Privacy Policy

This Privacy Policy explains how Barouche ("we", "us") collects and uses your personal data when you visit our website or contact us. We handle your data in accordance with the EU General Data Protection Regulation (GDPR).

Who we are

Barouche is a Mediterranean fast-food chain based in Ghent, Belgium. For any questions about this policy or your data, contact us at info@barouche.eu.

What we collect

We only collect the data you choose to give us through our forms:

• Contact form: your name, email address, and — optionally — the location you visited, visit type, and your message.
• Foodtruck request: your name, email, phone number, event date, guest count, location, and message.
• Franchise application: your name, email, phone number, target city, and motivation.
• Gold Card order: your email address and, when you order a physical card, your name and delivery address. When you top up an existing card, we record the card code you enter.
• Merch order: your name, email address, the Barouche location where you pick up and — optionally — your phone number.

We do not sell your data, and we do not use it for automated decision-making or profiling.

We never receive or store your card or bank details. Payments are handled entirely on the secure payment page of our payment provider.

Why we use it

We use the information solely to respond to your message, handle your request, and follow up where relevant. The legal basis is your consent and/or our legitimate interest in answering your enquiry.

For merch orders we use your details to prepare your order at the location you chose, tell you when it is ready, and handle a return if you send something back. The legal basis is the performance of our agreement with you, and our legal obligation to keep accounting records.

For Gold Card orders we use your details to process the order, load the credit, deliver your card and contact you if anything is unclear. The legal basis here is the performance of our agreement with you, and our legal obligation to keep accounting records.

Who processes it

We work with a small number of providers who process data on our behalf, under their own security and privacy terms:

• Netlify — hosting of this website and the forms behind it.
• Resend — delivery of the emails our forms and orders generate.
• Cloudflare — spam and bot protection on our forms (Turnstile).
• Sanity — management of our website content.
• Mollie — payment processing for Gold Card and merch orders. Your payment details are entered on Mollie's own secure page and are never shared with us.
• Google — website analytics through Google Analytics and Tag Manager, and only if you agree to it. See the section on cookies below.

How long we keep order data

Order details are kept for as long as needed to handle your order and to meet our legal accounting obligations, which in Belgium is seven years.

Cookies and analytics

We use Google Analytics, loaded through Google Tag Manager, to see how our site is used — which pages people visit and how they got there. This sets cookies, so we only load it once you agree. Until you do, and if you decline, no analytics cookies are placed and Google receives no identifying information about you.

You can change your mind at any time through cookie settings, also linked at the bottom of every page. Your choice is stored in your browser, not in a cookie, and never leaves your device.

Nothing else on the site tracks you. Videos are hosted by us directly, so watching one sets no third-party cookies, and we run no advertising pixels.

How long we keep it

We keep form submissions only as long as needed to handle your request and for a reasonable follow-up period, after which they are deleted.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• object to or restrict processing;
• request a copy of your data (portability);
• lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

To exercise any of these rights, email us at info@barouche.eu.

Changes

We may update this policy from time to time. The "last updated" date at the top reflects the most recent version.