1. Who is responsible for your data
BENNYENTP, E.I.R.L. (RNC 1-33-57915-4) is the data controller: it decides what personal information is collected on this site and why. GroList, a service of BMB Global Trading, LLC provides and operates the platform on Go Romana's behalf, as its data processor, and handles that information only on Go Romana's instructions.
For any privacy question, write to concierge@goromana.com.
2. What we collect
- •Contact details — first and last name, email address, and phone number (including whether it is reachable on WhatsApp).
- •Stay details — the villa and unit you are staying in, check-in and check-out dates, arrival time, and the number of adults, teens, children and young children in your party. Party composition is used only to size portions; we do not collect names or any other information about children.
- •Your order — the products and meals you select, quantities, substitutions, your chosen payment method for the shopper, notes you write, price estimates and the final billed totals.
- •Payment information — card payments are handled entirely by our payment processor. We receive a confirmation and a transaction reference; we never see or store your full card number.
- •Delivery records — the store receipt photographed by your shopper, which we use to calculate what you actually owe.
- •Technical data — IP address, browser and device type, and server logs generated when you use the site, kept for security and troubleshooting.
- •Local storage on your device — your language choice and your in-progress list, so the site remembers where you were.
3. Why we use it
We do not sell your personal information, and we do not use it for third-party advertising.
- •To build your list, price it, take payment for the pre-stocking fee, and confirm your order.
- •To assign a shopper, get your groceries bought and delivered to the right villa at the right time, and calculate the final amount from the receipt.
- •To contact you about your order by email, phone, SMS or WhatsApp.
- •To provide support, resolve disputes about an order, and keep accounting records.
- •To keep the service secure and prevent fraud and abuse.
- •To improve the service — for example understanding which products are commonly ordered so we can keep the catalogue accurate.
4. Who we share it with
- •Your shopper — the independent personal shopper assigned to your order sees your name, phone, villa and unit, arrival time, and your list, so they can shop, deliver and invoice you for the groceries.
- •Go Romana staff — the team administering orders for your property.
- •Stripe — card processing for the pre-stocking fee, which is collected by BMB Global Trading, LLC.
- •Google Firebase (Firestore, Authentication, Cloud Storage) — where order data and receipt images are stored.
- •Vercel — hosting and delivery of the website.
- •Resend — sending your confirmation and status emails.
- •Anthropic — AI used to generate meal ingredient lists and to read the totals from store receipts. Data sent for these purposes is not used to train AI models.
- •The supermarket — your shopper buys your items as an ordinary retail customer; the store does not receive your personal details from us.
- •Authorities or advisers — where we are legally required to disclose, or need to establish or defend a legal claim.
5. Legal basis
We process your information because it is necessary to perform the service you asked for, because we have a legitimate interest in operating and securing that service, and because we have legal and accounting obligations. Where we rely on your consent — for example optional marketing — you can withdraw it at any time.
6. How long we keep it
Order records, including receipts and billing totals, are kept for as long as needed to run the service and to meet Dominican tax and accounting requirements. Technical logs are kept for a short period for security purposes. You can ask us to delete information we are not required to keep.
7. Cookies and local storage
We do not use advertising cookies, tracking pixels, or third-party analytics on this site. The site stores a small amount of data in your browser to work properly — your language preference, your in-progress list, and, for staff and shoppers, a sign-in session. Clearing your browser storage removes these and will discard an unsubmitted list.
8. Where your data is stored
Our providers (Google, Vercel, Stripe, Resend, Anthropic) operate infrastructure outside the Dominican Republic, principally in the United States and Europe. By using the service you understand that your information is transferred to and processed in those countries under those providers' contractual data-protection commitments.
9. Security
Data is transmitted over encrypted connections and stored with access controls that limit each host company's staff and shoppers to their own organization's data. Staff and shopper sign-in uses one-time email links rather than reusable passwords. No system is perfectly secure; if a breach affects your information, we will notify you and the relevant authority as required by law.
10. Your rights
Under Dominican Law 172-13 on the protection of personal data — and, where they apply to you, equivalent European rules — you can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or object to particular uses. Write to concierge@goromana.com and we will respond within a reasonable time. We may need to verify who you are before acting.
11. Children
This service is for adults. We do not knowingly collect personal information from anyone under 18. Counts of children in your party are numbers only and are used solely to calculate quantities.
12. Changes to this policy
We will update this page when our practices change, and the "last updated" date above will change with it. Material changes affecting existing orders will also be communicated by email.
13. Contact
Privacy questions, requests, or complaints: concierge@goromana.com.
Controller: BENNYENTP, E.I.R.L. (RNC 1-33-57915-4), Dominican Republic.
Processor: GroList, a service of BMB Global Trading, LLC — hello@grolist.do.