Privacy & Cookie Policy

Sal y Chocolate B.V. ("Apapacho", "we", "us"), based at Zwartewaalstraat 111, 3081HX Rotterdam, the Netherlands (KVK: 90074858, BTW: NL004785492B03), is the controller responsible for the personal data processed through this website. This page explains what data we collect, why, who we share it with, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Dutch Telecommunicatiewet (cookie rules).

1. What data we collect and why

Data	Purpose	Legal basis
Name, email, delivery address, order details	Processing your order, shipping, invoicing, customer support	Performance of a contract (Art. 6(1)(b) GDPR)
Email address (newsletter / guide download)	Sending marketing emails, recipes and updates you signed up for	Consent (Art. 6(1)(a) GDPR) - you can withdraw at any time
Name, email, message (contact or B2B form)	Answering your enquiry	Legitimate interest / pre-contractual steps (Art. 6(1)(b)/(f) GDPR)
Cart contents, basic usage data	Letting you shop and check out	Performance of a contract / legitimate interest

2. Cookies and similar technologies

We only use the storage listed below. We do not run any advertising or analytics trackers at this time. If that ever changes, we will update this table and ask for your consent first, in line with Art. 5(3) of the ePrivacy Directive as implemented in the Dutch Telecommunicatiewet (Art. 11.7a).

Name	Type	Purpose	Duration	Consent required?
apapacho-cookie-consent	localStorage	Remembers your cookie choice	Until you clear your browser storage	No - strictly necessary
sal-y-chocolate-cart-id	localStorage	Keeps your shopping cart between visits	Until checkout or manual clearing	No - strictly necessary
apapacho_guide_shown	sessionStorage	Prevents the guide pop-up from showing more than once per visit	Current browser session only	No - functional, no personal data stored

When you proceed to checkout, you leave our website and are taken to Shopify's own checkout pages. Shopify sets its own essential cookies there (for example for session and fraud-prevention purposes), governed by Shopify's privacy policy.

3. Who we share your data with

• Shopify International Limited - our e-commerce platform. Shopify processes orders, payments, and customer accounts on our behalf as a data processor.
• Resend - our transactional email provider, used to send order confirmations, contact form replies, and the cacao guide you request.
• Vercel Inc. - our website hosting provider.

We have data processing agreements in place with our processors where required. We do not sell your personal data to third parties.

4. International data transfers

Some of our processors (such as Shopify and Vercel) may process data outside the European Economic Area. Where this happens, we rely on the EU Standard Contractual Clauses or an equivalent adequacy mechanism to keep your data protected.

5. How long we keep your data

We keep order and invoice data for as long as required by Dutch tax law (currently 7 years). Contact form messages are kept only as long as needed to handle your enquiry. Newsletter/guide subscriptions are kept until you unsubscribe.

6. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Request erasure of your data (Art. 17)
• Restrict how we use your data (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interest, including marketing (Art. 21)
• Withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, email us at valentina@salychocolate.nl. We will respond within 30 days.

7. Complaints

If you believe we have not handled your personal data properly, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens .

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

9. Contact

Sal y Chocolate B.V.
Zwartewaalstraat 111, 3081HX Rotterdam, the Netherlands
KVK: 90074858 · BTW: NL004785492B03
Email: valentina@salychocolate.nl