Privacy policy

round. collects only the data needed to provide the service, protect the platform, and carry out the actions you choose. This policy explains what happens to your data in simple terms.

Last updated: 17 September 2026Version 1.1

Who is responsible for the data

Digital Quest, operating from Lisbon, Portugal, runs round. and is responsible for data used to manage the website, accounts, security, support, and operation of the platform. The privacy contact is hello@digitalquest.pt.

When you submit a reservation or celebration request, join a list, or interact with a venue, that venue normally decides how it uses the data to respond, manage the relationship, and send authorised marketing. When you ask to learn about round., Digital Quest is responsible for that commercial enquiry. The venue where you found the button does not receive the form, booking, or emails.

What data we use and why

Processing depends on the action you take. We measure only observable actions and do not treat a tap, page visit, or click as marketing consent.

Visit the website or a venue page

Data: Session identifier, venue or card, date and time, action taken, device category, browser, and referring source. To limit abuse, the IP address and browser agent are turned into protected codes configured to expire after 24 hours.
Why: Open the correct page, keep the service secure, and produce accurate aggregated measures such as page visits and review clicks.
Legal basis: Legitimate interests in providing, protecting, and understanding how the service works.

Prepare a review

Data: Optional rating from 1 to 5 and whether a draft existed. The draft text stays on your device.
Why: Record the minimum context for the Google click. A click does not prove that a review was published.
Legal basis: Legitimate interests in providing accurate reporting and improving the guest journey.

Request a reservation or celebration

Data: Name, email, phone, date, time or occasion, party size, language, and any optional notes or answers you submit.
Why: Deliver and manage the request, reply to you, and send operational messages about its status.
Legal basis: Steps you request before a possible contract and the venue's legitimate interests in handling the request.

Join a venue list

Data: Name, email and, if supplied, phone, country, social profiles, Lisbon residency or departure, and how you found the venue. We also keep evidence of your choice.
Why: Send news and communications from the venue you chose. Reservation and celebration details do not enter the marketing profile.
Legal basis: Consent. You can withdraw it at any time.

Use a round. account

Data: Identity, email, role, authorised venues, authentication, and necessary security and administration records.
Why: Provide access, apply permissions, support users, and protect accounts and organisations.
Legal basis: Providing the service, legitimate security interests, and compliance with legal obligations.

Ask about round. and book a call

Data: First and last name, venue, city, email and, if supplied, phone, role, and website. We record the source, including the associated venue, card, or staff member when the journey started on a venue page, plus the chosen time and invitation details.
Why: Respond to commercial interest, attribute the source accurately, create the call and Google Meet link, support rescheduling or cancellation, and send confirmations and reminders.
Legal basis: Steps you request before a possible contract and Digital Quest's legitimate interests in understanding enquiry sources.

Contact Digital Quest

Data: Name, email, company or venue, and the message content you choose to send.
Why: Reply, manage the enquiry, and keep necessary commercial or support records.
Legal basis: Steps you request, legitimate interests in replying and, where applicable, performance of a contract.

Processing outside the European Economic Area

Some providers may process data in other countries. When processing leaves the European Economic Area, we use required mechanisms such as adequacy decisions or standard contractual clauses, and assess additional safeguards where needed. You can ask about the safeguards that apply to your data.

How long we keep data

We do not keep personal data indefinitely simply because it may become useful. The period depends on the purpose: requests while they are handled and for the time needed for obligations or claims; marketing contacts until consent is withdrawn or the relationship is no longer needed; accounts and operational records while the service is active and for the necessary period afterwards; security records for the shortest period compatible with preventing and investigating abuse.

When the period ends, data is deleted or anonymised unless the law requires longer retention. Backups and providers follow controlled deletion cycles. You can ask for the criterion or period that applies to a specific record.

Data from requests to learn about round. is marked for deletion or anonymisation 12 months after collection unless a commercial relationship, your request, or a legal obligation requires a different period.

How we protect data

We use protected connections, authentication, role and venue permissions, separation between organisations, data validation, security records, and limited access. No system removes every risk, so we review controls and respond to incidents when needed.

Your rights

You can ask for information and access, correction, deletion, restriction, portability where applicable, and object to certain processing. You can withdraw consent without affecting earlier processing. These rights depend on the context and may have legal exceptions.

Send your request to hello@digitalquest.pt and identify the relevant venue and action. We may ask only for the information needed to confirm your identity and avoid giving data to the wrong person. Requests are free and are normally answered within one month.

hello@digitalquest.pt

Cookies, local storage, and marketing

The public site does not currently use advertising or marketing analytics cookies. We may use cookies or local storage that are strictly needed for authentication, security, maintaining a session, and saving your language choice on the device. If non-essential technology is added, we will ask for consent before activating it where the law requires.

You can unsubscribe through the link in a message or by contacting the venue or Digital Quest. Refusing or withdrawing marketing does not prevent reservation or celebration requests or basic use of the page.

Children, automated decisions, and external services

round. is not directed at children and does not knowingly seek children's data through these journeys. We do not make decisions with legal or similar effects solely by automated means, and we do not use a prepared rating to block access to Google.

When you open Google, TripAdvisor, Instagram, or another external service, that service's policy also applies. round. records the click where stated, but does not control what happens afterwards or treat the click as proof of a completed action.

Changes and complaints

We update this policy when the service or applicable rules change. Material changes will be identified on this page.

If you believe your request was not handled correctly, you can complain to the Portuguese Data Protection Authority (CNPD) at cnpd.pt. We recommend contacting us first so we can try to resolve the issue.

cnpd.pt

Talk to us about your data.

To exercise a right or ask about this policy, email hello@digitalquest.pt. Include the relevant venue or service so we can help more quickly.