Your data, in plain words.

Overview

Tanto Cuisine cooks and delivers meals. To do that we need a minimum of information about you: who you are, where to deliver, what you cannot eat and how you pay. We collect what the service requires, and not much more.

The data controller is Timesty SRL, with its registered office at Rue du Duc 60, 1150 Woluwe-Saint-Pierre, Belgium. We apply the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018. We do not sell your data. Ever.

This policy covers tantocuisine.com, your account, your orders and our emails. It does not cover third-party sites we may link to, which have rules of their own.

We are not required to appoint a data protection officer and have not appointed one: our activity involves neither large-scale monitoring nor large-scale processing of sensitive data. Privacy questions are handled directly by management, at the address at the foot of this page.

What we collect

Almost all of it comes from you, directly. The rest is produced by using the service, such as your order history.

• Account data, name, email address, phone, language, password (stored hashed, never in clear, and unreadable to us).
• Delivery data, address, postcode, drop-off instructions, and the delivery window. The address also goes to our route-planning tool.
• Order history, the dishes you choose, quantities, dates, weeks skipped, and your ratings and feedback on dishes if you leave any.
• Allergens, the allergens you record so the site can flag the dishes concerned. These are health data and have their own section below.
• Payment metadata, the provider used, the payment method, a masked card or meal-voucher reference, the status of the transaction, and the payment authorisation if you chose the standing weekly order. We never see or keep full numbers.
• Invoicing, the amounts, taxes and particulars that accounting law requires us to keep.
• Usage data, aggregate statistics on how the site is used, only if you accepted audience measurement.
• Technical data, IP address, device and browser type, recorded by our hosts in their technical logs, to run the site and detect abuse.
• Correspondence, what you write to us through the contact form or by email, and our reply.
• Waiting-list data, your email address, postcode, language and the page you signed up from, if you joined the list.

Giving us your name, address and a means of payment is necessary in order to buy: without them we cannot conclude or perform the contract. Everything else, allergens, newsletter, audience measurement, is optional and can be refused with no effect on your order.

Legal bases and retention

Every processing operation rests on a specific legal basis, and each has its own retention period. Here are ours, operation by operation.

Where we rely on a legitimate interest, we have weighed that interest against your rights, and you can object at any time. Where we rely on your consent, you can withdraw it as easily as you gave it, without that calling into question what was done before the withdrawal.

Allergens and health data

We process your allergens only if you record them yourself, and only to flag the dishes that contain them. We do not use them to target messages, we share them with no advertiser, and they do not leave our database, except on the preparation sheet that goes with your order in the kitchen.

You can change or delete them at any time from your account. Deleting them withdraws your consent for the future and the site immediately stops flagging the dishes concerned, which makes checking each dish listing yourself all the more important.

Recording an allergen is entirely optional. You can order without recording any and read the dish listings yourself, which show every regulated allergen.

How we use it

To cook the right dishes, deliver them to the right door on the right day, take payment, issue your invoice and tell you when something changes about your order.

With your consent, we send the week's menu and a reminder before the Wednesday close. You can turn these off at any time from your account or through the unsubscribe link in every email, in one click.

We also use this data, in aggregate, to understand what works: which dishes come back, which delivery runs overflow, where the site loses people. That work produces no individual decision about you.

We never use your data for purposes that would have been alien to you when you entrusted it to us. If a new use were to arise, we would tell you and, where it rests on consent, ask you first.

Payments

Payments, card, Bancontact and the Edenred, Pluxee and Monizze meal vouchers, are handled by Mollie, our payment services provider, established in the Netherlands. Card and meal-voucher numbers are entered on Mollie's side and never pass through our servers. We keep only what we need in order to recognise a payment method already used, to run the standing weekly order if you chose it, and to keep our accounts.

Mollie acts here as a controller for its own regulatory duties, in particular anti-money-laundering, and applies its own privacy policy, which we encourage you to read.

A stored payment authorisation never triggers a charge on its own: only your order, or the standing weekly order you explicitly chose, triggers one.

Cookies

The site writes only the strict minimum to your device until you have accepted more. Audience measurement and advertising measurement are optional, refused by default, and load only after you agree.

The full inventory, line by line, with what each entry does and how long it lasts, is on our cookies page, where you can also revisit your choice at any time.

Who we share with

We share your data only with the partners who make the service run, and only the part each one needs. None of them receives it for their own purposes, unless stated below:

• Mollie, to process your payment and, where applicable, your payment authorisation.
• Supabase, our database host and authentication service. This is where your account and your orders live.
• Vercel, the host of the site itself, which sees requests pass through and keeps technical logs, and which provides, if you accepted measurement, cookieless audience measurement.
• Resend, our email delivery provider, to carry confirmations, reminders and, if you consent, the week's menu.
• Our delivery team, your name, address, phone, instructions and window, for the duration of the Sunday run.
• Our mapping and route-optimisation tools, your address, to build the route and estimate when you will be reached.
• Google and Meta, only if you accepted audience or advertising measurement, and only for those measurements.
• Our accountant and advisers, the accounting records, under their professional duties of confidentiality.

