Privacy Policy – M-HOLY Gift Atelier
At M-HOLY Gift Atelier, we take your privacy seriously. In this Privacy Policy, we explain which personal data we collect, why we use it, with whom we may share it, how long we retain it and what rights you have.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.
1. Who is responsible for your data?
M-HOLY Gift Atelier is responsible for the processing of personal data collected through our webshop, orders and customer service.
For questions about privacy or to exercise your rights, you can contact us at:
Email: m-holy@m-holy.nl
2. What personal data do we process?
Depending on how you use our website and services, we may process the following types of data:
name and contact details, such as email address and telephone number;
billing and delivery address;
order details and order history;
information relating to returns, cancellations and customer service requests;
information you provide for the personalisation of a product, such as names, text or personal messages;
payment status, transaction references and information required to process payments;
technical information, such as IP address, browser type, device, cookie data and information about the use of our website;
marketing preferences and consents.
Full payment card details are not stored by M-HOLY when they are processed directly by the payment service provider used for the transaction.
3. Why do we process personal data?
We process personal data for the following purposes:
Fulfilling orders
To produce, personalise, process payment for, ship and deliver products.
Customer service
To answer questions and resolve issues relating to orders.
Returns and cancellations
To process return and cancellation requests and handle refunds.
Legal obligations
To comply with administrative, tax and other legal obligations.
Security and fraud prevention
To protect our webshop, transactions and customers against fraud, misuse and security issues.
Improving our webshop
To understand how our website is used and improve our services, where permitted under applicable law.
Marketing
To send news, offers or other marketing communications where you have given consent or where this is otherwise permitted by law.
4. What legal bases do we use to process your data?
Depending on the purpose, we rely on one or more of the following legal bases:
Performance of a contract: for example, to process, personalise and deliver your order.
Legal obligation: for example, to comply with our tax and administrative obligations.
Legitimate interests: for example, for security, fraud prevention and improving our services, provided that your privacy interests do not override those interests.
Consent: for example, for certain marketing activities and non-essential cookies or tracking technologies.
Where processing is based on your consent, you can withdraw that consent at any time.
5. With whom do we share personal data?
We do not sell your personal data.
In order to operate our webshop and provide our services, we may share data with carefully selected service providers, including:
Shopify, for hosting, webshop functionality and checkout;
payment service providers required to process your payment;
PostNL and other available carriers, for shipping and Track & Trace;
providers of apps, IT services, email services or other technical services required for our webshop;
professional advisers or competent authorities where this is legally required or necessary.
We only share the data required to provide the relevant service.
6. Processing outside the European Economic Area
Some of our technical service providers may process or store personal data outside the European Economic Area (EEA).
Where personal data is transferred internationally, we or our service providers use appropriate legal safeguards, such as an adequacy decision or approved Standard Contractual Clauses, where required under the GDPR.
7. How long do we keep your data?
We do not retain personal data for longer than necessary for the purpose for which it was collected, unless we are legally required to retain it for a longer period.
Data that forms part of our tax and business administration, such as relevant order and invoice information, is generally retained for 7 years in accordance with Dutch tax retention requirements.
Other data is retained, for example:
for as long as necessary to fulfil an order;
for as long as necessary to handle a customer service request, return or dispute;
until you withdraw your consent for marketing;
in accordance with the retention periods applicable to the cookies and similar technologies used.
When data is no longer required, it is deleted or anonymised where possible.
8. Cookies and similar technologies
Our webshop uses cookies and similar technologies.
Some cookies are necessary for the website and checkout to function properly, for example for shopping cart, security and payment functionality.
For non-essential cookies, such as certain analytics, marketing or tracking cookies, we request consent where required by law.
You can set or change your cookie preferences at any time through the cookie banner or the Cookie Preferences option on our website.
Refusing non-essential cookies will not prevent you from using our webshop normally.
9. Marketing communications
We only send marketing communications where we have a valid legal basis to do so.
If you have subscribed to marketing communications, you can unsubscribe at any time using the unsubscribe link in the message or by contacting us.
Withdrawing your consent to marketing does not affect necessary communications relating to an existing order.
10. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
We also make use of the security measures provided by our webshop, payment and logistics service providers.
Although we handle data carefully, no digital system can guarantee absolute security.
11. Your privacy rights
Under the GDPR, depending on the circumstances, you may have the right to:
request access to your personal data;
have inaccurate data corrected;
request deletion of your data;
request restriction of processing;
object to certain types of processing;
receive your data in a portable format;
withdraw consent you have previously given.
To make a request, please contact:
m-holy@m-holy.nl
To protect your privacy, we may ask for additional information to verify your identity.
You also have the right to lodge a complaint with the Dutch Data Protection Authority if you believe that we are not processing your personal data correctly.
12. Third-party data used for personalisation
When you enter personal data relating to another person for a personalised product, for example a name or personal message, we ask that you only provide information that you are entitled to share with us.
We use this information solely to fulfil your order and for other necessary purposes related to that order.
13. Changes to this Privacy Policy
We may update this Privacy Policy when our services, webshop, systems or applicable legislation change.
The most current version will always be published on our website.
14. Contact
Do you have questions about this Privacy Policy or about how your personal data is processed?
Please contact us:
M-HOLY Gift Atelier
Email: m-holy@m-holy.nl