Privacy policy
Last updated: 2026-05-19
1. Data controller
Andhra Pickles
Registration: [fill in via Admin → Settings → Legal entity]
VAT: [fill in via Admin → Settings → Legal entity]
[fill in via Admin → Settings → Legal entity]
Privacy contact: andhrapickles.nl@gmail.com
2. Personal data we process
- Account: email, name (optional), password hash via Firebase Authentication.
- Order: billing & shipping address, phone, items, totals, transaction id.
- Payment: handled by Stripe Payments Europe Ltd. We never store card data.
- Reviews & wishlist: content you submit.
- Device / log data: IP address, user agent, language preference, cookie consent.
3. Lawful basis
- Performance of a contract (GDPR Art. 6(1)(b)) — processing and shipping your order.
- Legal obligation (Art. 6(1)(c)) — accounting records (7-year retention).
- Legitimate interest (Art. 6(1)(f)) — fraud prevention, site security.
- Consent (Art. 6(1)(a)) — analytics and marketing cookies, newsletters.
4. Recipients / processors
- Google Firebase / Google Cloud (EU regions) — hosting, database, storage.
- Stripe Payments Europe Ltd (Ireland) — payment processing.
- Resend (EU region) — transactional email delivery.
- Carriers — only what's needed for delivery.
5. Retention
- Account: until you delete it.
- Orders and invoices: 7 years (Dutch fiscal retention requirement).
- Server logs: max 90 days.
6. Your rights
- Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), object (Art. 21).
- Withdraw consent for cookies / marketing at any time.
Requests via andhrapickles.nl@gmail.com. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).