Privacy Policy
Last updated: 9 July 2026
Eat to go, located at Klaprozenweg 36a, 1032 KL Amsterdam, the Netherlands ("we", "us"), is responsible for the processing of personal data as described in this privacy policy. We process your data in accordance with the General Data Protection Regulation (GDPR / AVG). Contact: info@eattogo.nl, +31 20 341 2995.
1. What data we collect
- Account data: name, e-mail address, phone number and a securely hashed password when you create an account.
- Business data: BTW (VAT) and KvK numbers when you register a company account.
- Order data: delivery name, address, postcode, phone number, order contents, optional delivery notes and order history.
- VIP card requests: a photo of your physical VIP card, if you choose to upload one. This photo is stored in our own database and is not shared with third parties.
- Reviews: your rating, review text and display name.
2. Why we process your data (legal basis)
- To process and deliver your orders (performance of a contract).
- To manage your account, loyalty points and VIP membership (performance of a contract).
- To send transactional e-mails such as order confirmations, e-mail verification and password resets (performance of a contract / legitimate interest).
- To comply with legal obligations, such as tax and bookkeeping requirements (legal obligation).
- We do not use your data for marketing without your consent, and we do not sell your data.
3. Payments
- Online payments are processed by Mollie B.V., a Dutch licensed payment service provider. When you pay online, Mollie processes the data required to complete the payment under its own privacy policy. We never see or store your full payment details (such as card numbers).
4. Where your data is stored
- Your data is stored in our own database. Uploaded images (such as VIP card photos) are stored in our own database as well — we do not use external image-hosting services.
- E-mails are sent via our own e-mail provider solely for transactional purposes.
5. How long we keep your data
- Account data: for as long as your account exists.
- Order and invoice data: 7 years, as required by Dutch tax law (fiscale bewaarplicht).
- VIP card photos: until your request has been reviewed and reasonably thereafter for administration.
- You may request deletion of your account at any time (see section 7).
6. Cookies
- We only use functional cookies and local storage that are strictly necessary for the website to work: your login session, your shopping cart, and your language/theme preferences.
- We do not use analytics, tracking or advertising cookies. Under EU/Dutch law (Telecommunicatiewet), strictly necessary cookies do not require consent.
7. Your rights
- Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and the right to object to processing.
- To exercise these rights, e-mail us at info@eattogo.nl. We will respond within one month.
- You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Security
- We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords and rate-limited access to our services.
9. Changes
- We may update this privacy policy from time to time. The most recent version is always available on this page.