Privacy Policy

Orange-shapes Privacy Statement

Our online store processes privacy-sensitive data (also known as personal data). Orange-shapes attaches great importance to handling your data with care. We therefore process and secure personal data carefully and in accordance with the requirements of the General Data Protection Regulation (GDPR).

Orange-shapes is the data controller. In this privacy statement, we explain what personal data we collect, why we collect it and how we safeguard your privacy.

1. Our privacy principles

When processing personal data, we comply with privacy legislation. This means that we:

Clearly state the purposes for which we process personal data (as explained in this statement);
Limit the collection of data to only the personal data needed for the purposes intended;
Request explicit consent to process your personal data in cases where your consent is legally required;
Take appropriate security measures to protect your personal data. We also require parties that process data on our behalf to do so (as set out in data processing agreements);
Respect your rights, such as the right to access, correct or delete your personal data at your request.

2. What data do we collect and why?

When you visit our online store or place an order, you provide us with certain information. We only store and use personal data that you provide directly in connection with the service you have requested.

2.1 Processing your order

When you buy a product from us, we use your data to process and deliver your order. For this, we use:

Name and address details
Billing address
Email address
Telephone number
Payment details
Order information (date, order number, invoice number, total amount)
IP address

2.2 Creating an account

You can create an account in our online store. This means you do not have to enter your details again for each order and can easily view your order history. For this purpose, we store:

First and last name
Email address
An encrypted password

2.3 Contact form and customer service

If you have questions and contact us via the contact form or by email, we process the information you share with us so that we can answer your question as effectively as possible. We ask for:

Name
Email address
Any other information you include in your message

2.4 Newsletter and marketing

We may inform you about our new products, offers and services via a newsletter or other channels (such as social media). We do this only if you have given your explicit consent. You can find a link at the bottom of each newsletter that allows you to unsubscribe quickly and easily.

3. Disclosure to third parties

We never sell your data to third parties. However, we share your data with trusted partners when necessary to perform our agreement (such as processing payment and delivering your parcel). These include:

Logistics partners: DPD, to deliver your order.
Payment providers: Mollie, to securely process payments via iDEAL, credit card or other payment methods.
Hosting and software providers: For the technical management of our online store and email marketing.

We have entered into data processing agreements with all these parties to ensure that they handle your data with the same care as we do. If we suspect fraud or misuse, we are legally required to share data with the competent authorities.

4. Cookies and Google Analytics

Our online store uses cookies. Functional cookies ensure that the website works properly (for example, by remembering what is in your shopping cart). We always ask for your consent in advance to use non-functional cookies (such as marketing or tracking cookies).

We also use Google Analytics to analyze how visitors use our website. We have chosen privacy-friendly settings for this purpose: we have entered into a data processing agreement with Google, IP addresses are anonymized and we do not share data with other Google services.

5. How long do we retain your data?

We do not retain your personal data longer than is strictly necessary to achieve the purposes for which it was collected:

Customer accounts and orders: We retain this data for as long as your account is active. Due to statutory tax record-keeping requirements, we are required to retain payment and invoice data for 7 years.
Contact requests: Contact form data is deleted within 30 days after your request has been fully handled, unless its content requires us to retain it for longer.

6. Security

We take strict and appropriate security measures to prevent misuse of and unauthorized access to your personal data. Our website uses, among other things, a secure SSL connection (indicated by the padlock in the address bar).

7. Your rights (access, correction and deletion)

You have the full right to access, correct or have deleted the personal data we hold about you. You can update much of this data yourself directly through your personal account dashboard.

If you are unable to do so, or would like us to permanently delete all your data, please contact us using the contact details at the bottom of this page. To prevent misuse, we may ask you to verify your identity.

8. Dutch Data Protection Authority

We are happy to help if you have any complaints about the processing of your personal data. If we are unable to resolve the matter together, you have the right under privacy legislation to file a complaint with the data protection supervisory authority: the Dutch Data Protection Authority.