Privacy policy

Last updated: September 2026

Sabor Domingo (“we”) is a small food business in Amsterdam, owned by Maria Ines Barcena Santacruz and registered with the Dutch Chamber of Commerce under KvK number 42138905 (VAT ID NL005527552B10). This page explains what personal data we handle when you use sabordomingo.nl, and why. Questions: hola@sabordomingo.nl.

What we collect, and why

When you place an order: your name, email address, delivery address, postal code, phone number, your dish selection, and any notes you add (for example allergies). We use these only to prepare and deliver your order and to contact you about it. Legal basis: performance of a contract.

When you pay: payment is handled entirely by Stripe. We never see or store your card or bank details. Stripe processes your payment data as a separate controller — see Stripe’s privacy policy.

When you sign up for order notifications: your email address, stored with our email provider Brevo. We use it only to tell you when ordering opens and what is on the menu. Legal basis: your consent. Every email contains an unsubscribe link, and unsubscribing stops these emails immediately.

When you send an event inquiry: the details you submit in the form, so we can reply.

What we don’t do

No tracking cookies, no analytics profiles, no advertising, and we never sell or share your data for marketing. The site stores nothing on your device beyond what is technically necessary.

Where your data lives

Order data is stored with Supabase on servers in the European Union (Frankfurt). Emails are sent via Brevo (EU). Payments run through Stripe. The website is hosted on Vercel.

How long we keep it

Order records are kept as long as required for Dutch tax administration (7 years). Notification-list emails are kept until you unsubscribe. Event inquiries are deleted once handled.

Your rights

Under the GDPR (AVG) you can ask us at any time to see, correct, or delete the data we hold about you, or to hand it over to you. Email hola@sabordomingo.nl and we’ll sort it out. You can also complain to the Autoriteit Persoonsgegevens.