Privacy policy
We only collect the personal data we need to make, ship and support your order, and we never sell it. This policy explains what we process, why, and what your rights are under the GDPR (AVG).
1. Who is responsible
Huzz BV, trading as AISLOPMERCH.COM, is the controller for the personal data processed through aislopmerch.com.
|
|
|
|---|---|
|
Company |
Huzz BV |
|
Chamber of Commerce (KvK) |
95776680 |
|
Address |
Elektraweg 5, 3144 CB Maassluis, The Netherlands |
|
|
support@aislopmerch.com |
For any question about your data or this policy, email us. We do not have a data protection officer, because we are not required to.
2. What we collect, why and for how long
|
Purpose |
Data |
Legal basis |
Retention |
|---|---|---|---|
|
Processing, printing and shipping your order |
Name, email, delivery address, phone number (if given), products ordered, order number |
Performance of the contract |
7 years after the order (Dutch tax retention obligation) |
|
Payment |
Payment status, payment method, amount (card and bank details stay with the payment provider) |
Performance of the contract; legal obligation |
7 years (tax retention obligation) |
|
Customer service, returns and complaints |
Name, email, order number, your message, photos you send |
Performance of the contract; legitimate interest in helping you |
2 years after the case is closed |
|
Newsletter |
Email address, sign-up date and proof of consent |
Consent |
Until you unsubscribe; proof of consent up to 2 years after |
|
Contact form |
Name, email, your message |
Legitimate interest in answering you |
2 years after the last contact |
|
Website security and operation |
IP address, browser and device data, server logs |
Legitimate interest in a safe, working website |
Up to 90 days |
|
Analytics (only with your consent) |
Pages visited, referrer, device type, approximate location |
Consent |
Up to 14 months |
We do not use automated decision-making or profiling with legal or similarly significant effects. You don't have to give us your data, but without your name, email and address we can't deliver your order. Our shop is not aimed at children under 16.
3. Who we share your data with
We only share data with parties that need it to deliver our service. Processors work under a data processing agreement and may only use your data on our instructions.
|
Recipient |
Why |
Data |
|---|---|---|
|
PostNL (Netherlands) and FedEx (international) |
Delivering your parcel and sending tracking updates |
Name, delivery address, email, phone number (if given) |
|
Payment provider [name] |
Handling your payment |
Order amount, payment details |
|
Website hosting and database (Lovable / Supabase) |
Running the shop and storing orders |
All data processed through the website |
|
Email service [name] |
Sending order confirmations, shipping updates and the newsletter |
Name, email, order details |
|
Analytics [name] (only with consent) |
Understanding how the website is used |
Usage and device data |
|
Accountant and tax authorities |
Bookkeeping and legal obligations |
Order and payment records |
We may also share data when the law requires it, for example at the request of a court or the police.
4. Transfers outside the EU
Some service providers, or their sub-processors, are based in or have access from outside the European Economic Area, for example in the United States. We only allow this when there is an adequate safeguard, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. Cookies
- Essential cookies keep your shopping bag and checkout working and remember your cookie choice. These don't need consent.
- Analytics cookies are only placed after you click "Accept all" in the cookie banner. You can change your choice at any time via the cookie settings or by clearing your cookies.
- We don't use advertising or tracking cookies from social networks.
6. Security
We protect your data with appropriate technical and organisational measures: an encrypted connection (HTTPS), access only for people who need it, and secure hosting. If a data breach is likely to put you at high risk, we inform you and the Dutch Data Protection Authority as required by law.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- rectify data that is incorrect or incomplete;
- erase your data, unless we must keep it by law (such as order records for tax purposes);
- restrict the processing of your data;
- object to processing based on our legitimate interest;
- data portability: receive your data in a common, machine-readable format;
- withdraw your consent at any time, for example by unsubscribing via the link in every newsletter. This does not affect processing before the withdrawal.
To exercise your rights, email support@aislopmerch.com. We may ask you to confirm your identity. We respond within one month.
8. Complaints
If you are not happy with how we handle your data, please tell us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl, or with the authority in your own EU country.
9. Changes
We may update this policy, for example when we add a new service provider. The date at the top shows the latest version. If a change affects you significantly, we let you know by email or on the website.