Privacy Policy
Privacy Policy
Effective date: [DD Month YYYY]
Company: [Your Company Name B.V.] — Data Controller
Website: [yourstore.com]
Contact: [privacy@yourstore.com]
1. Data We Collect
-
Identity & contact: name, email, address, phone.
-
Orders & payments: purchased items, amounts, transaction IDs (we do not store full card details).
-
Accounts & support: login (hashed), preferences, communication.
-
Usage & device data: IP, browser, pages visited (via cookies/analytics).
-
Marketing preferences: opt-in/opt-out.
2. Why We Use Your Data
-
Order processing & delivery (contract).
-
Account creation & support (contract / legitimate interest).
-
Payments & fraud prevention (legitimate interest / legal obligation).
-
Marketing & updates (consent; unsubscribe anytime).
-
Analytics & personalization (consent where required).
-
Legal compliance (legal obligation).
3. Cookies
-
Essential: cart, checkout, security.
-
Analytics & marketing: only with your consent.
Manage cookies via our banner and your browser settings.
4. Sharing of Data
We only share with trusted processors working for us, such as:
-
Payment providers (e.g. Stripe, PayPal).
-
Logistics partners (e.g. DHL, PostNL, DPD).
-
Platform & hosting (e.g. Shopify).
-
Email/SMS & analytics providers.
We never sell personal data.
5. International Transfers
If data is transferred outside the EEA/UK, we apply appropriate safeguards (e.g. SCCs, IDTA, additional measures).
6. Retention
-
Orders & accounting: 7–10 years.
-
Accounts: as long as active, then deleted within [X months].
-
Support: kept for [X years].
-
Marketing: until you unsubscribe.
-
Cookies: per banner/your settings.
7. Your Rights
You can:
-
Access, correct, or delete your data.
-
Restrict or object to processing.
-
Request data portability.
-
Withdraw consent at any time.
Contact: [privacy@yourstore.com].
You may also file a complaint with your data protection authority (e.g. NL: Autoriteit Persoonsgegevens).
8. Security
We use TLS encryption, access controls, and monitoring to protect your data. While no system is 100% secure, we take all reasonable measures to safeguard it.
9. Payments
Payments are processed securely by [Provider] (PCI-DSS certified). We do not store your full payment details.
10. Changes
We may update this Privacy Policy from time to time. Updates will be posted here with a new effective date at the top.
Contact: [Your Company Name B.V.], [Address], [Country]
Email: [privacy@yourstore.com]