Privacy policy
What happens to your data when you use this website.
Last updated
Who is responsible
Tiago Mendes Jerónimo, trading as Ovrick, Rode Ridderhof 8 bus 10, 2300 Turnhout. Enterprise number 1042.139.393, VAT number BE 1042.139.393. Email tiago@ovrick.com.
If you have a question about your data, or want to see it, have it corrected or have it erased, an email to the address above is enough.
What data we process
Only what you type into the order form yourself: your name, a phone number or email address, the time you pick up, an optional note and the items in your basket. We ask for nothing else. Payment details never reach us: you pay in Stripe’s payment form.
We use that data only to prepare your order and to be able to reach you. The legal basis is your order itself, or our legitimate interest in replying to anyone who contacts us.
We keep your basket only in your own browser, in local storage under the name zoetekauw-basket, so it does not disappear when you reload the page. It leaves your device only when you send the order.
We do not sell your data on, and we do not use it for advertising.
Orders and payments
For an order we receive your name, email, phone number, what you bought, the pickup time or the delivery address, and the payment status from Stripe. We do not receive or store card numbers. For a gift card we also use the recipient’s email address once, to send the code. We keep no order database on this site. Stripe Payments Europe Ltd acts for payments; Resend sends the emails. Orders are kept in Ovrick Cassini, the editor behind this site (hosted on Cloudflare), so they can be prepared: your name, email, phone number, what you bought, the pickup time or delivery address and any note. Ovrick Cassini keeps order records for 10 years, as accounting law requires. Stripe and the email service keep their own copies under their own terms. If you tick the box asking us to email you once when you do not finish an order, we use your email address for that one mail only.
Visitor statistics
Only if you choose to allow it in the cookie notice do we measure visitor numbers, with Vercel Web Analytics. That measurement sets no cookies, stores no personal data and does not follow you to other websites. If you decline, or make no choice, nothing is loaded and nothing is measured. If you allow it, we also count clicks on the main buttons (call, WhatsApp, email and ordering); those counts also go to Ovrick Cassini, the editor behind this site (hosted on Cloudflare), which keeps only a daily total per button: no IP address, no cookie, no visitor id.
The map
The map in the Visit section comes from Google Maps and loads only when you press "Show map". From then on, your browser connects to Google, which receives your IP address and can set cookies. What Google does with that falls under Google’s privacy policy. If you do not press the button, nothing is sent to Google.
Who sees your data
Besides us, only the processors that keep this site running: Vercel, for hosting and delivering the site, EU and US. Resend, for order confirmations and gift card emails, EU. Stripe, for payments (Stripe Payments Europe, Ireland), EU, transfer to the US under standard contractual clauses. Ovrick Cassini, for shop orders and click counts (the counts only after you choose Agree), Cloudflare, Inc. (worldwide network), orders and counts stored in Western Europe.
A data processing agreement has been concluded with each of them. They may use the data only to provide their service.
How long we keep it
An order that arrives by email is kept for as long as it is useful for following it up, and after that no longer than is legally necessary. Your choice about visitor statistics stays in your own browser until you delete it.
Your rights
You have the right of access, rectification, erasure and restriction of processing, and you may object to the processing of your data. Let us know at the email address above and we will reply within the statutory time limit.
If you are not satisfied with how we deal with this, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.