Privacy Policy
Last updated: [TO FILL: date]
Ikoi SARL ("we", "us") respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Luxembourg data-protection law.
1. Data controller
Ikoi SARL, 44 Avenue J.F. Kennedy, L-1855 Luxembourg. Contact for any privacy question: ikoi.luxembourg@gmail.com.
2. What we collect, why, and on what legal basis
When you email us (ikoi.luxembourg@gmail.com): your name, email address and the content of your message. Purpose: to respond to your enquiry. Legal basis: our legitimate interest in answering you, or steps taken at your request prior to a possible contract.
When you place a Click & Collect order: the order is processed through our partner OrderBilly. We receive the information needed to prepare your order (such as name, order details and pick-up time). Legal basis: performance of a contract.
Cookies / site usage: see our Cookie Policy. Non-essential cookies are only set with your consent.
We do not use website analytics, advertising pixels or marketing trackers on this site.
3. Ordering and delivery partners
Click & Collect (OrderBilly): when you order, your data is handled through OrderBilly's platform under their own privacy policy.
Delivery (Wolt): orders placed via Wolt are handled by Wolt as a separate controller under its own privacy policy. We only receive what we need to prepare and hand over your order.
4. Who else may process your data
Squarespace — our website host (technical hosting and security).
These providers act as processors on our behalf or, where they determine their own purposes (Wolt, OrderBilly), as independent controllers. Some providers may process data outside the EU; where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
5. How long we keep it
Email correspondence: kept only as long as needed to handle your request, then deleted.
Order and invoicing records: retained for as long as required by Luxembourg accounting and tax law.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. To exercise any of these, email ikoi.luxembourg@gmail.com.
You also have the right to lodge a complaint with the Luxembourg supervisory authority: Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux — https://cnpd.public.lu.
7. Changes
We may update this policy. The current version is always available on this page.