Gastronomy Under One Hour
Privacy Policy
Effective 2026-08-17 · what we hold, why, and how you get it back.
1 · Who is responsible
Controller: [TRADER LEGAL NAME], [BUSINESS ADDRESS], Netherlands — table@gastronomyunderonehour.com.
2 · What we process, and why
- Account & payment — your email address and subscription status; payments are handled by Stripe (we never see card numbers). Basis: performance of our contract (Art. 6(1)(b) GDPR); invoice records are kept for the statutory Dutch retention period (7 years).
- Your table profile — who eats at your table, dietary preferences, equipment, heat calibration, and — only if you choose to provide them — allergies and intolerances. Because allergy information concerns health, we process it solely on your explicit consent (Art. 9(2)(a) GDPR), asked for at intake; you can refuse or withdraw consent at any time and the agent will simply not compose around allergies.
- Your shelf — dishes cooked, scores, notes; the queries your Claude sends through the connector (for example, what is in your fridge) are processed to generate the answer and to maintain your shelf. Basis: performance of the contract.
- Support — emails you send us. Basis: legitimate interest in answering you.
We do not sell or rent personal data, run no advertising, and the website sets no tracking cookies.
3 · Where it lives
Data is stored with Supabase (database hosting) and served via Cloudflare; Stripe processes payments. Our database is currently hosted in a US region: transfers rest on the EU–US Data Privacy Framework and/or Standard Contractual Clauses of these providers. [REVIEW REQUIRED: confirm Supabase region/DPF status, or migrate the project to an EU region before launch.] Your own conversations with Claude are governed by Anthropic's privacy terms — Anthropic is your provider there, not ours.
4 · How long
Account, profile, and shelf data: for the life of your subscription and 12 months after it ends (so a lapsed table can come back), then deleted. Invoices: 7 years (tax law). You can request earlier deletion at any time.
5 · Your rights
Access, rectification, erasure, portability (your shelf exports in a readable format), restriction, objection, and withdrawal of consent — write to table@gastronomyunderonehour.com and we respond within a month. You can always complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
6 · Changes
Material changes to this policy are announced by email before they take effect.