Privacy Policy
(Privacyverklaring) 

Borogodó

Last updated: 04.03.2026

1. Who we are

This website is operated by:

Borogodó
KVK: 87236273
BTW: NL004378178B05
Van Spilbergenstraat 132III, 1057 RN Amsterdam, The Netherlands
Website: borogodo.nl
Email: hello@borogodo.nl

In this Privacy Policy we explain how we collect, use, store and protect personal data when you visit our website, place an order, subscribe to updates, or interact with our content.

2. Personal data we collect

2.1 Data you provide to us

Depending on your actions on the website, we may collect:

• Identity and contact details: name, email address, phone number

• Order information: products ordered, quantities, notes you add at checkout

• Delivery details: address and delivery instructions (e.g. door code, safe place)

• Account data (if you create an account): login credentials and profile details

• Comments and reviews: the information you submit in the comment/review form

2.2 Data collected automatically

When you browse our website, we may automatically collect:

• Technical data: IP address, browser type, device information, operating system

• Usage data: pages viewed, clicks, time on page, referring URL

• Cookie data: see Section 7

2.3 Payments

Payments are processed via third-party payment providers (for example Stripe). We do not store complete payment card details on our servers. Payment providers process payment information as required to complete transactions.

3. Why we process your personal data

We process personal data for the following purposes:

• To process and deliver orders (including scheduling and logistics)

• To communicate about your order (confirmation emails, delivery updates, customer support)

• To manage reusable container deposits and returns (where applicable)

• To send weekly menu updates and service information if you subscribe

• To publish and moderate comments and product reviews

• To keep the website secure and prevent fraud/spam

• To comply with legal obligations (tax and accounting)

4. Legal bases for processing (AVG/GDPR)

We process personal data only when permitted under the GDPR/AVG, including:

• Contract performance (Article 6(1)(b)): fulfilling orders and deliveries

• Legal obligation (Article 6(1)(c)): bookkeeping and tax compliance

• Legitimate interests (Article 6(1)(f)): website security, service improvement, spam prevention

• Consent (Article 6(1)(a)): newsletter/menu updates and analytics cookies where required

You may withdraw consent at any time (see Section 10).

5. Sharing data with third parties

We share personal data only when necessary to operate our services. This may include:

• Payment providers (e.g. Stripe) for payment processing

• Email and communication providers to send transactional emails and (if subscribed) weekly menu updates

• Website hosting and technical service providers (hosting, maintenance, security)

• Spam prevention services for comments and reviews

• Analytics providers (see Section 7.3)

We do not sell your personal data.

Where service providers process data outside the European Economic Area, appropriate safeguards are used where required (for example Standard Contractual Clauses).

6. Data retention

We keep personal data only as long as necessary:

• Orders and invoicing: typically retained for 7 years to comply with Dutch tax rules

• Customer accounts: until you delete your account or request deletion (subject to legal retention)

• Newsletter subscriptions: until you unsubscribe

• Comments and reviews: retained unless you request removal, subject to moderation and legal requirements

• Security logs: retained for a limited period for security and troubleshooting

7. Cookies and analytics

7.1 Essential cookies

We use essential cookies necessary for website functionality (e.g. shopping cart, checkout, login). These cookies cannot be disabled without affecting the site.

7.2 Functional cookies

Functional cookies may remember preferences and improve usability.

7.3 Google Analytics

We use Google Analytics to understand how visitors use our website and to improve the website and services. Google Analytics may collect information such as pages visited, time spent, device/browser data, and approximate location derived from IP.

Where required, analytics cookies are placed only after consent through our cookie consent tool. You can change your cookie preferences at any time via the cookie settings on our website.

8. Comments and product reviews

When visitors leave comments or product reviews, we collect the data shown in the form, as well as the visitor’s IP address and browser user agent string to help with spam detection and moderation.

If you use the Gravatar service, an anonymised string created from your email address (hash) may be provided to Gravatar to check whether you use it. Gravatar’s privacy policy is provided by Automattic.

9. Embedded content

Pages on this site may include embedded content (e.g. videos, images, posts). Embedded content behaves as if you visited the external website directly. Those third-party websites may collect data about you, use cookies, and track interaction.

10. Your rights (AVG/GDPR)

You have the right to:

• access your personal data

• correct inaccurate data

• request deletion (where legally possible)

• restrict processing in certain cases

• object to processing based on legitimate interest

• data portability (where applicable)

• withdraw consent at any time for consent-based processing

To exercise your rights, contact us at: hello@borogodo.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens.

11. SMS communications for delivery updates

If you provide a phone number during checkout, we may use it to send essential delivery-related messages (for example, an SMS with an approximate delivery time window on delivery day). This is service communication necessary to perform the order.

We do not send marketing SMS without explicit consent.

12. Security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

13. Changes to this policy

We may update this Privacy Policy. The most recent version will always be published on this page with an updated “Last updated” date.