Privacy Policy

1. Who we are

Beniro B.V. is responsible for the processing of personal data described in this Privacy Policy.

Beniro B.V.
Antonie van Leeuwenhoekweg 38 B8
2408 AN Alphen aan den Rijn
The Netherlands

Dutch Chamber of Commerce number: 42011658
Email: info@beniro.food
Website: https://www.beniro.food

In this Privacy Policy, “Beniro”, “we”, “us” and “our” refer to Beniro B.V.

2. When this policy applies

This Privacy Policy applies when you:

• visit our website;
• place or submit an order;
• arrange collection of an order;
• contact us by email, telephone or WhatsApp;
• submit a wholesale or other business enquiry;
• subscribe to marketing communications;
• make an online payment; or
• otherwise provide personal data to us.

3. Personal data we process

Depending on how you interact with us, we may process the following personal data.

Website and technical data

When you visit our website, our hosting provider may process technical information necessary to deliver and secure the website, including:

• your IP address;
• browser and device information;
• date and time of access;
• requested pages or files;
• referring website;
• security and diagnostic information; and
• server logs.

We do not use analytics services, advertising pixels or behavioural tracking technologies on our website.

Basket information

Our website uses local browser storage to remember the products and quantities placed in your basket. This information remains on your device and is stored for up to 14 days.

Basket information is not submitted to Beniro until you send your order.

Orders and collection

When you submit an order, we may process:

• your name;
• email address;
• telephone number;
• the products and quantities ordered;
• the requested collection date;
• the requested or approximate collection time;
• communications about the order;
• optional notes; and
• payment and transaction information.

Providing the required order information is necessary for us to process your request, prepare the products and arrange collection. If you do not provide it, we may be unable to fulfil your order.

We send the order confirmation by email through Brevo (see section 6).

Incomplete orders

If you start an order but do not complete the payment, we receive the details you entered at checkout (your name, email address, phone number, the products chosen, the collection time and any notes) and a payment link from Stripe. We may contact you personally, once, to ask whether we can help you complete the order.

Allergy and health information

You may choose to tell us about an allergy, intolerance or other health-related dietary requirement.

This may constitute special-category health data under the General Data Protection Regulation. We process this information only with your explicit consent and only to assess and, where reasonably possible, safely accommodate your request.

Please do not provide health information that is not necessary for your order.

You may withdraw your consent, but doing so may mean that we can no longer safely prepare or fulfil the order. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.

Enquiries and communications

When you contact us, we may process:

• your name;
• contact details;
• the content of your message;
• information relevant to your request; and
• our response and subsequent correspondence.

Wholesale and business enquiries

For a wholesale or other business enquiry, we may process:

• the business name;
• your name;
• your city;
• your email address;
• your telephone number, if supplied;
• your type of business;
• the content of your enquiry; and
• subsequent commercial correspondence.

Marketing

If you voluntarily opt in to marketing, we may process:

• your name;
• email address;
• telephone number or WhatsApp number;
• your communication preferences;
• consent records; and
• engagement information generated through our marketing provider, such as whether an email was delivered, opened or clicked, where this functionality is enabled.

Marketing consent is optional and does not affect your ability to place an order.

You can withdraw your consent at any time by using the unsubscribe option in a marketing message or by emailing info@beniro.food.

Payments

Online payments are processed using Stripe.

Depending on the selected payment method, Stripe may receive:

• your name;
• email address;
• billing information;
• payment-card or bank information;
• transaction amount and currency;
• payment status;
• device, IP address and technical information; and
• information used for authentication, fraud prevention, security and regulatory compliance.

Beniro does not receive or store your complete payment-card number.

Stripe may act as a processor on behalf of Beniro for certain activities and as an independent controller for regulated payment services, fraud prevention, security and legal-compliance activities.

More information about how Stripe processes personal data is available at https://stripe.com/privacy.

4. Why we process personal data

We process personal data for the following purposes and legal bases.

Purpose	Legal basis
Receiving, assessing and fulfilling orders	Taking steps at your request before entering into a contract and performing the contract
Arranging collection and communicating about an order	Performance of the contract
Following up once on an order that was started but not paid	Our legitimate interest in helping customers complete an order
Processing payments and handling refunds	Performance of the contract
Maintaining legally required tax and business records	Compliance with a legal obligation
Responding to general and wholesale enquiries	Our legitimate interest in communicating with customers and operating our business
Operating, maintaining and securing the website	Our legitimate interest in providing a secure and functional website
Preventing fraud, misuse and security incidents	Our legitimate interest in protecting our business and customers
Sending email or WhatsApp marketing	Your consent
Processing allergy or other health information	Your explicit consent
Establishing, exercising or defending legal claims	Our legitimate interest and, where applicable, the establishment, exercise or defence of legal claims

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your privacy rights override those interests.

5. Cookies and local storage

Beniro does not use analytics cookies, advertising cookies, behavioural tracking cookies or advertising pixels.

Our website uses local browser storage to remember the products and quantities placed in your basket. This information remains on your device for up to 14 days and is not submitted to Beniro until you send your order.

The website also stores your language choice (Dutch or English) in local browser storage, so that it opens in the same language on your next visit. This preference stays on your device until you clear it and is not sent to Beniro.

