Privacy policy

Last updated: 2026-05-19

1. Data controller

Andhra Pickles
Registration: [fill in via Admin → Settings → Legal entity]
VAT: [fill in via Admin → Settings → Legal entity]
[fill in via Admin → Settings → Legal entity]
Privacy contact: andhrapickles.nl@gmail.com

2. Personal data we process

  • Account: email, name (optional), password hash via Firebase Authentication.
  • Order: billing & shipping address, phone, items, totals, transaction id.
  • Payment: handled by Stripe Payments Europe Ltd. We never store card data.
  • Reviews & wishlist: content you submit.
  • Device / log data: IP address, user agent, language preference, cookie consent.

3. Lawful basis

  • Performance of a contract (GDPR Art. 6(1)(b)) — processing and shipping your order.
  • Legal obligation (Art. 6(1)(c)) — accounting records (7-year retention).
  • Legitimate interest (Art. 6(1)(f)) — fraud prevention, site security.
  • Consent (Art. 6(1)(a)) — analytics and marketing cookies, newsletters.

4. Recipients / processors

  • Google Firebase / Google Cloud (EU regions) — hosting, database, storage.
  • Stripe Payments Europe Ltd (Ireland) — payment processing.
  • Resend (EU region) — transactional email delivery.
  • Carriers — only what's needed for delivery.

5. Retention

  • Account: until you delete it.
  • Orders and invoices: 7 years (Dutch fiscal retention requirement).
  • Server logs: max 90 days.

6. Your rights

  • Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), object (Art. 21).
  • Withdraw consent for cookies / marketing at any time.

Requests via andhrapickles.nl@gmail.com. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).