Terms of Service

Last updated: February 18, 2026

1. Introduction

Bite Brands – Virtual Kitchen Concepts (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our website visitors, partners, and applicants. This Privacy Policy explains how we collect, use, store, and share your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable European data protection laws.

2. Data Controller

The data controller responsible for processing your personal data is:

Bite Brands – Virtual Kitchen Concepts

Keizersgracht 520, 1017 EK Amsterdam, Netherlands

Email: privacy@bitebrands.com

Phone: +31 20 123 4567

3. Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Name, business name, job title
Contact Data: Email address, phone number, postal address
Business Data: KvK/Chamber of Commerce number, VAT ID, kitchen location details
Identity Data: IP address, browser type, device information, cookies
Identity Data: Pages visited, time on site, navigation patterns
Identity Data: Partner application forms, e-signatures, onboarding documents

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

Consent (Art. 6(1)(a)): For marketing communications and non-essential cookies
Contractual Necessity (Art. 6(1)(b)): To process partner applications and manage partnerships
Legitimate Interest (Art. 6(1)(f)) For website analytics, fraud prevention, and improving our services
Legal Obligation (Art. 6(1)(c)): To comply with tax, accounting, and regulatory requirements

5. How We Use Your Data

We may collect and process the following categories of personal data:

Processing and evaluating partnership applications
Communicating about our services and franchise opportunities
Managing partner onboarding and ongoing relationships
Improving our website, services, and user experience
Sending marketing communications (with your consent)
Complying with legal and regulatory obligations

6. Data Sharing & Transfers

We may share your data with:

Delivery platform partners (Uber Eats, Deliveroo, Thuisbezorgd) as required for operations
Cloud hosting and IT service providers within the EU/EEA
Professional advisors (legal, accounting) under confidentiality obligations
Regulatory authorities when required by law

We do not sell your personal data. Any data transfers outside the EEA are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Partner application data is retained for 2 years after the last interaction. Active partnership data is retained for the duration of the partnership plus 7 years for legal compliance. Marketing consent records are retained until consent is withdrawn.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restriction: Limit the processing of your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@bitebrands.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption (TLS/SSL), access controls, regular security assessments, and staff training. In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.

10. Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority if you believe your data protection rights have been violated.

Autoriteit Persoonsgegevens

Bezuidenhoutseweg 30, 2594 AV Den Haag

Website: autoriteitpersoonsgegevens.nl

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.