Privacy policy
How Grill Bill handles your personal data: what we collect, why, who we work with and what rights you have.
Last updated: 20 October 2026
Who we are
Grill Bill is a trading name of Daalder Concepts B.V. (Chamber of Commerce 82385424, VAT NL862446624B01). We are responsible for what happens to your data in this shop. Questions about privacy? Email hi@grillbill.eu or call +31 85 0013919.
What we collect and why
To handle your order properly, we collect some data. Here's a short explanation of why we need it: name and address, email, IP address and payment details.
Name and address
Name, address and town. We need these so the PostNL or Bpost courier knows where to go.
You receive an order confirmation, shipping confirmation and invoice from us by email. We also ask you by email to review the product, and with your consent we deliver newsletters and offers to your digital letterbox. Rather not receive newsletters and offers? Unsubscribing is a breeze: you can do it at the bottom of the newsletter itself. Of course you can also tell customer service that you no longer want to receive anything.
IP address
Every time you visit, your browser sends along your IP address; that's simply how the internet works. We don't recognise you by your IP address: we do that through your account (when you sign in) or through the visitor number in a cookie. We use your IP address to secure the shop, to prevent abuse and fraud, and to roughly determine which country you are in. In our own statistics we don't store your IP address, or only in shortened form (we delete the last part). Only in our customer service inbox is it stored in full, for 90 days (see Customer service). When you place an order, we keep a shortened version and your browser details with your order. If you consented to Personal (personalised ads), we also keep the full IP address with your order so we can report the purchase to Meta (see below). We delete that full IP address 30 days after your order.
Payment details
You pay for your order in a secure payment environment. When you pay by iDEAL or bank transfer, your details go into the secure environment of Pay.nl. We only use your bank account number when you get money back from us. When you pay by credit card, we send your card details from our secure environment directly to Pay.nl. They process our credit card payments; we never see your card details. Pay.nl only tells us whether your payment succeeded. We have signed a data processing agreement with Pay.nl with strict rules about what they may keep; they may not use the data for any other purpose.
Exact Online
Grill Bill's accounts are kept in Exact Online. We have signed a data processing agreement with Exact Online with strict rules about what they keep. Exact Online may not use the data for any other purpose.
Who we share your data with
Commercial spam from who-knows-who makes nobody happy. Us neither. We never sell your data. We only share it with parties we need to make your order and our shop work, or when the law requires it:
- Pay.nl, for your payment.
- PostNL and Bpost, to deliver your parcel.
- Exact Online, for our accounting.
- Neuramerce, the platform this shop runs on. Neuramerce stores your data for us as a processor and runs our own measurement.
- Parties that host and secure our shop and send email for us, as processors and under our agreements.
- Google, for our statistics (Google Analytics 4). For personalised ads, we only share data with Meta and Google if you consent to it in the cookie notice. Below you can read exactly what happens then.
What else we do with your data
Customer service
We offer customer service by chat, phone and email. For this we use your name and address details, billing address, phone number, email address and, if applicable, profile photo. With the cookie nmrc_fp we remember your conversation, and during the conversation we can see which pages you are viewing, what is in your shopping cart, your IP address and the city and country that go with it. We can also see this visit data without you opening the chat, so we can help you quickly when you get in touch. We delete this visit data after 90 days. We keep the conversations themselves for up to 6 months after the last contact and/or after the end of our service to you.
Account
Your personal Grill Bill account holds your details. Because we remember them, you don't have to fill everything in again each time.
Newsletters
You can sign up for our newsletters. Rather not receive them any more? You can unsubscribe at any time, in the newsletter itself or via customer service.
Reviews
By writing a review you help other customers get a better picture of Grill Bill and its products.
Promotions
Taking part in a Grill Bill giveaway? Then we need your details so we can contact you if you win.
