Privacy policy

Last updated: 2026-10-10

This privacy policy explains how Grassifood ("we", "us", "our") collects, uses and protects personal data when you use our website and services.

1. What data we collect

We may collect the following personal data:

Name
Email address
Company name
Account details (login information and the time of the last successful login)
Product requests (selected products, quantities, comments)
Technical data needed for website security and operation
Visitor statistics, only after you have given permission

2. How we use your data

We use your data for the following purposes:

Processing and answering product requests
Communication with customers
Improving our services and website
Security and fraud prevention

3. Legal basis for processing

We process personal data based on:

Your consent
The need to fulfil a contract or handle a request
Our legitimate business interests

4. Sharing data

We do not sell your personal data.

Your data is shared only when necessary with:

Email providers
Hosting providers
Public authorities when legally required

5. Retention period

We retain your data no longer than necessary for:

Handling your request
Meeting legal obligations

6. Cookies

Onze website gebruikt noodzakelijke sessiegegevens voor inloggen en beveiliging. Daarnaast vragen wij toestemming voor bezoekersstatistieken, inclusief het verbindings-IP-adres.

For these statistics we record:

The page visited
Date and time of the visit
Device category: desktop, tablet or mobile
The referring website, where applicable
The connection IP address, only after consent to visitor statistics

A random visitor code is stored as a hash to count unique browsers. Full browser information is not stored. IP addresses remain visible in administration for up to 30 days and are then removed from visit records during automatic cleanup. Other statistics are retained for up to twelve months.

Deze bezoekercode is een pseudoniem en wordt niet gekoppeld aan uw naam, e-mailadres of klantaccount. Beheerders kunnen recente paginaweergaven met het verbindings-IP-adres en de browsercode bekijken, naast samengevoegde aantallen. Een IP-adres kan door meerdere personen worden gedeeld; deze gegevens zijn geen betrouwbare identificatie van een persoon. Zoektermen en andere URL-parameters worden niet in de bezoekersstatistieken opgeslagen. Voor het uitsluiten van intern verkeer kunnen wij het verbindingsadres of het ingelogde account vergelijken met een uitsluitingslijst. Deze lijst is alleen toegankelijk voor beheerders. Accountnamen worden niet aan bezoekregistraties toegevoegd en uitgesloten bezoeken worden niet geregistreerd.

You can refuse or change your consent using Change cookie preferences at the bottom of the website.

7. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

To protect the contact form, we store the connection IP address with temporary request counters. This data is not added to visitor statistics. Expired counter records are automatically cleaned up during new requests.

We use Google reCAPTCHA v3 on the contact and newsletter signup forms to prevent automated abuse. Your browser connects to Google for this purpose. We send the verification token, but not your message or email address, to Google for validation.

8. Your rights

You have the right to:

Access your personal data
Have your data corrected
Have your data deleted
Object to processing

9. Contact

For questions about this privacy policy or your data, contact:

Grassifood
E-mail: info@grassifood.com

10. Newsletter

For newsletters we store your email address, optional name, consent text and the times of subscription, confirmation and unsubscription. You become a subscriber only after confirming by email. A customer account does not automatically subscribe you.

Every newsletter contains an unsubscribe link. After you unsubscribe, we send no further newsletters to your address. We retain your unsubscribe status to respect your choice. You can request deletion of your newsletter data via our contact address.

We record whether the mail server accepted a message, whether it failed or was skipped. We do not measure newsletter opens or link clicks. To prevent abuse, we temporarily store a hash of the connection address and a request counter; this record is cleared after a day during a subsequent signup.

11. Changes

We reserve the right to update this privacy policy. The latest version is always published on this page.

🛒 Quotation