Privacy policy

DRAFT PENDING VALIDATION: the full company identity, privacy contact, and final retention period still require confirmation.

Controller and data processed

Bronzo Gastronomic SL will process company details, contact name, telephone, email, delivery address and, when an invoice is requested, tax ID, legal name, and billing address.

Purposes and legal basis

Data is used to validate, charge, prepare, deliver, communicate, and invoice the order, manage incidents, and meet legal duties. The basis is performance of the contract and compliance with legal obligations. Analytics relies solely on cookie consent.

Providers and retention

Cloudflare hosts the application, Stripe processes payment, Resend delivers email, and Google validates addresses when the service is available. Order identity data is currently anonymised after 365 days, a provisional period that the client and its advisers must validate. Fiscal records will be kept for the applicable statutory periods.

Rights

You may request access, correction, erasure, objection, restriction, or portability through [PRIVACY CONTACT PENDING]. You may also complain to the Spanish Data Protection Agency.