Privacy Policy
Privacy Policy
Last updated: 12 October 2026
Kebabish takes protecting your personal data seriously. This privacy policy explains what data we collect, why, and what rights you have.
Who we are
This website, kebabish.nl, is operated by Marfah Enterprise, trading as Kebabish, located at De Overstoep 49, 1616RK Hoogkarspel, and registered with the Dutch Chamber of Commerce (KVK) under number 42147417.
For any questions about this privacy policy or how we handle your data, contact us at info@kebabish.nl or +31 6 84011572.
What data we collect
Depending on how you use our services, we process the following data:
- Name, email address, phone number, delivery address and chosen delivery time when placing an order
- Order history and the contents of your order
- Account details if you create a customer account (name, email, password stored in encrypted form)
- Your delivery address, only if you choose to save it for next time — you can remove it from your account page
- Your consent to receive news and offers by email, with the date and where you gave it — it is off by default and you can withdraw it at any time
- Communication via WhatsApp, phone or email when you contact us
- Technical data such as IP address and browser type, for website security and functionality
- Your feedback (your answers and any comment), linked to your order if you open the form from the link in your email, your account or your order page. We only keep your name and email address with it if you tell us we may contact you
Why we use this data
We use your data only to:
- Process, deliver and handle your order
- Contact you about your order
- Offer a customer account and order history, if you choose to create one
- Meet legal obligations, such as our tax record-keeping
- Keep our website secure and technically sound
- Read and use feedback to improve our food, delivery and website and — only if you have allowed it — to contact you or show your comment (first name only) on our website
Legal basis
We process your data based on the performance of a contract (placing and delivering your order), a legal obligation (such as our bookkeeping duties), or our legitimate interest in a secure, well-functioning website.
Sharing with third parties
We never sell your data to third parties. To provide our service, we share data with a small number of carefully chosen partners:
- Mollie, to securely process online payments — we never store payment details such as card numbers ourselves
- PDOK (the Dutch government's geodata platform), to look up your address from your postcode
- Google Maps, to show the map of our delivery area
- Resend, to send order-related emails
- Our hosting and database providers (Vercel and Supabase), who act solely as processors on our behalf
Required and optional information
To place an order your name, email address, phone number, delivery address and chosen delivery time are required: without them we can't confirm or deliver your order.
Optional are: a note with your order, a customer account (and your phone number in it), a saved delivery address and your consent to receive news and offers. You can always order without these.
Where your data is processed
Our database is hosted by Supabase in Ireland (European Union) and our website runs on Vercel in the Dublin (Ireland) region.
Some of our providers are US companies or use US systems, including Vercel, Resend (email) and Google (map). Where this means personal data ends up outside the European Economic Area, it is done on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses, as set out in our data processing agreements with these providers.
Retention period
We do not keep your data longer than necessary for the purpose it was collected for. Order data and invoices we need for our tax records are kept for 7 years, as Dutch tax rules require of us as a business. Other personal data is not kept longer than its purpose requires.
We keep feedback for as long as it helps us improve Kebabish; we delete yours sooner if you ask us to.
Cookies and local storage
We currently do not use third-party tracking or advertising cookies. Your shopping cart is stored locally in your browser so it's kept between visits — this data never leaves your own device.
Your rights
You have the right to:
- Access the data we hold about you
- Have inaccurate data corrected
- Have your data deleted, where legally possible
- Have the processing of your data restricted, and object to certain processing
- Receive your data in a commonly used format (data portability), where applicable
- Withdraw any consent you have given, at any time
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, contact us at info@kebabish.nl.
Automated decision-making
We do not make decisions based solely on automated processing that have legal effects on you or similarly significantly affect you.
Security
We take appropriate technical and organisational measures to protect your data against loss or unauthorised use.
Changes
We may update this privacy policy from time to time. The most current version is always available on this page.
Your say
Tell us how it went
We are a small kitchen in Hoogkarspel and we read every response ourselves. Two minutes of your time help us improve the food, the delivery and this website.
- It takes about two minutes
- Anonymous — unless you leave your name yourself
- About the food, the delivery and the website
Scan it and fill it in on your phone