Stripe’s payment functionality may use cookies or similar technologies that are necessary to process payments, authenticate users, prevent fraud and secure transactions. These technologies are used to provide the payment service requested by the customer and are not used by Beniro for behavioural advertising.

You can clear locally stored basket information through your browser settings. Doing so will remove the saved contents of your basket.

For more information about Stripe’s use of cookies and similar technologies, see https://stripe.com/legal/cookies-policy.

6. Who receives personal data

We use carefully selected service providers to operate our website and business.

Netlify

Netlify hosts our website and processes submitted website order forms. Submitted orders pass through Netlify to our orders inbox, and Netlify may retain a copy according to our account configuration and its applicable terms.

Netlify also processes technical and security information necessary to host and protect the website.

More information: https://www.netlify.com/privacy/

JouwWeb

JouwWeb provides the email inbox used for communications sent to info@beniro.food. JouwWeb therefore processes emails and related contact information on our behalf.

More information: https://www.jouwweb.nl/privacy

Brevo

Brevo sends our order confirmation emails. For each order, we share your name, email address, order number, the products, quantities and amounts ordered and the collection details you provided with Brevo, so that it can deliver the confirmation to you.

Brevo is also used to manage and send marketing communications by email and, where enabled, WhatsApp. We share marketing contact information with Brevo only when we have an appropriate legal basis, normally your consent.

More information: https://www.brevo.com/legal/privacypolicy/

Stripe

Stripe processes online payments and related transaction information. Stripe may act as a processor for certain activities and as an independent controller for regulated payment services, fraud prevention, security and legal-compliance activities.

More information: https://stripe.com/privacy

We may also disclose personal data:

• where required by law, regulation, court order or a competent public authority;
• to protect our rights or those of another person;
• in connection with legal proceedings; or
• in connection with a sale, reorganisation or transfer of the business, subject to appropriate safeguards.

We do not sell personal data.

7. International transfers

Some of our service providers or their subprocessors may process personal data outside the European Economic Area, including in the United States.

Where personal data is transferred outside the EEA, we require an appropriate legal transfer mechanism where necessary. Depending on the recipient, this may include:

• an adequacy decision adopted by the European Commission;
• participation in the EU–US Data Privacy Framework;
• the European Commission’s Standard Contractual Clauses; or
• another transfer mechanism permitted by the GDPR.

Netlify and Stripe state that they use recognised transfer safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses where applicable.

You may contact us at info@beniro.food for more information about the safeguards applicable to a particular transfer.

8. Retention periods

We retain personal data only for as long as it is reasonably necessary for the relevant purpose, unless a longer period is required by law.

Our normal retention periods are:

Information	Retention period
Basket information stored locally in the browser	Up to 14 days
Order and transaction records forming part of our tax administration	At least 7 years, as required by Dutch tax law
General order communications not required for tax records	Up to 2 years after the order is completed or cancelled
Details of unpaid orders	Up to 30 days
General and wholesale enquiries	Up to 2 years after the last substantive contact
Complaint and dispute records	Up to 2 years after the matter is resolved, or longer where reasonably necessary for an existing legal claim
Allergy or health information	Normally deleted within 30 days after collection or cancellation, unless needed to handle a complaint or legal claim; in that case, no longer than necessary and normally no more than 2 years
Marketing contact details and consent records	Until consent is withdrawn or after 2 years without meaningful engagement, subject to retaining a minimal suppression record where necessary to honour an opt-out
Website security and server logs	According to the applicable provider configuration and no longer than reasonably necessary for security and troubleshooting
Order confirmation emails and delivery logs held by Brevo	According to Brevo’s configuration and retention policy
Payment information held by Stripe	According to Stripe’s legal obligations and retention policy

When a retention period expires, we delete or anonymise the information unless continued retention is legally required.

9. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access.

These measures include limiting access to people who need the information, using reputable service providers, securing accounts and systems, and using encrypted connections where appropriate.

No internet transmission or storage system can be guaranteed to be completely secure.

10. Your rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

• obtain confirmation of whether we process your personal data;
• access your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict the processing of your personal data;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format;
• withdraw consent at any time;
• object at any time to direct marketing; and
• lodge a complaint with a data protection authority.

To exercise your rights, email info@beniro.food. We may ask for information reasonably necessary to verify your identity.

We normally respond within one month. This period may be extended where permitted by law if a request is particularly complex or numerous.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

11. Automated decision-making

Beniro does not make decisions producing legal or similarly significant effects based solely on automated processing.

Stripe may use automated systems for payment authentication, security and fraud prevention under its own legal responsibilities. Further information is available from Stripe.

12. Complaints

Please contact us first at info@beniro.food if you have a question or complaint about our use of personal data.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
https://autoriteitpersoonsgegevens.nl

13. External links

Our website may contain links to third-party websites, including Google Maps, Apple Maps and social-media services.

We are not responsible for the privacy practices of third-party websites that you choose to visit. Their own privacy policies apply once you leave our website.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers or legal obligations change.

The effective date at the top identifies the latest version. We will review and update this Privacy Policy whenever we introduce a new payment method, service provider, analytics service, marketing technology or tracking technology.