Privacy Policy

1. Who We Are

NusaEats B.V. ("NusaEats", "we", "our") is the data controller for your personal data. We are headquartered in Amsterdam, Netherlands. You can reach us at privacy@nusaeats.com.

2. Data We Collect

• Account data: name, email, phone number when you create an account.
• Order data: shipping address, payment confirmation (we never store card details — payments are processed by Stripe).
• Newsletter: email address when you subscribe.
• Usage data: anonymous analytics (pages visited, device type) collected via cookies.

3. How We Use Your Data

• To process and fulfil your orders.
• To send order confirmations and shipping updates.
• To send marketing emails (only if you opt in via our newsletter).
• To improve our website and products through anonymous analytics.

4. Legal Basis (GDPR)

We process your data under the following legal bases: contract performance (order fulfilment), legitimate interest (website improvement), and consent (marketing communications). You may withdraw consent at any time.

5. Data Sharing

We share data only with trusted partners necessary to run our service:

• Stripe: payment processing.
• Shipping providers: to deliver your order.
• Analytics: anonymised data for website improvement.

We never sell your personal data.

6. Your Rights

Under the GDPR, you have the right to access, rectify, delete, or port your data. You also have the right to object to processing or restrict it. Contact privacy@nusaeats.com to exercise these rights.

7. Cookies

We use essential cookies (session, cart) that are required for the site to function. Optional analytics cookies are only set with your consent via the cookie banner.

8. Data Retention

We retain order data for 7 years (legal obligation). Account data is retained until you delete your account. Newsletter subscriptions are retained until you unsubscribe.

9. Contact

For privacy-related questions: privacy@nusaeats.com