Privacy & cookie statement

Orders (pickup): your name, phone number, the dishes you choose and your pickup time. An email address is optional.

Catering requests: your name, optional company name, email address, phone number, delivery address and the details of your request.

Contact form: your name, email address and your message.

We use your data solely to handle your order, catering request or message and to contact you. We never sell your data and do not use it for marketing without your consent.

The legal basis is the performance of your request or contract and our legitimate interest in handling your request properly.

We keep your data no longer than necessary. We retain order and catering data for 3 years for our administration; handled contact messages are deleted afterwards.

Only Toko Nur staff have access, through a secured admin account. Your data is stored with our hosting partners (Supabase for the database, within the EU, and Vercel for the website), who only process data on our behalf. If email notifications are enabled, we send email via Resend.

This website uses no tracking or advertising cookies and no visitor analytics. No cookies are placed for visitors.

We do keep your shopping cart in your browser's local storage (localStorage) so your order is preserved if you refresh the page. This is functional storage needed to place an order; you can clear it at any time via your browser settings.

In the protected admin area we use functional cookies to keep staff logged in. These are not accessible to visitors.

You have the right to access, correct or delete your data. To do so, contact us via the contact form or the email address above.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).