PRIVACY POLICY

Last updated: January 2026

Scheurpapier (“we”, “us”, “our”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. SCHEURPAPIER

Statutaire naam: SCHEURPAPIER by Stoepkrijt Studio
For privacy-related questions, contact us at: info@scheurpapier.nl

2. Personal Data We Collect

When you place an order or contact us, we may collect:

  • First and last name
  • Billing and shipping address
  • Email address
  • Phone number (if provided)
  • Order details
  • IP address
  • Device and browser information
  • Communication history

Payment details are processed securely by our payment provider and are not stored by us.

We do not knowingly collect data from individuals under 16 years of age.

3. Purposes and Legal Bases

We process personal data for the following purposes:

A. Order Processing

To process, fulfill, and deliver your order.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)

B. Payment Processing

Payments are processed via Mollie. Mollie processes payment data in accordance with its own privacy policy. We do not have access to full credit card details.
Legal basis: Performance of a contract

C. Shipping and Delivery

To deliver your order, we share necessary data (name, address, email if required) with shipping carriers:

  • PostNL
  • DPD
  • DHL

These carriers process data solely for delivery purposes.
Legal basis: Performance of a contract

D. Customer Service

To respond to inquiries and handle complaints.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

E. Legal Obligations

To comply with tax and accounting laws (e.g., retaining invoices).
Legal basis: Legal obligation (Art. 6(1)(c) GDPR)

F. Marketing (if applicable)

If you subscribe to our newsletter, we process your email address based on your consent.
You may withdraw consent at any time.
Legal basis: Consent (Art. 6(1)(a) GDPR)

4. Webshop Platform

Our webshop is hosted on Shopify. Shopify provides the online e-commerce platform that allows us to sell our products.

Your data may be stored through Shopify’s secure data storage and databases. Shopify processes personal data in accordance with GDPR and uses appropriate safeguards for international data transfers.

5. Data Retention

We retain personal data only as long as necessary:

  • Order and invoice data: 7 years (tax obligation)
  • Customer service communications: up to 2 years
  • Newsletter data: until you unsubscribe

6. International Transfers

Some of our service providers (such as Shopify) may process data outside the European Economic Area (EEA).

Where applicable, transfers are safeguarded through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)

7. Cookies

Our website uses cookies for:

  • Functional purposes (checkout, shopping cart)
  • Security
  • Analytics (if enabled)
  • Marketing (if enabled)

You can manage cookie preferences via our cookie banner.
More details are provided in our Cookie Policy.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

You also have the right to lodge a complaint with your supervisory authority.

In the Netherlands, this is the Autoriteit Persoonsgegevens.

9. Data Security

We take appropriate technical and organizational measures to protect your data, including:

  • SSL encryption
  • Secure Shopify hosting
  • Restricted internal access
  • Strong authentication measures

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version is always available on our website.