NABÄTI

1. WHO WE ARE

This website is operated by Trinity Food Services B.V. (trading as Nabati Eatery), registered with the Dutch Chamber of Commerce (KVK) under number 96447044, VAT ID NL867614961B01, located at Keizerstraat 168, 3011 GH Rotterdam, Netherlands. We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).

2. WHAT WE COLLECT

We may collect information when you:

• Place an order or make a reservation
• Contact us through forms or email
• Subscribe to updates or promotions

This may include your:

• Name and contact details (email, phone)
• Delivery address and order history
• Payment information (processed securely by third-party providers; we do not store full payment card details)
• Device and usage data (for site improvements, via cookies and analytics tools)

3. WHY WE PROCESS YOUR DATA (LEGAL BASIS)

We only process your personal data where we have a valid legal basis to do so:

• Contract: to process and fulfil your order or reservation
• Consent: to send marketing emails or promotions, and for non-essential cookies (you may withdraw consent at any time)
• Legal obligation: to meet tax, accounting, and other statutory requirements
• Legitimate interest: to improve our website, prevent fraud, and ensure the security of our systems

4. HOW WE USE YOUR INFO

We use your information to:

• Process and deliver your orders
• Provide customer support
• Send updates, offers, or promotions (only if you opt in)
• Improve our website and your experience

5. HOW LONG WE KEEP YOUR DATA

We keep personal data only as long as necessary for the purposes above:

• Order and invoice records: 7 years, as required by Dutch tax law
• Contact form and email enquiries: up to 2 years from your last contact with us
• Marketing list data: until you unsubscribe or withdraw consent

6. HOW WE PROTECT YOUR DATA

We take security seriously. Your data is protected using modern, industry-standard safeguards. Sensitive information (like payments) is handled by trusted, secure third-party processors. Access to personal data within our team is limited to what is needed to perform their role.

7. SHARING YOUR INFORMATION

We do not sell or rent your personal data. We only share it with:

• Delivery platforms (e.g. Uber Eats, Thuisbezorgd) to fulfil your orders
• Payment processors to handle transactions securely
• Website, hosting, and email/marketing tool providers who support our operations
• Authorities, where legally required

Where any of these providers are located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

8. YOUR RIGHTS

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (this won’t affect processing carried out before withdrawal)
• Opt out of marketing emails at any time
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) if you believe your data has been mishandled

To exercise any of these rights, contact us at info@nabatieatery.com.

9. COOKIES & TRACKING

Our website uses cookies and similar technologies. Essential cookies are necessary for the site to function and don’t require consent. Non-essential cookies (such as analytics and advertising cookies) are only placed after you give consent via our cookie banner. You can change or withdraw your cookie preferences at any time through the banner or your browser settings.

10. CHILDREN’S PRIVACY

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. ECO-FRIENDLY COMMITMENT

In line with our sustainable values, we strive to use digital practices that are mindful of data storage and energy consumption.

12. UPDATES TO THIS POLICY

We may update this policy as needed. Changes will be posted here, with a new effective date.

13. CONTACT US