Legal
Privacy Policy
Last updated: 9 June 2026
1. Who we are
Bottega Noord is based in Amsterdam, the Netherlands, and supplies artisan food from Piemonte and northern Italy to professional clients in the Netherlands. For privacy-related questions you can reach us at carlo@botteganoord.nl.
2. What data we collect
When you submit our B2B enquiry form we collect your name, business name, city, type of business, email address, optional phone number and the content of your message. We also store technical metadata about the submission — the time it was sent, a message identifier and the IP address of the request — for security, anti-abuse and delivery troubleshooting. We do not collect any data from visitors who do not submit a form.
3. Why we use it and on what legal basis
We use your details for two closely linked purposes. First, to read and answer your wholesale enquiry and to manage the resulting commercial relationship — the legal basis is the performance of pre-contractual steps at your request and, where a relationship follows, the performance of a contract (Art. 6(1)(b) GDPR). Second, to send you an automated confirmation email acknowledging that we have received your enquiry and restating the details you submitted, so you have a record of the request — the legal basis is our legitimate interest in providing a transparent, traceable enquiry process (Art. 6(1)(f) GDPR). We do not use your details for marketing, profiling or any automated decision-making, and we will not add you to a mailing list.
4. Who receives your data
Your enquiry is stored in our backend on Lovable Cloud, which acts as our processor and hosts the website and database in the European Union. Outgoing emails — both the notification we receive and the confirmation we send back to you — are delivered through our email service provider, which acts as a sub-processor on our behalf and processes the recipient address, subject line and message content strictly to deliver the email. We do not sell, rent or share your data with any other third party. Where any sub-processor processes data outside the European Economic Area, the transfer is covered by Standard Contractual Clauses.
5. How long we keep it
Enquiry messages are kept for up to 24 months after our last contact, after which they are deleted unless we are legally required to keep them longer (for example for tax or accounting purposes — generally 7 years under Dutch law).
6. Your rights
Under the GDPR you have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time. To exercise any of these rights, email carlo@botteganoord.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies
We use only essential storage to remember your language preference and your cookie choice. We do not use analytics, advertising or tracking cookies. See our Cookie Statement for details.
8. Security
All form submissions are sent over HTTPS. Access to messages is restricted to Bottega Noord staff. We review our security measures regularly.
9. Changes
We may update this policy. Material changes will be reflected on this page with an updated date.