Privacy Policy
We collect what an order needs, keep it as long as Dutch law requires, and sell it to nobody. This page says exactly which data, for which purpose, on which legal basis, and for how long.
Last updated: 3 September 2026
Who is responsible
The controller is Savora Kitchen B.V., trading as Savora's Kitchen, Van Ostadestraat 214-H, 1073 TW Amsterdam, Netherlands, registered with the Chamber of Commerce under number 76 118 402 and VAT number NL0093.44.712.B01.
Data questions of any kind go to [email protected] or by post to the address above, marked for the attention of Marijke Aalders. We are below the threshold that requires a statutory Data Protection Officer, so those messages are read by a person who can act on them rather than a mailbox.
What we process, why, and on what legal basis
| Purpose | Data | Lawful basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Fulfilling your order — picking, packing, shipping, invoicing | Name, delivery and billing address, email, phone, order contents, payment reference | Performance of a contract, Art. 6(1)(b) | Invoice data 7 years (Dutch tax law); the rest 24 months |
| Allergen and dietary notes you give us | Free-text notes, substitution preferences | Contract, Art. 6(1)(b); health details only where you volunteer them, Art. 9(2)(a) explicit consent | Deleted 12 months after your last order |
| Newsletter and Cellar cooking notes | Email address, subscription date, opens and clicks | Consent, Art. 6(1)(a) | Until you withdraw, plus 12 months to prove the consent existed |
| Customer support and complaints | Correspondence, order reference, photographs you send | Contract, Art. 6(1)(b); legitimate interest in defending claims, Art. 6(1)(f) | 24 months |
| Fraud prevention and payment screening | IP address, order pattern, payment-provider risk score | Legitimate interest in preventing fraud and chargebacks, Art. 6(1)(f) | 18 months |
| Food-safety traceability and recall | Order line, batch code, delivery address | Legal obligation, Art. 6(1)(c) — Regulation (EC) 178/2002 Art. 18 | 5 years |
| Statistics about how the site is used | Truncated IP, pages, referrer, device class | Consent, Art. 6(1)(a), via the cookie banner | 13 months |
| Accounting, tax and audit | Invoices, credit notes, payment records | Legal obligation, Art. 6(1)(c) | 7 years |
Where we rely on legitimate interest we have weighed it against your rights and recorded the assessment; you can object at any time and we will stop unless we can show compelling grounds not to.
Who else touches it
Only processors acting on our written instructions under an Art. 28 processing agreement, and only the fields they need:
| Category | Processor | Where it runs |
|---|---|---|
| Hosting and backups | Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany | Germany, EU |
| Payments | Mollie B.V. | Netherlands, EU |
| Carriers | PostNL, DHL Parcel, Swiss Post for CH | EU and CH |
| Email delivery platform | MailerLite (UAB Mailerlite) | Lithuania, EU |
| Statistics | Self-hosted Matomo on our own server | Germany, EU |
| Reviews | Kiyoh B.V. | Netherlands, EU |
| Accounting | Moneybird B.V. | Netherlands, EU |
We do not sell, rent or trade personal data, and we run no advertising or retargeting profiles. Card details never reach our servers — the payment form belongs to our payment provider. Everything above runs inside the EEA, with the single exception of Swiss delivery data, which travels under the European Commission’s adequacy decision for Switzerland. If we ever need a processor outside the EEA without adequacy, we will rely on Standard Contractual Clauses plus a transfer impact assessment, and this page will say so before it happens.
Your rights
- Access — a copy of what we hold, in a readable format (Art. 15).
- Rectification — correct anything wrong (Art. 16).
- Erasure — delete it, except where tax or food-traceability law requires us to keep it (Art. 17).
- Restriction — freeze processing while a dispute is resolved (Art. 18).
- Portability — your order and subscription data as machine-readable JSON or CSV (Art. 20).
- Objection — to anything we base on legitimate interest (Art. 21).
- Withdrawal of consent — one click in any newsletter, or one email. Withdrawal does not affect processing that already happened.
Write to [email protected] with “data request” in the subject. We answer within one month, usually within three working days, and we do not charge for it. We may ask one question to confirm you are who you say you are — never a copy of your passport.
Complaining about us
If our answer does not satisfy you, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, via autoriteitpersoonsgegevens.nl. If you live in another EU country you may complain to your own national authority instead. You can also go to court. We would rather you told us first, but nothing here requires you to.
Cookies and tracking
No non-essential cookie is set until you accept it. The full inventory, with names and durations, is in our cookie policy, and you can change your mind at any time using the “Cookie settings” control in the footer of every page.
Security
Traffic is encrypted with TLS 1.3. Administrative access requires two-factor authentication and is limited to the four people who work here. Backups are encrypted at rest and held for 30 days in the EU. If a breach ever affects you, we will notify the Autoriteit Persoonsgegevens within 72 hours and tell you directly where the risk to you is high — before we write a press line about it.
Children
The shop is not aimed at children and we do not knowingly process data of anyone under 16. If a parent or guardian tells us we have, we delete it.
Changes to this policy
When something material changes we update the date at the top, and we email newsletter subscribers if the change affects them. Previous versions are available on request.
This page is realistic scaffolding written for a client presentation, not legal advice. Have it reviewed by a Dutch food-law and consumer-law practitioner before trading.