Privacy Policy

Last updated: Jan. 9, 2026

1. Introduction

This Privacy Policy explains how Tony’s Foodtruck (“we”, “us”, “our”) processes personal data when you visit https://tonysfoodtruck.be or use our services. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (AVG/GDPR) and applicable Belgian privacy laws.

2. Controller

Tony’s Foodtruck
Groenendaallaan 18
8400 Ostend
Belgium

Phone: 0477 85 01 54
E-mail: catering@tonysfoodtruck.be

3. Personal data we process.

Name, e-mail address and password for user accounts
Billing and purchase information (order history, payment status)
Technical data (IP address, browser information)
Communication data submitted via forms

We do not process or store full payment card information. Payments are processed directly by Stripe.

4. Legal basis for processing.

Execution of an agreement
Legitimate interests (security, support, service improvement)
Legal obligations (accounting and taxes)
Consent where required

5. How we use personal data

Manage accounts and process orders
Provide customer service and service updates
Ensuring website functionality and security
Compliance with legislation and fraud prevention

6. Payments

All payments are processed securely by Stripe Payments Europe Ltd. For more information, see Stripe’s Privacy Policy: https://stripe.com/privacy.

7. Data Security

We use technical and organizational measures to protect personal data, including password encryption and secure communication protocols.

8. Data sharing

We may share data with trusted service providers (hosting, support and payment services) under AVG-compliant contracts. We do not sell personal data.

9. Data Transfer

If personal data is transferred outside the EEA, appropriate safeguards such as Standard Contractual Clauses apply.

10. Retention periods

Billing and account information: up to 10 years (legal requirement)
Contact form data: up to 24 months
Technical logs: shortest period required for security

After the retention periods expire, data are securely deleted or anonymized.

11. Your rights under the AVG

You have the right to access, rectify, erase, restrict and transfer your data. You can object to processing in certain cases. You can withdraw your consent at any time.

You can complain to the Data Protection Authority (GBA) in Belgium:
https://www.gegevensbeschermingsautoriteit.be

12. Children

This website is not intended for persons under the age of 16.

13. Changes

We may update this policy periodically. Changes will be posted on this page.

Contact

For questions about this privacy policy, please contact us: