Privacy Policy

Yum Yum Sushi, located at Tiensestraat 90, 3000 Leuven, Belgium, is the data controller for the personal data collected through this website.

Company number: BE 0749.589.571

Questions about your data? Email yumyumsushileuven@gmail.com or call 016 44 37 09.

When you place an order, we collect:

• your name
• your phone number
• your email address
• for delivery: your delivery address
• the contents of your order, the chosen time, and any notes

We don't use analytics or tracking cookies on this website. Your shopping cart is stored only locally in your own browser (via so-called "local storage"), not on our servers, and disappears as soon as you clear it or place your order.

At checkout you'll also see a separate checkbox about using your email address for news and promotions (checked by default, see point 3 below — you can uncheck it with one click), and a checkbox to agree to our terms and conditions and this privacy policy (the latter is required in order to place an order, just like your name, phone number and email address above).

We use your data to:

• process, prepare, and deliver or ready your order;
• contact you with questions about your order (e.g. if something is unclear, or if there's a problem with delivery);
• print a kitchen ticket so your order can be prepared.

The legal basis for this is the performance of the contract formed as soon as you place an order (Art. 6(1)(b) GDPR).

We also use your email address, as an existing customer, to occasionally send you news and promotions from Yum Yum Sushi itself (e.g. a new offer, or a message if we were to move location) — we send this sparingly, never spam. The legal basis for this is not your consent, but the so-called "soft opt-in" exception for existing customers (Art. 13(2) of the ePrivacy Directive, transposed into Art. XII.13 of the Belgian Code of Economic Law): permitted because your email address was collected in connection with a purchase, it concerns our own, similar products or services, and you're always given — below, as in every email we'd send — a free and easy way to unsubscribe. That's exactly why the checkbox at checkout is checked by default, but you can switch it off with one click. If you want to unsubscribe afterwards, just email yumyumsushileuven@gmail.com — we'll process that right away. We never sell your data to third parties.

Once online payment via Mollie becomes available, Mollie (as payment processor) will receive the data needed to process your payment — at present you still always pay on site, so no payment data is shared with Mollie.

Your order data is forwarded, within our own system, to the printer at the restaurant to print your kitchen ticket — this happens entirely within our own network, never through an external party.

We never share your data with third parties for commercial purposes.

We keep order data for 24 months after your order — so we can still help you with a question or complaint about an earlier order. After that, your name, phone number, email address and address are deleted or pseudonymised; only pseudonymised sales figures are kept for our internal administration.

(This retention period is an internal policy choice by Yum Yum Sushi — not a 24-month legal requirement. Legally required accounting records, where applicable, are kept for as long as the law requires.)

If you haven't unsubscribed from news and promotions (see point 3), we use your email address for that purpose until you unsubscribe, and at the latest until your underlying order data is deleted or pseudonymised after 24 months.

You have the right, at any time, to:

• view your data;
• have incorrect data corrected;
• have your data deleted;
• object to its processing;
• unsubscribe from news and promotions free of charge at any time — your email address will then no longer be used for that purpose.

Email yumyumsushileuven@gmail.com for this. We respond as soon as possible, and at the latest within 30 days.

If you're not satisfied with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse — including a secured, password-protected admin environment and limited access to order data.