Privacy Policy

Portal is a board game cafe located at Drezdenska 19-13, 1000 Skopje, North Macedonia. For the purposes of this policy, Portal is the data controller responsible for your personal data.

Contact: portalskopje@gmail.com · +389 70 675 855.

Table reservations and event applications: your name, phone number, email address (optional for reservations), number of guests, and any notes you add.

Event tickets and gift vouchers bought at checkout: purchaser name, phone number, and email address, plus the name and email of a gift recipient if you buy a voucher for someone else.

We do not collect or store card numbers, CVV codes, or any other card details. Card payments are entered directly on our payment provider's (bank's) own secure page and never pass through or get stored on our servers.

To confirm, manage, and follow up on reservations and event applications.

To process ticket and gift voucher purchases, send confirmation and receipt emails, and send event reminders.

To respond to enquiries sent through our contact details.

To keep basic sales records for accounting and tax purposes.

To prevent abuse, such as repeated no-shows, by keeping a list of blocked email addresses.

We process your data to fulfil the reservation, application, or purchase you asked for, and based on our legitimate interest in running the cafe (for example, preventing abuse and keeping accounting records). We keep reservation and purchase records for as long as needed for these purposes and for the periods required by applicable accounting rules, then delete or anonymise them.

Supabase — hosts our database and handles staff login, on servers located in the EU.

Resend — delivers transactional emails (booking confirmations, receipts, voucher and reminder emails) on our behalf.

Our card payment provider / issuing bank — processes card payments directly; we never receive your full card number.

We do not sell your data, and we do not use it for advertising or share it with third parties for their own marketing.

We only use essential cookies: one to remember your language preference, and — for staff only — a login session cookie. We do not use advertising or analytics tracking cookies.

The site is served entirely over HTTPS/TLS. Our database connection is also encrypted (TLS-enforced), and access to it requires authenticated credentials. Admin access is protected by a login system; staff accounts are separate from customer data.

Under the Law on Personal Data Protection, you can ask us to access, correct, delete, or restrict the personal data we hold about you, and you can object to processing based on our legitimate interest. To exercise any of these rights, contact us at portalskopje@gmail.com. You can also lodge a complaint with the Personal Data Protection Agency (АЗЛП) of North Macedonia.

All payments for event tickets and gift vouchers are final. We do not offer refunds. If something goes wrong with your order, contact us at portalskopje@gmail.com — we handle individual issues case by case (for example, rebooking or store credit), but a refund is not guaranteed.

Portal is an 18+ venue. We do not knowingly collect personal data from anyone under 18 — all reservations, event applications, and purchases must be made by an adult.

We may update this policy from time to time. The "last updated" date above shows when it last changed. Continuing to use the site after an update means you accept the revised policy.

Questions about this policy or your data: portalskopje@gmail.com · +389 70 675 855 · Drezdenska 19-13, 1000 Skopje, North Macedonia.