Privacy Policy
Panjab Supermarket (“we,” “our,” “us”) is committed to protecting your personal data.
This privacy policy explains what information we collect when you use our website at panjabsupermarket.com or visit our physical store at Muntplein 10, 3437 AN Nieuwegein, Netherlands.
It also explains how we use that information, who we share it with, and what rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).
If you have any questions about this policy, you can reach our team directly through our contact page at any time.
Last updated: April 2026
Who We Are
Panjab Supermarket is the data controller responsible for your personal data. Our details:
- Business name: Panjab Supermarket
- Address: Muntplein 10, 3437 AN Nieuwegein, Netherlands
- Phone: +31 6 20009192
- Email: info@panjabsupermarket.com
What Personal Data We Collect
We collect personal data in several ways, depending on how you interact with us.
When You Place an Order
When you purchase products through our online shop, we collect your full name, delivery address, email address, phone number, payment details (processed securely by our payment provider; we do not store your full card number or banking details), and your order history.
We need this data to process your order, arrange delivery, send order confirmations, and handle any issues.
For details on how we deliver, see our same-day delivery information for the Utrecht region.
When You Create an Account
If you create an account on our website, we store your name, email address, delivery address, and order history.
This allows you to check out faster, track orders, and reorder products you have bought before.
You can delete your account at any time by contacting us.
When You Visit Our Website
When you browse our website, we may collect your IP address, browser type, pages visited, time spent on each page, referring website, and device type.
This data is collected through cookies and similar technologies.
See the “Cookies” section below for details.
When You Contact Us
If you contact us by phone, email, or through our website, we collect your name, contact details, and the content of your message.
We use this to respond to your inquiry and, where relevant, to improve our service.
If you submit a formal complaint through our complaints page, we retain a record to ensure proper follow-up.
When You Visit Our Physical Store
If you make a purchase by card in our store at Muntplein 10, Nieuwegein, the transaction is processed by our payment terminal provider.
We do not store card details from in-store purchases.
Our store may operate security cameras for safety purposes; signage at the entrance will inform you.
Camera footage is retained for a maximum of 4 weeks and is only reviewed in the event of a security incident.
Why We Process Your Data and Our Legal Basis
Under the GDPR, we must have a valid legal basis for processing your personal data.
The table below explains what data we process, why, and on what legal basis.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and delivering your order | Name, address, email, phone, payment details, order contents | Performance of a contract (GDPR Art. 6(1)(b)) |
| Sending order confirmations and delivery updates | Name, email, phone | Performance of a contract |
| Handling complaints, refunds, and customer service | Name, contact details, order history, correspondence | Performance of a contract / Legitimate interest |
| Maintaining your account (if created) | Name, email, address, order history | Consent (you chose to create an account) |
| Improving our website and understanding visitor behavior | IP address, browsing data, device info | Legitimate interest / Consent (cookies) |
| Sending marketing emails or newsletters (if opted in) | Name, email | Consent (you can unsubscribe at any time) |
| Complying with tax and accounting obligations | Transaction records, invoices | Legal obligation (GDPR Art. 6(1)(c)) |
| Store security (CCTV) | Camera footage | Legitimate interest (security of premises) |
Refunds and Your Data
Panjab Supermarket does not offer exchanges or returns on products.
If you are eligible for a refund, for example, due to a damaged or incorrect delivery, refunds are processed within 5 working days to your original payment method.
We retain the relevant order and refund records as required by Dutch tax law.
For full details, see our general conditions and terms of service.
To report an issue with your order, visit our complaints and refund request page.
Who We Share Your Data With
We do not sell your personal data to anyone.
We share your data only with the following categories of third parties, and only to the extent necessary:
- Payment processor: Mollie processes your payment securely. They maintain their own privacy policy and are PCI-DSS compliant.
- Delivery: Orders are delivered by our own team directly from our store in Nieuwegein. Your name, address, and phone number are used only to complete your delivery.
- Hosting provider: Our website is hosted on EU-based servers, ensuring your data remains within the European Economic Area.
