Anaya Foods ("we", "our", "us") is committed to protecting your personal data. This privacy policy explains how we collect, use, and store information when you visit anayafoods.nl, make a reservation, or sign up to our Spice Club.
We comply with the General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG.
1. Who We Are
Anaya Foods
Duinstraat 1, 2584 AV Scheveningen, Den Haag, Netherlands
Email: contact@anayafoods.nl
Phone: +31 70 383 9500
2. What Data We Collect
| Data | How we collect it | Why |
|---|---|---|
| Name, email address | Spice Club signup form | To send you member offers and chef's specials |
| Name, phone, date, time, guest count | WhatsApp reservation form | To confirm your table booking |
| Name, email, enquiry | Contact / events enquiry form | To respond to your message |
| IP address, browser, pages visited | Google Analytics 4 (after consent) | To improve our website |
| Ad interaction data | Meta Pixel (after consent) | To measure advertising effectiveness |
3. Legal Basis for Processing
- Consent — Spice Club emails, analytics, and advertising cookies. You can withdraw consent at any time via our cookie banner.
- Legitimate interest — Processing reservation requests and responding to enquiries.
- Legal obligation — Retaining financial records as required by Dutch law.
4. Cookies
We use cookies to make our website work and to understand how visitors use it. You can manage your cookie preferences at any time using the cookie banner at the bottom of our site.
| Cookie type | Examples | Purpose |
|---|---|---|
| Necessary | CookieYes consent cookie | Remembers your cookie choice |
| Analytics | _ga, _ga_* | Google Analytics — understands site usage |
| Marketing | _fbp | Meta Pixel — measures ad performance |
5. Third Parties We Share Data With
- TheFork — table reservation management (note: TheFork retains booking guest data on their platform)
- Google Analytics 4 — website analytics (EU data processing agreement in place)
- Meta (Facebook/Instagram) — advertising measurement
- Netlify — website hosting and form submissions (servers in EU/US with Standard Contractual Clauses)
- Uber Eats / Thuisbezorgd — delivery orders placed on their platforms are subject to their own privacy policies
We do not sell your personal data to any third party.
6. How Long We Keep Your Data
- Spice Club emails — until you unsubscribe
- Reservation enquiries — 12 months
- Analytics data — 26 months (Google Analytics default)
- Netlify form submissions — 30 days (free tier limit)
7. Your Rights (GDPR)
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Object to processing based on legitimate interest
- Withdraw consent at any time for consent-based processing
- Data portability — receive your data in a machine-readable format
To exercise any of these rights, email us at contact@anayafoods.nl. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens.
8. Security
Our website is served over HTTPS. Form submissions are handled by Netlify with industry-standard security. We do not store payment card details — all payments are processed by certified payment providers.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the website after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this privacy policy? Contact us:
contact@anayafoods.nl | +31 70 383 9500
Duinstraat 1, 2584 AV Scheveningen, Den Haag