Privacy Policy — Food4Fitness Partner Program

Last update: 21 July 2026

1. Who processes your data?

Alcofa, Food Products, Ltd. NIF: PT 501 746 153 Brand: Food4Fitness

Contact for privacy matters: partners@food4fitness.pt

This policy relates exclusively to content creator partnership program (influencers). The handling of customer data for the store is covered by its own policy, available at food4fitness.pt.

2. To whom does it apply?

This is for anyone who establishes, negotiates, or has already established a promotional partnership with Food4Fitness, and for anyone who is contacted with such a proposal.

This also applies to candidates not yet contacted — people whose public profile we have identified as potential partners and whose name and social media account we have recorded for contact purposes.

3. What data do we collect?

Identification and contact Name, email address, mobile phone number.

online presence Username and links to Instagram, TikTok, YouTube, and Facebook profiles. Number of followers on each network, collected periodically.

Published content Recording of content that mentions the brand: content type, date, and publication identifier. These records can be created automatically through the platforms' official interfaces or entered manually by a member of our team.

Commercial relationship Agreed conditions, assigned coupon code, publication obligations, benefits granted, commission amounts due and paid.

Associated orders Meal orders sent to the partner as part of the partnership, and orders from third parties where the partner's coupon was used, for commission calculation purposes.

Communications A record of the emails we sent you as part of the partnership: date, subject, content, and author.

Internal notes Observations from our team that are relevant to managing the partnership, such as contact preferences, dietary restrictions, or periods of unavailability.

We do not collect data from special categories. If you inform us of a dietary restriction that reveals health information or religious beliefs, this information is recorded only with your knowledge and to ensure that the products sent are suitable for you.

4. How do we obtain the data?

Diretamente de siwhen you provide us with contacts and information during the course of the partnership.

From publicly accessible sources, specifically their public profiles on social media, for initial identification and to record the number of followers.

From social media platformsYou collect this information through your official channels when you mention or tag the brand's account in content you publish. This collection is limited to content where our account is explicitly mentioned by you.

From our online storeRegarding orders associated with your email or coupon.

5. What do we use the data for and on what basis?

Manage the partnership — to register terms, monitor compliance with the agreement, calculate and pay commissions. Basis: execution of the contract between the parties.

Contact candidates — present the partnership proposal to creators whose audience profile we consider suitable. Basis: legitimate interest in developing business partnerships. You may object at any time, simply by stating so.

Verify compliance — confirm that the agreed-upon content has been effectively published. Basis: contract execution.

Evaluate results — to measure sales generated and return on each partnership, in order to decide on its continuation. Basis: legitimate interest in managing commercial activity.

Comply with legal obligations — to preserve documents of fiscal and accounting relevance. Basis: legal obligation.

We do not use your data for targeted advertising, nor do we sell it or share it with third parties for marketing purposes.

6. Who do we share with?

The data is accessed by the Food4Fitness internal team, and only to the extent necessary: each manager only has access to the partners assigned to them.

We use the following subcontractors, who process data on our behalf and under our instructions:

Service	Goal	Data location
superbase	Application database	European Union (France)
Cloudflare	Application hosting	European Union
SiteGround	Online store hosting	European Union
MetaPlatforms	Instagram interface for recording mentions.	United States, under the EU-US Data Privacy Framework

We may also share data with public authorities when legally required to do so.

7. Where is the data stored?

The application's database is hosted in the European Union.

The collection of mentions depends on the Meta Platforms interfaces, whose processing may involve transfers to the United States. This transfer is based on the European Commission's adequacy decision regarding the EU-US Data Privacy Framework.

8. For how long

Candidates who were not contacted or who declined. — 12 months after the last contact, after which the data is deleted.

Active partnerships — for as long as the partnership lasts.

Partnerships terminated — 3 years after the term, a period intended to allow for clarification of issues related to the execution of the agreement.

Tax-relevant records — Commission payments and associated orders: 10 years, as required by Portuguese tax law.

Communication records — 3 years after the partnership ended.

9. Your rights

You have the following rights, which you can exercise at any time:

Sign in access the data we have about you and obtain a copy. Rectify Incorrect or incomplete data. Delete Your data will be deleted when there is no longer a reason to retain it. Limit treatment, under certain circumstances. Portability — to receive your data in a structured and commonly used format. To oppose to treatment based on legitimate interest, including contact for partnership proposals.

To exercise any of these rights, write to partners@food4fitness.ptWe will respond within 30 days.

Please note that some data cannot be deleted immediately due to a legal obligation to retain it, particularly data relating to payments made.

10. How to request data deletion

Send an email to partners@food4fitness.pt with the subject "Data deletion", indicating the name and email address associated with the partnership.

We confirm receipt within 5 business days and complete the deletion within 30 days, with the exception of records that we are legally required to retain, which are kept solely for that purpose and are not used for anything else.

11. Security

Access to the application requires individual authentication. Permissions are applied at the database level: each team member only has access to the partners assigned to them, and each partner only has access to their own data.

Partners who access the application They do not have access to the clients' identity. who used the respective coupon. They only see the order number, date and value, for the purpose of verifying the commission due.