
• To comply with our legal obligations (for example, tax records on transactions)

We do not sell your personal information to third parties.

Who sees your information

Your information may be processed by the following service providers, strictly to perform services for us:

• GoDaddy — our hosting provider; stores the website data
• Google — Google Analytics for website usage statistics, Google Reviews for public reviews you choose to leave
• WhatsApp / Meta — when you message us via WhatsApp, Meta’s privacy policy applies
• FormSubmit — relays our newsletter and inquiry form submissions to our inbox

Each provider has its own privacy policy. We do not share your data beyond these operational needs.

Cookies

We use a small number of cookies:

• Essential cookies so the website works as expected
• Analytics cookies (Google Analytics) so we can understand how visitors use the site — only with your consent

You can disable cookies in your browser. Some parts of the site may not work as expected if you do.

How long we keep your data

• Newsletter subscribers — until you unsubscribe
• Contact, catering, or careers inquiries — up to 24 months after our last communication with you
• Reservation data — typically deleted within 6 months of your visit
• Analytics data — aggregated and retained per Google’s default settings (currently 14 months)

Your rights under the PDPA

Under Malaysia’s Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct anything that is wrong or out of date
• Withdraw consent to marketing communications at any time
• Request deletion of your data, subject to any legal retention rules

To exercise any of these rights, email inquiries@bartolobakehouse.com. We will respond within 21 days.

Security

We use reasonable, industry-standard precautions to protect your data — HTTPS encryption on the website, managed hosting infrastructure, and secure email. No online system is 100% secure, but we will do our best, and notify you in the event of a serious breach affecting your information.

Children

Bartolo Lisboa Bakehouse is a family-friendly venue, but our website and marketing are not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The “Effective” date at the top reflects the latest version. Material changes will be communicated in our newsletter.