Privacy Policy

The controller of your personal data is:

We collect only the data necessary to run the shop and manage your account:

• Account data: full name, email address, password (stored encrypted), phone number.
• Delivery data: address, postal code, town/city.
• Order data: items ordered, amounts, order history, delivery status.
• Marketing consent: whether you have opted in to our newsletter.
• Google sign-in data: if you log in with Google, we receive your email address and name from your Google account.
• Age confirmation: the fact that you have confirmed you are 18 or older.

We do not store payment card details — payments are handled by Stripe (see section 5).

• Fulfilling orders and the sales contract — basis: performance of a contract (Art. 6(1)(b) GDPR).
• Managing your customer account — basis: performance of a contract.
• Marketing newsletter — basis: your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
• Legal obligations (accounting, tax, excise, age verification) — basis: legal obligation (Art. 6(1)(c) GDPR).
• Verifying that you are of legal age — basis: legal obligation under alcohol-sale regulations.

• Order data and accounting records: for the period required by tax law (in the Netherlands, generally 7 years).
• Account data: until you delete your account.
• Marketing consent: until you withdraw it.

We use trusted providers who process data on our behalf:

• Stripe — payment processing (iDEAL). Stripe processes payment data directly; we do not have access to your full card details.
• Resend — sending transactional emails (order confirmations) and the newsletter.
• Base44 — website hosting and secure storage of account and order data.
• Google — only if you use Google sign-in.

We do not sell your personal data to third parties.

You have the right to:

• access your data,
• correct inaccurate data,
• erase your data ("right to be forgotten"),
• restrict or object to processing,
• data portability,
• withdraw marketing consent at any time (via the unsubscribe link in any newsletter or in your account settings).

To exercise any of these rights, contact us at Closdejakub@gmail.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Your data is stored securely. Passwords are encrypted and handled by our platform's built-in secure authentication; payment data is handled directly by Stripe. We take appropriate technical and organisational measures to protect your data.

Our website uses cookies. See our Cookie Policy for details on which cookies we use and how to manage them.

We may update this policy from time to time. The latest version is always available on this page, with the date of last update shown above.

For any questions about this policy or your data, contact us at Closdejakub@gmail.com.