Legal
Privacy policy
Which personal data we use to deliver your groceries, why, and how you stay in control.
Who is responsible for your data
The controller of your personal data is ZY Agency - smartmarket.lu, 5 Rue Hildegard Von Bingen, L-1282 Luxembourg, Luxembourg (RCS B272241, VAT LU34447040). For any question about your data, write to hello@smartmarket.lu.
What we collect
Only what we need to deliver your groceries: your name, e-mail address and phone number (and your WhatsApp number if you give it); your delivery address and the notes you leave for the courier (floor, door code); the content of your orders, your choices about replacements and the delivery windows you pick; your invoices; for companies, the company name and VAT number.
We do not receive or store your card number: payment is handled by our payment providers, who tell us only whether the payment succeeded.
When you browse, the site stores technical data needed to work: your cart, your delivery address and your language. When you type your address, what you type is sent to the public address register of the Luxembourg land registry (geoportail.lu) so that it can suggest existing addresses; nothing else is sent with it.
Why we use it
To prepare, deliver and invoice your orders and to answer your questions — this is necessary to perform the contract you conclude with us. To keep the accounting and tax records the law requires — a legal obligation. To prevent fraud and improve the service — our legitimate interest. To send you offers by e-mail — only with your consent, which you can withdraw at any time through the link in each e-mail.
Who receives it
Our personal shoppers and couriers see what they need to prepare and deliver your order. We also rely on providers who process data on our behalf and under contract: the hosting company of the website, our payment providers, the tool we use to dispatch couriers, our e-mail service and, when you write to us there, WhatsApp. We never sell your data.
Some of these providers are located outside the European Union. In that case the transfer is covered by the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
Your account data is kept as long as your account exists; you can delete the account yourself from “My account”. Orders and invoices are kept for ten years, as Luxembourg accounting law requires. Messages you send us are kept for the time needed to handle your request and for a reasonable period afterwards.
Cookies
The site uses the cookies and local storage strictly necessary for it to work: your session and cart, your delivery address, your language and your login. They do not require consent. To understand how customers find us, the shop also remembers — for the length of your visit only — the site or link you came from, the first page you opened and what you searched for in the shop; if you order, this is saved with the order. It is not shared with anyone and not used for advertising. Any marketing cookies are used only if you have agreed to them.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and to withdraw your consent at any time. To exercise these rights, write to hello@smartmarket.lu. We answer within one month.
You may also lodge a complaint with the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, www.cnpd.lu.
Security
The site is served over an encrypted connection, access to customer data is limited to the people who need it, and payments are processed by certified payment providers.
Changes to this policy
We may update this policy when the service or the law changes. The current version is always available on this page.
Questions about this page: hello@smartmarket.lu