Privacy Policy

The data controller is Moonlight Dreams SA, registered at Av. Duque de Loulé 69, 1050-087 Lisboa, Portugal (NIPC 509169392). You can reach our privacy contact at privacy@tamilaclub.pt.

When you submit a reservation: your name, email, phone, requested date, party size, and any free-form notes you provide. Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and our legitimate interest in operating the venue (Art. 6(1)(f)).

When you apply to perform with us through the careers form: your stage name, real name, date of birth, nationality, languages, physical details you choose to share, contact details, photos you upload, and the consent confirmations recorded at submission. Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) for any photos that may reveal personal characteristics).

When you visit the website: our hosting provider logs minimal technical data (such as IP address, browser, and pages viewed) to keep the site secure and reliable. Legal basis: legitimate interest (Art. 6(1)(f)).

Visit statistics: to understand which pages are useful and how visitors find us, we keep our own statistics. For each page view we record the date and time, the page and language, the website that sent you (its domain only, on the first page of a visit), any campaign tags in the link (utm_source, utm_medium, utm_campaign), your type of device, browser and operating system, and an approximate location (country, region and city) that our hosting provider derives from your IP address. We also record a few actions: starting or sending a reservation, tapping our phone number or Instagram, opening an artist's profile and seeing or tapping a promotional pop-up (in these two cases, which one). To tell visits apart, your browser creates a random visit number that is kept only in the open page's memory and is forgotten when you close or reload it; it is saved with these records. We do not store your IP address in these statistics; to count unique visitors we keep only a pseudonymous code, computed from your IP address, browser details and the date, which changes every day. These statistics use no cookies and save nothing in your browser's storage. Within TAMILA only management can see them, and our technical service providers (section 4) can access them only to run the website for us; they are never shared with advertisers or used to profile you, and they are deleted automatically after 13 months. Legal basis: legitimate interest in understanding and improving our website (Art. 6(1)(f)). You can object at any time: if your browser sends the Global Privacy Control signal, we do not record your visits at all. You can also write to us, although, because we cannot link these statistics to your identity, we may be unable to find records already made (Art. 11). Apart from the map, which loads only at your request (section 7), we use no third-party analytics, advertising or marketing tools.

We do not knowingly collect data from anyone under 18. Our age gate is the first thing you see, and our careers form rejects any applicant whose date of birth indicates they are under 18.

Reservation requests: kept for up to 24 months after the requested visit date, then deleted automatically. You can ask us to delete them sooner at any time.

Career applications marked as declined or archived: deleted automatically 12 months after submission by a scheduled job.

Career applications marked as hired or under active review: kept for as long as the working relationship requires.

Photos uploaded with a career application: stored in a private bucket, accessible only to TAMILA management via short-lived signed links. Deleted together with the application.

Visit statistics (section 2): deleted automatically 13 months after they are recorded.

You can request deletion at any time by writing to us at the email above.

We do not sell your data. We share it only with service providers strictly necessary to operate the site and the venue: our database provider (Supabase; our database is hosted in the EU — Ireland, eu-west-1), our hosting provider (Vercel), our map provider (Mapbox, only if you choose to show the map), and — once configured — our transactional email provider. Each of them is bound by GDPR-compliant data processing terms.

Our database — including reservations, applications and visit statistics — is hosted on servers in the European Union (Ireland). Some of these providers are based in the United States or deliver the site through global networks, so some data — for example your IP address when a page or image loads, or when you show the map — may be processed outside the EEA. In those cases, the transfer relies on the EU–US Data Privacy Framework or on Standard Contractual Clauses (SCCs) approved by the European Commission.

We may disclose information to law enforcement if required by Portuguese or EU law.

You have the right to access, correct, delete, restrict the processing of, and receive a portable copy of your personal data, and to withdraw your consent at any time without affecting prior processing. Withdrawing consent for a career application means we will delete the application and all photos.

To exercise any of these rights, write to privacy@tamilaclub.pt. We will respond within 30 days.

If you believe we are mishandling your data, you also have the right to complain to the Portuguese data protection authority (CNPD — Comissão Nacional de Proteção de Dados, www.cnpd.pt).

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you (GDPR Art. 22). Every reservation and every career application is reviewed personally by a member of TAMILA management.

We use only cookies and browser storage that the site needs to work or to remember a choice you made. Our visit statistics (section 2) use no cookies and save nothing in your browser's storage, and we use no advertising or marketing trackers, so we do not display a cookie consent banner. The interactive map is loaded only if you tap "Show map"; doing so connects you to our map provider, Mapbox, which then sets the storage listed below.

ageVerified (browser localStorage) — Stores your confirmation that you are 18+ so the age gate does not appear on every visit. Necessary. Duration: until you clear your browser storage. Set by: TAMILA.

NEXT_LOCALE (cookie) — Set when you view the site in a language other than your browser's default; it remembers that language so that, if you return to tamilaclub.pt before closing your browser, the site opens in it. Necessary (preference). Duration: until you close your browser. Set by: TAMILA.

tamila-popup-seen-<id> (browser localStorage or sessionStorage) — Remembers that you closed or tapped a promotional pop-up, so it is not shown to you again. Necessary (preference). Duration: until you clear your browser storage or, for some campaigns, until you close the tab. Set by: TAMILA.

mapbox.eventData.* (browser localStorage) and mapbox-tiles (browser cache) — Set by our map provider, Mapbox, only after you choose to show the map. They hold a random identifier that Mapbox renews every 24 hours for its usage statistics, and cached map images. Duration: until you clear your browser storage. Set by: Mapbox (Mapbox, Inc., USA).

sb-<project>-auth-token (cookie) — Authenticates venue staff after they log in to the admin area. Necessary. Duration: until logout or session expiry. Set by: Supabase. Not set for public visitors.

TAMILA is not legally required to appoint a Data Protection Officer under GDPR Art. 37, because our core activities do not consist of large-scale processing of special categories of data or systematic monitoring of data subjects. Privacy queries are handled by the management contact listed in section 1.

We may update this policy. The date at the top will reflect the most recent version.