Privacy Policy

1. Who's responsible for your data

The data controller is Anchor, trading as Sabor & Saudade, a sole proprietorship registered in Belgium (VAT/enterprise no. BE1033.655.457), Groene Grachtlaan 2, 3740 Bilzen-Hoeselt, Belgium. For any privacy question, reach us via our contact form.

2. What we collect, and why

When you place an order

To process an order we collect your name, email address, delivery preference, and — if you choose shipping rather than pickup — your street address, postal code, city, and country. This is used to fulfill your order and contact you about it. Legal basis: performance of the contract formed when your payment is confirmed.

Payment data

Payment is handled entirely by our payment provider, Mollie B.V. We never see or store your card, bank, or other payment details — Mollie processes them directly on its own hosted checkout page. We receive back only your order's payment status (e.g. paid, failed, canceled) and a payment reference id.

When you use the site

Your cart, delivery-form entries, and language preference are stored locally in your browser (via localStorage) so the site remembers them between visits. This data stays on your device and isn't sent to us until you check out. Legal basis: legitimate interest in providing a working browsing experience.

We do not currently use analytics, advertising, or tracking cookies.

3. Who we share it with

• Mollie B.V. (our payment provider) — receives the order total, your name, and your email to process payment and, where relevant, prevent fraud. See Mollie's own privacy policy for how it handles this data.
• Our email delivery provider — receives your name, email, delivery details, and ordered items so order confirmations can be sent to you and to us.
• Cloudflare (hosting & the small serverless functions that process orders and store order records) — processes order data as part of running the site's infrastructure.
• Google Fonts — the site loads typefaces from Google's servers, which involves your browser making a request to Google that includes your IP address.

We don't sell your data, and we don't share it for marketing purposes.

4. International transfers

Some of the providers above may process data outside the European Economic Area. Where that happens, they do so under appropriate safeguards recognised by the GDPR, such as the EU Standard Contractual Clauses or an adequacy framework.

5. How long we keep it

Order records are kept for as long as required by Belgian accounting and tax law (generally 7 years). Data stored only in your browser's localStorage stays there until you clear your browser data or it's cleared automatically once your payment is confirmed.

6. Your rights

Under the GDPR you have the right to access, correct, or delete your personal data, to restrict or object to its processing, and to receive a copy in a portable format. To exercise any of these, reach us via our contact form.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — autoriteprotectiondonnees.be.

7. Changes to this policy

We may update this policy as the site or our providers change. The current version is always the one published here.