Skip to content
PRIVACY

Privacy Policy

We handle your data with care and process only what is needed to cook and deliver your lunch. No marketing tracking, no sale to third parties.

  1. 1. Who is responsible

    Mama Rosa Catering, Cinemadreef 52, 1325 EM Almere, the Netherlands. VAT NL005293503B96. Email info@mamarosa.nl. We are the data controller as defined by the GDPR.

  2. 2. What data we process

    Email address and name: for your account and magic-link login.
    Company name, address and VAT number of the Customer: for our administration.
    Order data: what you ordered, for which date, for which address.
    Payment data: the last four digits of your payment method and a transaction ID. The full payment data are processed by Stripe; we do not see them.
    Phone number (optional): so the courier can call you on delivery.

  3. 3. Why we process these data

    To perform and deliver your order (performance of contract, art. 6(1)(b) GDPR).
    To comply with our fiscal retention duty (legal obligation, art. 6(1)(c) GDPR).
    To safeguard the security of the platform (legitimate interest, art. 6(1)(f) GDPR).

    We do not use your data for marketing purposes without your explicit consent.

  4. 4. How long we keep data

    Account data: as long as your account is active. Deleted within 30 days after closure.
    Order history and invoices: 7 years (fiscal retention duty).
    Security log files: 90 days.

  5. 5. With whom we share data

    Stripe (payment processor, EU).
    Supabase (database and authentication, EU).
    Resend (email delivery, EU).
    Our courier (only name and delivery address).
    Dutch tax authority and accountant (only when legally required).

    We do not sell data. We do not share data with marketing agencies.

  6. 6. Cookies

    We use only functional cookies to keep you signed in and remember your language preference. No tracking or marketing cookies. See our Cookie Policy for details.

  7. 7. Your rights

    You have the right to access the data we hold about you, to have inaccurate data corrected, to request deletion (within the limits of our fiscal retention duty), to request restriction of processing, to object to processing, and to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

    Send a request to info@mamarosa.nl. We respond within one month.

  8. 8. Contact

    Mama Rosa Catering, Cinemadreef 52, 1325 EM Almere, the Netherlands. Email info@mamarosa.nl.

Version 1.0, last updated 5 June 2026.