Privacy policy

This policy explains how Taiyaki Sushi collects and processes your personal data when you use the website taiyakisushi.be, in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

1. Data controller

Taiyaki Sushi SRL, company number 0763.939.831, Rue De Koninck 5, 1080 Molenbeek-Saint-Jean, Belgium.
Phone: +32 491 97 27 22
Email: contact.taiyaki@gmail.com

2. Data we collect

• Order data: name, phone number, email address, delivery address (where applicable), details of the items ordered and instructions.
• Account data (if you create an account): email address and password (stored in encrypted form by our authentication provider).
• Payment data: processed directly by our payment provider Mollie. We never store or see your card details.
• Technical data: data strictly necessary for the website to work (session, basket contents).
• Audience measurement data (only if you accept it): pages viewed, visit duration, device and browser type, approximate location.

3. Purposes and legal bases

• Processing, preparing and delivering your orders, and contacting you about them: performance of a contract.
• Managing your customer account: performance of a contract.
• Sending you order confirmation emails: performance of a contract.
• Meeting our accounting and tax obligations: legal obligation.
• Keeping the website secure and preventing fraud: legitimate interest.
• Measuring website traffic to improve it: consent, which you can withdraw at any time.

4. Recipients and processors

Your data is only shared with the providers needed to deliver the service:

• Supabase, Inc.: database hosting and account management.
• Mollie B.V. (the Netherlands): payment processing.
• Resend: sending confirmation emails.
• Hostinger International Ltd.: website hosting.
• Google Ireland Limited (Google Analytics): audience measurement, only if you have accepted the corresponding cookies.

We never sell your personal data to third parties. Some providers may process data outside the European Union; in that case, these transfers are covered by appropriate safeguards (standard contractual clauses of the European Commission).

5. Retention period

• Order and billing data: kept for as long as our accounting obligations require (7 years in Belgium).
• Account data: kept while your account is active, then deleted on request.

6. Cookies

The website uses two types of cookies:

• Strictly necessary cookies: keep your session, basket and sign-in. They are essential for the website to work and do not require your consent.
• Audience measurement cookies (Google Analytics: _ga and _ga_2KM8DHPCE1): they tell us how many people visit the website and which pages are viewed, so we can improve it. They are only set with your consent, for a maximum of 13 months, and are never used for advertising. Google Analytics does not store your IP address.

On your first visit, a banner lets you accept or decline these cookies. Until you accept, no audience measurement script is loaded. You can change your choice at any time using the “Cookie settings” link at the bottom of every page. Your choice is kept for 13 months, after which you will be asked again.

7. Your rights

Under the GDPR, you have the following rights:

• right of access to your data;
• right to rectification;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time.

To exercise these rights, contact us at contact.taiyaki@gmail.com.

8. Complaints

If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

This is a translation of the French privacy policy. In case of any discrepancy, the French version prevails.