Privacy Policy

HIME SUSHI is a trading name of Yohakuya. We are the controller of the personal data described in this policy.

For any question about your data, email us at yohakuya.nl.2026@gmail.com or use our contact form.

When you send an enquiry through our contact form, we collect:

• your name, email address and, if you give them, your phone number and company name
• the type of enquiry, your preferred date, number of guests and budget
• your message

When you place an order for bento or matcha desserts, we also collect:

• your delivery address, delivery date and time slot
• any allergy information and notes you share with us
• how you found us, if the link you used tells us (for example Instagram)

If you sign up for our newsletter, we keep your email address and the date and time you gave your consent.

We do not receive or store your card details. Payment is handled by Stripe.

We use your order details to prepare and deliver your order and to contact you about it. The legal basis is the performance of our contract with you.

We use your enquiry details to reply to you and to prepare a quote. The legal basis is our legitimate interest in answering the people who contact us.

Allergy information can be health data. We use it only to prepare your food safely, and only because you choose to share it with us. [TO CONFIRM: legal basis for allergy data, for example explicit consent]

We send our newsletter only if you ask for it. The legal basis is your consent, and you can unsubscribe at any time using the link in each email or by contacting us.

We keep order records to meet our tax and accounting obligations.

We share your data only with the service providers we need to run this website and our business:

• Stripe, to take payments. Your card details go directly to Stripe and are never stored on our website.
• Supabase, to store enquiries, orders and newsletter sign ups. [TO CONFIRM: data region]
• Resend, to send order confirmations and replies by email.
• Vercel, to host this website.

For orders delivered outside Amsterdam, we share your name, address and phone number with our courier. [TO CONFIRM: courier name]

Some of these providers may process data outside the European Economic Area, for example in the United States. Where this happens, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

We never sell your personal data.

• Order records: 7 years, as required by Dutch tax law. [TO CONFIRM]
• Enquiries that do not lead to an order: 2 years after our last contact. [TO CONFIRM]
• Newsletter sign ups: until you unsubscribe. [TO CONFIRM]

After that, we delete or anonymise the data.

Under the General Data Protection Regulation (GDPR), you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict how we use your data
• object to our use of your data
• receive your data in a portable format
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email us at yohakuya.nl.2026@gmail.com. We will reply within one month.

We do not use analytics or advertising cookies. We use only cookies that the site needs to work: one remembers the language you choose, and others keep our staff signed in to the admin area.

Payment takes place on a page hosted by Stripe, and Stripe's own privacy policy (opens in a new tab) applies there.

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (opens in a new tab), or to the authority in the country where you live.