Each is bound by contract to protect your data and to process it only on our instructions. We may also be compelled to disclose data to a public authority where the law requires it; we never do so of our own accord. If the business were sold or restructured, your data would follow the activity under the same safeguards, and you would be told.

Transfers outside the EU

We aim to keep your data inside the European Economic Area, and our main hosting sits there. Some of our providers are nonetheless US companies, or have technical support outside the Union, so access from a third country cannot be ruled out.

That is the case for Google and Meta, for the measurement categories you accepted and no others, and it may concern our hosts' technical support.

These transfers are covered by the safeguards in Chapter V of the GDPR: the EU-US Data Privacy Framework for companies certified under it, and failing that the European Commission's standard contractual clauses, supplemented where needed by additional technical measures.

You can ask us for a copy of the safeguards applying to a specific transfer by writing to hello@tantocuisine.com. If you refuse the optional cookie categories, no transfer connected to audience measurement or advertising takes place.

Retention

We keep your data only as long as the purpose we collected it for requires. The legal-bases table above gives the period for each operation. Two further rules apply.

First, the law wins: accounting records and invoices are kept for at least seven years, even if you close your account in the meantime. We cannot erase them sooner, and an erasure request does not reach them.

Second, a dispute suspends erasure: if a complaint, an unpaid amount or proceedings are pending, we keep what we need to deal with it until it ends and until the limitation periods expire.

Once those periods pass, data is deleted or irreversibly anonymised. Waiting-list data is kept until you ask us to delete it, or until the list has served its purpose. Write to hello@tantocuisine.com to be taken off it at any time. You do not need an account to ask, and we do not ask why.

Security

We take the technical and organisational measures expected of a company our size to protect your data:

• All traffic between your browser and our servers is encrypted (HTTPS).
• Passwords are hashed and salted, never stored in clear: we cannot read them.
• Card and meal-voucher numbers never touch our servers, they are entered with our payment provider.
• Database access is restricted by row-level rules, and administrative access is limited to the people who need it.
• Our providers are chosen from established firms that document their own security measures.

No system is perfectly secure, and we will not pretend otherwise. In the event of a data breach likely to result in a high risk to your rights, we would tell you without undue delay, and notify the Data Protection Authority within 72 hours, as the GDPR requires.

Your rights

Under the GDPR, you may at any time:

• Access the data we hold about you and obtain a copy of it.
• Have any inaccurate or incomplete information corrected.
• Ask us to erase it, the "right to be forgotten", within the limits of what the law obliges us to keep.
• Ask for a processing operation to be restricted while a challenge is resolved.
• Receive your data in a structured, machine-readable format, and ask us to send it to another provider.
• Object to processing based on our legitimate interest, including any profiling that follows from it.
• Withdraw your consent, at any time, for the newsletter, allergens or optional cookies.
• Not be subject to a decision based solely on automated processing that produces legal effects for you.

Many of these rights can be exercised straight from your account, in a few clicks. For the rest, write to hello@tantocuisine.com. We answer within one month, extendable by two months if the request is complex, in which case we would tell you before the deadline. There is no charge; a manifestly unfounded or repetitive request may attract a reasonable fee, or a reasoned refusal.

We may ask you to confirm your identity before acting, not to slow you down, but to avoid handing your data to somebody else.

Automated decisions

We take no decision producing legal effects for you, or significantly affecting you, on the sole basis of automated processing. No score and no automatic ranking decides your access to the service, your price or your delivery.

The site sorts and flags dishes according to the allergens you recorded, and our route tool orders stops according to the day's addresses. Those are practical aids, not decisions about you, and a person remains responsible for every decision that affects you.

Minors

The service is for adults. You must be 18 or over to open an account and order, and we do not knowingly collect data about minors.

If you hold parental authority and believe a minor has given us data, write to hello@tantocuisine.com and we will delete it without delay.

Changes

This policy changes as the service does. The version that applies is the one published on this page, and it carries a date at the top so you can see that it has changed.

A substantial change, a new recipient, a new purpose, a change of legal basis, will be flagged to you by email or on the site before it takes effect. Where it rests on your consent, we will ask for it rather than assume it.

Contact and complaints

A question, or want to exercise one of the rights above? Write to hello@tantocuisine.com or use the contact page. We handle these requests ourselves, and most are settled in a single exchange.

If our answer does not satisfy you, you have the right to lodge a complaint with the competent Belgian authority, the Autorité de protection des données, or with the supervisory authority where you live. We would rather you gave us a chance to put things right first, but the right is yours and nothing conditions it.