Privacy
Version 1.0 · August 2026 · applies to this website and the Popolo B2B ordering platform
Who we are
This website and the Popolo B2B ordering platform are operated by Popolo H20 B.V. (Den Haag, the Netherlands). Questions about your data: catering@popolo.co.
What we collect, and why
Waiting list: your company or organisation name, your name, work email, and optionally a phone number, company size and a message. We use this to run the waiting list and to contact you about activating your account — the steps you ask us to take before entering into an agreement.
News emails (optional): only if you tick the box. You can withdraw this any time via the unsubscribe link or by emailing us. Your place in line never depends on it.
Ordering accounts (once ordering opens): your name, work email and your orders for your organisation. We use this to take, prepare and hand over orders, and to bill your organisation — performance of the agreement with your organisation.
Billing: business and invoicing details live in our bookkeeping system (Moneybird), not on this platform. We never handle card or payment credentials here.
No tracking
This site uses functional storage only — for example, keeping you signed in. No advertising, no analytics cookies, no profiling, and we never sell or rent your data.
Where your data lives
The platform runs on EU-hosted infrastructure (Supabase, via Lovable Cloud). Bookkeeping and invoicing data is processed in Moneybird. Transactional email is delivered by our email provider. We share data with no one else, unless the law requires it.
How long we keep it
Waiting-list entries: removed after 12 months of inactivity, or immediately on request. Account data: for as long as your organisation's account is active. Invoicing records: kept for the retention period Dutch tax law requires (7 years), in our bookkeeping system.
Your rights
You can ask us to access, correct, delete or hand over your data, and you can object to or restrict our use of it — email catering@popolo.co and we'll sort it out. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).
Changes
If this policy changes in a way that matters, we'll say so on this page and — if you have an account — let you know.