Policies
Privacy notice
This notice explains what personal data The Long Table collects, why, on what legal basis, for how long, and what rights attach to it. It is written to satisfy both the Brazilian General Data Protection Law (Lei nº 13.709/2018, the LGPD) and the EU and UK General Data Protection Regulation, since the publication operates from Brazil and is read in Europe.
Who is responsible
The Long Table is the controller of the personal data described here. It operates from Brazil and can be contacted for any data matter at support@thelongtable.pro. There is no separate postal channel for data requests; email reaches the person who handles them.
What is collected
- Correspondence. When someone writes in, the message, the email address it came from and any details included in it are held in the mailbox.
- Order data. Where a paid publication is bought, the payment provider collects the buyer's name, email address, billing country and payment details, and passes The Long Table the name, email address, country and confirmation of the transaction. Card numbers are never received or stored here.
- Technical data. The hosting provider records requests to the site, including IP address, approximate location derived from it, browser and device type, referring address and time. These logs are generated automatically by the server.
- Measurement and advertising data. The site uses analytics and advertising measurement tools that set cookies or similar identifiers and report on pages viewed and on whether a visit followed an advertisement. These tools are provided by third parties, listed below.
No special category data is sought. The Long Table does not ask about health, relationships, beliefs, sexual life or any other sensitive category, and asks that such information not be sent in correspondence. Where it arrives unsolicited it is deleted once the message has been dealt with.
Legal bases
- Performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)) — processing order data to deliver a purchase, issue a receipt or handle a refund.
- Legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)) — answering correspondence, keeping server logs for security and diagnosis, and preventing fraudulent transactions. The interest is in operating and protecting the publication; it has been weighed against the limited nature of the data involved.
- Consent (LGPD art. 7, I; GDPR art. 6(1)(a)) — non-essential cookies and advertising measurement, where consent is required by local law. Consent may be withdrawn at any time; withdrawal does not affect processing already carried out.
- Legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)) — retention of transaction records where tax or accounting law requires it.
Third parties
The following categories of processor handle data on The Long Table's behalf or in their own right: the hosting and content delivery provider that serves this site; the email provider that hosts the support mailbox; the payment provider identified at checkout, which acts as an independent controller for payment data under its own notice; and the analytics and advertising measurement providers whose tags run on these pages. Data is not sold, rented or disclosed for any other party's marketing.
Cookies and similar technologies
Cookies strictly necessary for the site to function are set without consent, as permitted. Analytics and advertising cookies are set where consent has been given or where applicable law permits, and can be refused without losing access to anything published here — the notes are readable regardless. Browser settings can block or delete cookies at any time; the platform providers also operate their own opt-out mechanisms.
International transfers
Data processed here may be transferred outside the country where a reader is located, including to Brazil and the United States, because the providers listed above operate internationally. Where personal data is transferred from the European Economic Area or the United Kingdom, transfers rely on the European Commission's standard contractual clauses or on an adequacy decision, as applicable to the provider concerned. Transfers under the LGPD rely on the mechanisms permitted by arts. 33–36.
How long data is kept
- Correspondence: up to 24 months after the exchange closes, then deleted.
- Order records: for the period required by Brazilian tax and commercial law, currently five years from the transaction.
- Server logs: up to 12 months.
- Analytics and advertising identifiers: for the retention period set by the provider concerned, generally between 3 and 26 months.
Rights
Under the LGPD (art. 18) and the GDPR (arts. 15–22), a data subject may request confirmation that processing takes place; access to the data held; correction of data that is incomplete or inaccurate; anonymisation, blocking or deletion of data processed in excess of what the law permits; portability of data to another provider; information about with whom data has been shared; and, where processing rests on consent, withdrawal of that consent. There is a right to object to processing carried out on the basis of legitimate interests, and to ask that a decision be reviewed where one has been taken solely by automated means. No automated decision-making of that kind is carried out here.
Requests go to support@thelongtable.pro and are answered within 15 days under the LGPD and within one month under the GDPR. Verification may require confirming that the request comes from the email address the data is held under. No charge is made for a first request.
Complaints
A complaint may be made to Brazil's Autoridade Nacional de Proteção de Dados (ANPD), or, for readers in the European Economic Area or the United Kingdom, to the supervisory authority for the country of residence. Raising the matter here first is welcome but not required.
Children
This publication is not directed at anyone under 18, and personal data is not knowingly collected from anyone under that age. Where it comes to light that such data has been received, it is deleted.
Changes
Material changes to this notice are published on this page with a revised effective date at the top. Previous versions are available on request.