Who's responsible
Totally Texas is run by TEX'S TORTILLAS, INC. NUF in Oslo. We are the data controller for the personal data you give us on this website.
Short and honest
Privacy
We're a small tortilla business, not a data company. We collect as little as we can, use it only for your order, and never sell it.
Last updated 11 November 2026
What we collect
When you pre-order, we ask for:
- your name, phone number and email address
- what you want, pickup day and time, and how you want to pay
- a note, if you write one (for example about allergies – only write what we need to know)
If you pay online, you enter your card details at Stripe. We never see them.
The feedback form is anonymous. It doesn't ask for your name or contact details.
The website uses no cookies, no tracking and no analytics.
What we use it for
We use your details to bake, take and hand over your order, to contact you if something changes, and for our accounts.
The legal basis is our agreement with you when you order (GDPR Art. 6(1)(b)), and our legal duty to keep accounts (Art. 6(1)(c) and the Norwegian Bookkeeping Act).
Who gets your data
We never sell your data. These services help us run the website and take orders:
- Stripe – takes online payments and emails you the receipt. Stripe receives your order (name, phone, email, what you ordered and any note).
- Microsoft Azure – runs the website and passes your order on to Stripe. The part that receives your order runs in Azure's data centre in the USA.
- Google – Gmail receives orders sent by email and the answers from the feedback form. The website fonts load from Google Fonts, so Google sees your IP address when the page loads.
If you choose "At pickup", your email app opens with the order, and the email goes to our Gmail.
Some of these services process data outside the EEA, including in the USA. This happens under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
We keep your order as long as we need it to hand it over and follow up. Payments and accounting records are kept for five years, because the Norwegian Bookkeeping Act requires it. Otherwise we delete your details when we no longer need them.
Your rights
You can ask to see the data we hold about you, and ask us to correct or delete it. You can also ask us to restrict or stop using it, or to give you a copy. Anything we must keep for our accounts can't be deleted before that period ends.