Cookies and measurement: you choose
The cookie notice shows two categories. Standard is always on: these are the cookies for your shopping cart, checkout, signing in and your cookie choice, and our statistics (our own measurement, session recordings and heatmaps, A/B tests, Core Web Vitals and Google Analytics 4). We don't ask for consent for statistics; our legal basis is legitimate interest, namely improving the shop. This has little impact on your privacy and no data goes to advertising partners. Object to statistics? Please contact us. Personal (personalised ads via Meta and Google) is off by default and only turns on with your consent. Accept all turns Personal on; with Customise we save what you tick. You can turn personalised ads off or withdraw your consent later via Change cookie settings: use the button below, or click Cookies at the bottom of any page, and turn Personal off. Which cookies we use exactly is listed on our cookie page.
While Personal is off
If you leave Personal off, everything under Standard simply works. In addition, we do not load the Meta pixel and we send nothing to Meta, not even from our server. Google Analytics runs with Google Consent Mode: storage for statistics is on, but storage for advertising, advertising data and personalised ads is off. Google Analytics does not store IP addresses. For Google Analytics your browser does connect to Google.
Statistics: our own measurement
By default, without consent, we place the cookie nmrc_fp with a random visitor number, valid for 2 years. We shorten your IP address. With it we measure which pages you visit, how you found us (ad, search engine or link), which products you view and what you put in your cart, check out and buy. This shows us which channels work. For some visits we also record how you move through the shop (clicks, scrolling, page changes), to find errors and unclear spots. We do not record what you type into forms. We keep these recordings for 90 days at most. With this measurement we can also compare two versions of a page (A/B tests) and measure how fast pages load (Core Web Vitals). We do this to improve the shop.
Customer recognition
Do you order, sign in, subscribe to the newsletter or enter your email address? Then we link your visitor number to your customer profile. We do that with an encrypted form of your email address (a SHA-256 hash), not with your email address itself. This shows us that your phone and your laptop belong to the same customer, and earlier visits on those devices (up to a year back) count in our statistics. We do this by default, without consent, based on our legitimate interest in improving the shop. We don't use fingerprinting: we only recognise your device by the visitor number in the cookie. We delete the link 2 years (730 days) after we last saw the device, or sooner if you ask us to delete your data.
Personal: Meta
Only with your consent to Personal do we load the Meta pixel (Facebook and Instagram) and also send data to Meta from our own server (the Conversions API). This covers which pages and products you view, what you search for, what you add to your wishlist or cart, whether you start checkout and your purchases (order number, amount and products). We include your IP address and browser details, Meta's cookie and click IDs (_fbp and _fbc) and an encrypted visitor number. If you order or enter your email address, we also send your email address, phone number, name, city, postcode and country, encrypted with SHA-256. Meta uses this to measure which ads work and to show ads to people they are relevant to. Without consent to Personal, we send nothing to Meta, not even a purchase from our server.
Statistics and Personal: Google
By default, without consent, we use Google Analytics 4 to measure which pages and products you view, what you put in your cart and whether you check out. This runs with Google Consent Mode: storage for statistics is on, storage for advertising, advertising data and personalised ads is off. Only if you consent to Personal do we allow Google to use that data for advertising too (Google Ads and other advertising signals).
Proof of your choice
When you order something, we keep a record with your order of which cookie choice you had and when, as proof of your consent.
Meta and Google are also responsible themselves
Meta and Google also use the data they receive from us for their own purposes. For collecting and forwarding data to Meta (only with consent to Personal), we are jointly responsible together with Meta (joint controllership). What Meta and Google then do with your data themselves, you can read in their own privacy policies:
Meta and Google may process data in the United States. Both are certified under the EU-US Data Privacy Framework.
How long we keep data
- Order and invoice data: 7 years, because of the legal retention obligation.
- Full IP address with your order: 30 days.
- Visit details in our customer service inbox: 90 days.
- Session recordings: up to 90 days.
- Link between your devices and your customer profile: 2 years after the last visit.
- Anonymous visit count without a cookie: just over a year (395 days).
Your personal data belongs to you
Want to see, change or delete your data? You can. Do it through your personal account or by contacting customer service at hi@grillbill.eu. You can also object to the use of your data, ask us to transfer your data and withdraw your consent at any time (for cookies via Change cookie settings). We respond within one month. If you think we are not protecting your data properly and you can't resolve it with our customer service, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Questions, comments or remarks? Feel free to get in touch, we're happy to help.