- Analytics: Google Analytics (with IP anonymization enabled) helps us understand how visitors use our website. Data is anonymized and not linked to individual identities.
- Email service: WooCommerce transactional emails send your order confirmations and delivery updates.
All third parties are contractually required to protect your data in accordance with the GDPR. We have data processing agreements (verwerkersovereenkomsten) in place with each processor.
Cookies
Our website uses cookies, small text files stored on your device when you visit.
Essential Cookies
These are necessary for the website to function.
They enable your shopping cart, checkout process, and account login.
You cannot opt out of essential cookies without losing website functionality.
Analytics Cookies
These help us understand how visitors use our website, which pages are popular, where visitors come from, and how long they spend browsing.
We use Google Analytics with IP anonymization enabled, meaning your full IP address is never stored.
Marketing Cookies
We do not currently use marketing or advertising cookies.
If this changes, we will update this policy and request your consent before placing any such cookies.
Managing Cookies
When you first visit our website, a cookie banner asks for your consent to non-essential cookies.
You can change your cookie preferences at any time through the cookie settings banner.
You can also manage or block cookies through your browser settings.
Note that blocking essential cookies may prevent parts of our website from functioning correctly.
How Long Do We Keep Your Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Order and transaction records | 7 years after the transaction | Dutch tax law (fiscale bewaarplicht) requires businesses to retain financial records for 7 years |
| Customer account data | Until you delete your account, or 2 years after your last activity | To provide account services |
| Customer service correspondence | 2 years after the inquiry is resolved | To handle follow-up queries and improve service |
| Refund records | 7 years | Dutch tax law |
| Website analytics data | 14 months | To understand website usage trends |
| CCTV footage | 4 weeks maximum | Security purposes only |
After the retention period expires, we delete or anonymize your data.
Your Rights Under the GDPR/AVG
Under the GDPR and the Dutch AVG, you have the following rights regarding your personal data:
- Right of access: You can request a copy of all personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure (right to be forgotten) You can ask us to delete your personal data, unless we are legally required to retain it (for example, tax records).
- Right to restrict processing. You can ask us to temporarily stop processing your data while a dispute is resolved.
- Right to data portability: You can request your data in a structured, commonly used format to transfer to another service.
- Right to object You can object to data processing based on legitimate interest, including direct marketing.
- Right to withdraw consent. Where processing is based on your consent (marketing emails, non-essential cookies), you can withdraw consent at any time.
To exercise any of these rights, send us your data request through our contact page or call us at +31 6 20009192.
We will respond within 30 days as required by the GDPR.
If you believe we have not handled your data correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
How We Protect Your Data
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse:
- Our website uses SSL/TLS encryption (HTTPS) for all data transmission
- Payment details are processed by PCI-compliant payment providers. We never see or store your full card number
- Access to customer data is restricted to staff who need it for order processing and customer service
- We keep our WordPress, WooCommerce, and plugin software up to date
In the event of a data breach that may affect your rights, we will notify the Dutch Data Protection Authority within 72 hours and inform you as required by the GDPR.
Links to Other Websites
Our website may contain links to external websites, including our social media profiles and Thuisbezorgd.nl, where our prepared food brand Chaska Express is available.
We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies before providing personal data.
For questions about our own products, visit our frequently asked questions about ordering and delivery, or contact us directly.
Children’s Privacy
Our website and services are not directed at children under 16 years of age.
We do not knowingly collect personal data from children under 16.
If you believe we have collected data from a child, please contact us, and we will delete it promptly.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
When we make significant changes, we will update the “Last updated” date at the top of this page.
The current version is always available at panjabsupermarket.com/privacy-policy.
Contact Us About Your Privacy
If you have questions about this policy, want to exercise your data rights, or have a concern about how we handle your personal data:
- Phone: +31 6 20009192
- Email: info@panjabsupermarket.com
- Address: Muntplein 10, 3437 AN Nieuwegein, Netherlands
- Online: contact us about your privacy or data request
You can also visit us in person.
We are open Monday to Saturday 09:00–20:00 and Sunday 12:00–19:00.
For information on how we handle your order data, see our delivery and shipping policy for Utrecht region orders.