Privacy policy

This privacy policy describes how Nagra ApS (CVR 31251796), operating the website indiancatering.dk under the name The Indian Catering Company, processes personal data. Data controller: Nagra ApS, Herlev Bygade 34, 2730 Herlev, Denmark. Contact: admin@indiancatering.com.

What data do we collect?

When you send a request through our form, we collect: name, email address, phone number, event date and time, guest count, delivery address (for deliveries), your menu selections and any messages you write to us. We do not collect more than we need to answer your request and deliver our service.

Purpose and legal basis

The data is used solely to process your request, prepare and send quotes, fulfil the agreement, and meet bookkeeping obligations. The legal basis is GDPR Article 6(1)(b) (performance of a contract/request) and 6(1)(c) (legal obligations).

Retention and deletion

Requests marked as spam or cancelled are automatically deleted after 12 months. Other requests are automatically deleted after 24 months. Bookkeeping records are kept for 5 years under the Danish Bookkeeping Act.

Data processors

We use the following processors with EU data processing: Vercel (website hosting), Railway (backend and database hosting, EU region), Cloudflare R2 (image storage, EU) and Cloudflare Turnstile (spam protection), plus Resend (transactional email delivery).

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Write to admin@indiancatering.com to exercise your rights. You may complain to the Danish Data Protection Agency (datatilsynet.dk).