← Return to Platform

Privacy Notice

We process logistics data under strict GDPR compliance. Data is used solely for the performance of meal-kit subscription contracts.

Legal Basis for Processing

In accordance with GDPR Article 6(1)(b), personal data (email, delivery address, dietary restrictions) is processed strictly because it is necessary for the performance of a contract. [cite_start]Without this data, we cannot fulfill the physical delivery of perishable goods[cite: 2].

Data Controller: Just Add Basil S.A.S. Region: EU (France)

Sensitive Data (Health)

We may process data regarding allergens (e.g., "Nut Free"). This is classified as Special Category Data and is processed strictly for client safety and health protection.

Encrypted at rest (AES-256).

Zero Data Resale

We are a logistics company, not an ad network. We never sell, rent, or trade your contact details to third parties for marketing purposes.

Data Retention

7 Years: Invoices/Subscription contracts (Tax Law).
30 Days: GPS driver logs and delivery photos.
Immediate: Upon account closure request (Right to Erasure).

Sub-processors

We use trusted infrastructure partners within the EU/EEA where possible:

AWS (eu-west-3) Paris, FR
Mailgun EU Email Transport
Stripe Payments Billing

© 2026 Just Add Basil S.A.S.

DPO Contact: dpo@justaddbasil.com