1. Who We Are

We are the data controller for personal information processed under this Privacy Policy. We operate our online store through Shopify. We do not have a Data Protection Officer (DPO). For privacy-related questions, requests, or complaints, contact us at info@noordzeeboardstore.nl.

2. Personal Data We Collect

We collect personal information in three main ways: (a) information you provide to us, (b) information collected automatically when you use the Site, and (c) information from service providers involved in processing your order.

2.1 Information you provide

When you place an order (or contact us) we may collect:

• Identity & contact details: full name, email address, phone number (if provided), and shipping/billing address.
• Order details: items purchased, order notes, and communications with us about your order or support request.

Providing certain personal information is necessary to complete your order. If you choose not to provide required information, we may be unable to process or deliver your purchase.

2.2 Information collected automatically

When you visit the Site, we may automatically collect:

• IP address and approximate location (derived from IP)
• Device type, browser type/version, operating system
• Pages viewed, clicks, and interactions with the Site
• Referral source (e.g., how you arrived at the Site)
• Cookie and similar technology data (see Section 8)

2.3 Payment information

Payments are processed by payment providers available at checkout. We do not store full payment card details on our own servers. Payment providers may process your payment information under their own privacy policies.

2.4 Children

The Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

3. How We Use Your Data

We use personal information for the following purposes:

• Order processing: to process orders, confirm transactions, create invoices, and provide customer service.
• Shipping & delivery: to deliver your purchases and provide delivery updates.
• Payments: to process payments and prevent fraudulent transactions.
• Legal & tax compliance: to comply with accounting, tax, and other legal obligations.
• Site improvement: to understand how visitors use the Site and to improve functionality and user experience.
• Communications: to respond to your questions and support requests.

Marketing & newsletters: If we introduce marketing emails or a newsletter, we will request your explicit consent where required by law. You can withdraw consent at any time (see Section 9).

We do not use automated decision-making or profiling that produces legal or similarly significant effects for you.

4. Legal Bases for Processing (GDPR)

Under the GDPR, we rely on the following legal bases to process personal data:

• Contractual necessity: to fulfill your order and provide the products/services you request.
• Legal obligation: to meet tax, accounting, and other legal requirements.
• Legitimate interests: to operate and improve our business and the Site, prevent fraud, and provide customer support (balanced against your rights).
• Consent: for non-essential cookies/analytics and any marketing communications where consent is required.

5. Data Retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order and invoicing records: generally retained for a minimum of 7 years to comply with Dutch tax requirements.
• Customer support communications: retained as long as needed to handle your request and for a reasonable period afterward.
• Cookie/analytics data: retention depends on cookie settings and your consent choices; you can delete cookies through your browser at any time.

After retention periods expire, we will securely delete or anonymize personal data, unless we must keep it longer for legal reasons.

6. Data Security

We use appropriate technical and organizational measures to protect personal information, including:

• SSL/TLS encryption (HTTPS)
• PCI-compliant payment processing via payment providers
• Access controls and least-privilege access to personal data
• Secure Shopify infrastructure for e-commerce operations

No method of transmission or storage is 100% secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) as required by law.

7. Sharing of Data

We share personal information only when necessary to run our webshop and fulfill your order, for example with:

• Shopify: our e-commerce platform provider (to host the store and process orders).
• Payment providers: to process your payment securely.
• Shipping carriers: to deliver your order.
• Accountant/bookkeeping: for financial administration and compliance.
• Analytics providers (optional): such as Google Analytics, only where you have provided consent (see Section 8).

7.1 International data transfers

Some service providers (for example, e-commerce infrastructure or analytics tools) may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place in accordance with the GDPR, such as:

• an adequacy decision (where applicable),
• Standard Contractual Clauses (SCCs), and/or
• the EU–US Data Privacy Framework (where applicable).

7.2 Third-party links

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

8. Cookies and Analytics

We use cookies and similar technologies to make the Site work, remember preferences, and (if you consent) measure and improve performance. When required, we show a cookie banner to request your consent for non-essential cookies.

8.1 Types of cookies

• Essential cookies: required for core site functionality (e.g., cart and checkout).
• Preference cookies: remember settings such as language or region (where applicable).
• Analytics cookies: help us understand site usage (only if you consent where required).

8.2 Managing cookies

You can manage cookie preferences via our cookie banner (where available) and through your browser settings. You can also delete cookies at any time. Note that disabling certain cookies may affect Site functionality.

9. Your Rights (GDPR)

If you are in the EEA/UK, you have certain rights under data protection law, including:

• Right of access (request a copy of your personal data)
• Right to rectification (correct inaccurate or incomplete data)
• Right to erasure (“right to be forgotten”) in certain cases
• Right to restriction of processing in certain cases
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at info@noordzeeboardstore.nl. We generally respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your personal data is being handled unlawfully.

10. Data Controller

The data controller responsible for personal data processed under this Privacy Policy is:

Noordzee Boardstore
Contact: info@noordzeeboardstore.nl

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Site, or legal requirements. The latest version will always be available on this page, with the “Last updated” date shown at the top.

12. Questions or Concerns

If you have questions about this Privacy Policy or our privacy practices, contact us:

• Email: info@noordzeeboardstore.nl
• Phone: +31 70 201 5153
• Address: Badhuisstraat 72, 2584 HK, The Hague, The Netherlands