Privacy
What data we process and why.
Who we are
[Owner to confirm: controller name, address, contact email]
Data we process
- Orders: name, email, shipping address and order contents, to fulfil your order. Payments are handled by Stripe; we do not receive or store card details.
- Newsletter / waitlist: your email address, plus the country and source (e.g. TikTok) of your visit, only if you sign up. Stored with our database provider. [Owner to confirm: provider, region and retention]
- Design requests: what you request, your email address and (optionally) your social handle, plus the country and source of your visit. Used to review your request and to tell you when it is released. Your handle is only shown publicly if you tick the credit box. [Owner to confirm: retention period]
- Your bag: stored in your own browser (localStorage) so it survives a refresh. It is not sent to us until you check out.
Visitor statistics
We count visits without cookies. We do not store IP addresses: a visit is counted using a salted, one-way hash of your IP address and browser that changes every day, together with the approximate country and city provided by our hosting provider, the referring website and the device type.
Cookies and local storage
This site only uses strictly necessary storage (your bag). No analytics or marketing cookies are set. If that changes, we will ask for your consent first.
Processors
[Owner to confirm: list of processors, e.g. hosting provider, Stripe, email provider, carrier]
Retention
[Owner to confirm: retention periods per data category]
Your rights
Under the GDPR you can request access to, correction or deletion of your personal data, object to or restrict processing, and request data portability. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Contact: [Owner to confirm: privacy contact]