Privacy Policy
Last updated: October 3, 2026
1. Who We Are
This Privacy Policy explains how we process your personal data in accordance with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).
This website is operated by The Turmeric, a trading name of MGAE SRL (CUI RO51867440, Trade Registry No. J2025037595002), registered office at Strada Dimitrie Cantemir Nr 5, Cluj-Napoca, Romania.
Our website address is: https://theturmeric.ro.
2. What Data We Collect
When you place an order or interact with our website, we may collect:
- Name
- Phone number
- Email address
- Delivery or pickup details
- Payment information (processed securely via third-party providers)
We only collect data necessary to process your order and improve your experience.
3. How We Use Your Data
Your data is used to:
- Process and deliver your order
- Contact you regarding your order
- Provide customer support
- Improve our website and services
We do not sell your personal data to third parties.
4. Payments
Card payments are processed securely by NETOPIA Payments (netopia-payments.com), our payment service provider. We do not store your full card details on our servers.
5. Cookies and Similar Technologies
We use three kinds of cookies and similar technologies (such as your browser's local storage):
- Essential: needed for the site to work. This covers your shopping cart, your cookie choice, your language choice (a cookie called NEXT_LOCALE), the details you typed into a form so a refresh doesn't lose them, and a secure session for our staff area. During a card payment we also set two short-lived secure cookies (netopia_payment_session, 30 minutes, and netopia_confirm_token, 15 minutes) that let us match your payment to your order. These don't need consent and are not used for tracking.
- Analytics (only with your consent): Google Analytics 4, provided by Google Ireland Limited, sets cookies (_ga and _ga_*) that tell us which pages are visited and how the ordering flow performs. Advertising features and Google signals are switched off, Google Analytics does not log or store visitors' IP addresses, and its cookies expire after 13 months.
- Embedded Google Map (contact page): loaded only if you accept cookies or choose to show the map. When it loads, Google may set its own cookies and receives your browser details.
Nothing from the analytics or map categories is loaded or set before you accept. You can change or withdraw your choice at any time with the "Cookie settings" link in the footer; withdrawing switches analytics off and removes its cookies. Your choice is saved in your browser's local storage so we don't ask on every visit. You can also block or delete cookies in your browser settings, but some features may not work correctly.
6. Third-Party Services
We work with the following third parties: NETOPIA Payments, for card payment processing (the NETOPIA logo in our footer is loaded from NETOPIA's servers); and Google: Google Analytics if you accept cookies, and Google Maps if you accept cookies or choose to show the map. Google may process data outside the European Union, under the safeguards it provides, such as the EU–US Data Privacy Framework and Standard Contractual Clauses.
These services process data under their own privacy policies.
7. Data Retention
We retain your data only as long as necessary:
- To complete your order
- For legal, tax, and accounting purposes
8. Your Rights (GDPR)
You have the right to:
- Request access to your personal data
- Request correction or deletion of your data
- Withdraw consent at any time
To exercise these rights, contact us using the details below.
9. Data Security
We take appropriate measures to protect your personal data, but no system is 100% secure.
10. Contact
If you have any questions about this Privacy Policy, please contact us: