1. Who we are
Una Maas is a dinner and community platform in Brussels, Belgium. The data controller for your personal data is [Legal entity name], trading as Una Maas, with its registered office at [registered address], Belgium, company number [KBO/BCE number], VAT [BE VAT number].
For privacy questions or requests, contact hello@unamaas.co.
2. What we collect
Account and profile
Your first and last name, email address, phone number, city and country. Your password is handled by Supabase Auth; we do not see or store it in clear text.
Questionnaire and community activity
Your answers to the Una Maas questionnaire, preferences, community memberships, event registrations, waitlist status and the reviews or feedback you choose to share.
Bookings and payments
The event you booked, booking status, amount, currency, payment status and Stripe payment identifiers. Card details are entered on Stripe’s hosted Checkout page and are never stored on our servers. We may receive limited payment metadata from Stripe, such as the payment method type, country and whether a payment succeeded, failed or was refunded.
Content you upload
Profile, community and event photos you upload, and messages you send to us or to other members through the service.
Technical data
IP address, browser and device information, authentication events, error logs and security logs needed to operate and protect the service.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Create and manage your account, community memberships and bookings | Performance of our contract with you |
| Process payments, refunds and receipts through Stripe | Performance of our contract and our legal obligations |
| Match guests into tables and prepare the evening | Performance of our contract |
| Send service messages about your account, bookings, payments, changes and cancellations | Performance of our contract and legitimate interests |
| Prevent fraud, abuse, spam and security incidents; investigate complaints | Our legitimate interests in keeping the service safe |
| Keep accounting, tax and transaction records | Our legal obligations |
| Send optional marketing or community news | Your consent, where required; you can withdraw it at any time |
We do not sell your personal data. We do not use your questionnaire answers to serve advertising.
4. Who can see your data
Your name, profile photo and public community activity may be visible to other members of communities you join. Your exact address is not shown to other guests until the venue is confirmed and the address-reveal window opens.
We share data with service providers who process it on our behalf, under their data-processing terms:
- Supabase — authentication, database, file storage and infrastructure. Privacy information.
- Stripe — payment processing, receipts, refunds and fraud prevention. Privacy information.
- Resend — transactional email delivery, when enabled. Privacy information.
- Hostinger — hosting infrastructure for the Una Maas website.
- Professional advisers, auditors and public authorities where required by law, or where necessary to establish, exercise or defend legal claims.
Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision or standard contractual clauses and additional safeguards.
5. How long we keep it
We keep account and profile data while your account is active. If you delete your account or ask us to erase your data, we delete or anonymise it within a reasonable period, except where we must keep records for tax, accounting, fraud prevention or legal claims.
Booking and payment records may be kept for up to seven years where required by Belgian accounting and tax rules. Support messages are kept only as long as needed to resolve the request. Security logs are kept for a limited period and then deleted or anonymised.
6. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a portable copy of the data you provided. Where processing is based on consent, you can withdraw it at any time without affecting processing that already took place.
To exercise a right, email hello@unamaas.co. We may ask you to verify your identity before acting on a request. You also have the right to lodge a complaint with the Belgian Data Protection Authority: autoriteprotectiondonnees.be, Rue de la Presse 35, 1000 Brussels, Belgium.
7. Cookies and local storage
Una Maas uses essential browser storage to keep you signed in, remember an invitation link and protect your session. We do not currently use advertising cookies or third-party analytics tracking. If we introduce analytics or marketing cookies, we will ask for consent where required and update this policy.
8. Security
We use HTTPS, access controls and reputable processors to protect your data. Payment card data is handled by Stripe. No internet service can be completely secure; please use a unique password and tell us promptly if you suspect unauthorised access to your account.
9. Age
Una Maas is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a minor has created an account, contact us and we will remove it.
10. Changes
We may update this policy as the service evolves. The date at the top shows the latest version. If a change materially affects how we use your data, we will give you reasonable notice.