Privacy Policy

This policy explains what personal data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR). The data controller is the business identified in the site footer (trade name, KvK and BTW number).

What we collect

• Order data: name, email, shipping and billing address, items ordered.
• Payment data: processed by Stripe; we do not store full card details.
• Custom-order data: the brief you write and any reference images you upload.
• Usage data: privacy-friendly, cookie-less analytics (aggregate page views).

Why we use it (legal basis)

• To process and deliver your order and provide support (performance of a contract).
• To meet legal and tax obligations (legal obligation).
• To improve the shop via aggregate analytics (legitimate interest).

Who we share it with (processors)

We share data only as needed with the providers that run the shop: Stripe (payments), Resend (transactional email), Printify (print-on-demand fulfilment), Cloudflare R2 (image storage), and a privacy-friendly analytics provider. Each processes data on our behalf under a data-processing agreement.

Retention

Order and invoice records are kept as long as required by Dutch tax law (currently 7 years). Custom-order images are kept only as long as needed to handle your request.

Your rights

You have the right to access, correct, delete or export your data, and to object to processing. To exercise these rights, contact us using the details in the site footer. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

We use only the strictly necessary cookies required for the cart and checkout to work. Our analytics do not use tracking cookies.