Privacy Policy

1. Who We Are

CustomBierViltjes.nl ("we", "our", or "us") is the data controller for the personal data described in this policy. We are registered in the Netherlands with the Chamber of Commerce (KVK) under number 42127712.

For any privacy question or request, contact us at contact@custombierviltjes.nl.

2. Personal Data We Collect

2.1 Account details

When you create an account we collect your first name, last name, email address, and password. Your password is stored only in hashed form; we can never see it. If you sign in with Google, we receive your email address from Google and do not receive your Google password.

2.2 Guest checkout

If you order without creating an account, we still create a passwordless customer record using your name and email address, so your order, designs, and addresses can be linked together. You can get back into it using a one-time sign-in code sent by email or the sign-in link in your order confirmation, and you can turn it into a full account at any time by setting a password.

2.3 Order and shipping details

When you place an order we collect:

• the recipient's name, shipping address, and phone number;
• a billing address, if different;
• the products ordered, prices, discount codes used, and any notes you add;
• payment status and the payment method type (for example "card" or "iDEAL");
• shipment and tracking information.

Your phone number is required because our shipping carrier needs it to create a shipping label and contact you about delivery.

2.4 Payment details

Payments are handled by Stripe. Your card or bank details are entered directly with Stripe and never reach or are stored on our servers. We only receive confirmation of the payment, its status, and reference numbers.

2.5 Designs and artwork

When you use our design editor we store the designs you save, the images and artwork you upload, and the print files generated from them. Uploaded artwork may itself contain personal data (for example photos of people or names), which we process only to produce your order. Unsaved drafts are kept locally in your own browser, not on our servers.

2.6 Cart contents

Your cart is stored in your browser. If you are signed in, we also keep a copy of which products are in your cart (product, size, options, and quantity, not your design itself) so we can remind you if you leave items behind.

2.7 Messages you send us

When you use our contact form we receive your name, email address, project description, and message, which are delivered to our inbox by email. We also keep any correspondence you have with us by email or social media.

2.8 Usage and technical data

Our servers and error-monitoring service process technical data such as your IP address, browser and device type, the pages requested, and error details, to keep the website secure and working. With your consent we also collect analytics data about how you use the site, and share data about your visit and purchases with Meta to measure our ads (see sections 5 to 7).

3. Why We Use Your Data and Our Legal Basis

• Performing our contract with you (Art. 6(1)(b) GDPR): creating and managing your account, saving your designs, processing your order and payment, producing and shipping your products, and sending order confirmations, sign-in codes, and service emails.
• Legal obligations (Art. 6(1)(c) GDPR): keeping financial and tax records, and providing customs information for shipments outside the EU.
• Our legitimate interests (Art. 6(1)(f) GDPR): keeping the website secure and fixing errors, preventing fraud and abuse, answering your questions, sending marketing email to existing customers about similar products, and producing anonymous statistics such as which regions we ship to.
• Your consent (Art. 6(1)(a) GDPR): analytics cookies and session recordings, marketing cookies and sharing purchase data with Meta for advertising, and our newsletter when you sign up for it. You can withdraw consent at any time, without affecting processing that took place before.

4. Emails We Send

Service emails are sent whenever they are needed to run your account or order: order confirmations, sign-in codes, and notices that saved files are about to be deleted (see section 9). You cannot unsubscribe from these, as they are part of the service.

Marketing emails include our newsletter and campaigns, a welcome email when you create an account, a reminder if you leave items in your cart, and a request to review your order after it has shipped. These also go to customers who ordered as a guest. Every marketing email contains a one-click unsubscribe link, and you can also unsubscribe by contacting us.

5. Cookies and Local Storage

We use cookies and similar technologies such as your browser's local storage. When you first visit, we ask for your choice through our cookie banner. You can change it at any time via "Cookie preferences" in the footer of every page.

Essential (always on). These keep the site working and do not require consent: your cookie choice, your sign-in session, your cart, and design drafts saved in your browser while you work in the editor.

Site improvements (only with your consent). These help us understand how the site is used and fix problems:

• Google Analytics (cookies starting with _ga, _gid, _gat);
• Microsoft Clarity, which includes session recordings (cookies such as _clck, _clsk, MUID);
• Sentry session replay, which records a sample of sessions and sessions in which an error occurs;
• our own first-party analytics (see section 6).

Marketing (only with your consent). The Meta Pixel (cookies _fbp and _fbc) lets Meta Platforms Ireland Ltd. measure how our ads on Facebook and Instagram perform and show them to people who are likely to be interested. See section 7.

If you decline or later withdraw consent, these tools are not loaded and we remove the analytics and marketing cookies they set.

6. Our Own Analytics

With your consent, we record events such as page views, opening the editor, adding a product to your cart, and completing a purchase. To group these, your browser is given a random visitor ID and a random per-tab session ID. Each event stores the page, language, device type (for example mobile or desktop), traffic source, and product type. If you are signed in at the time, the event is also linked to your account. We use this data only to improve our website and shop. Nothing is recorded without your consent.

7. Advertising with Meta

Only if you accept marketing cookies, we tell Meta Platforms Ireland Ltd. which pages and products you view, when you add something to your cart, start checkout, sign up, or design a product, using the Meta Pixel in your browser. When you complete an order, our server also sends Meta the order value and currency, the product types, your IP address and browser, the Meta Pixel cookies, and a hashed (one-way encrypted) version of your email address, phone number, name, city, postal code and country. Meta uses this to match the purchase to an ad you saw, measure our ads, and find people likely to be interested in them. We and Meta are joint controllers for this collection and transfer; Meta is responsible for its own further processing, described in Meta's Privacy Policy. You can withdraw consent at any time via "Cookie preferences".

8. International Transfers

Some of our service providers (such as Stripe, Google, Microsoft, and Meta) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

9. How Long We Keep Your Data

• Account details: for as long as your account exists. You can ask us to delete your account at any time.
• Order and invoice records: 7 years, as required by Dutch tax law.
• Artwork uploaded but never ordered: deleted automatically after a short period.
• Print files of unpaid orders: up to 30 days.
• Shipping labels: up to 180 days.
• Print files of paid orders: up to 2 years after you last used them, so you can reorder.
• Saved designs that were never ordered: up to 1 year after you last used them.
• Analytics data and email logs: no longer than needed for the purposes described above.

Before we delete saved designs or print files of paid orders, we email you in advance. Opening and saving the design again keeps it.

10. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted (HTTPS) connections, hashed passwords, signed and time-limited download and sign-in links, rate limiting on sign-in, and restricting admin access to authorised staff. No system is completely secure, but we work to keep your data safe and will notify you and the authorities of a data breach where the law requires it.

11. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, unless we must keep it by law;
• restrict our processing of your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests, including direct marketing;
• withdraw your consent at any time.

You can view and update much of your data in your account. For any other request, email contact@custombierviltjes.nl. We will respond within one month. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.

12. Children

Our website and products are not aimed at children under 16, and we do not knowingly collect their personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always published on this page, with the date it was last updated. If we make significant changes, we will let you know by email or on our website.

See also our Terms of Service.

14. Contact

CustomBierViltjes.nl

KVK: 42127712

Email: contact@custombierviltjes.nl

Website: https://custombierviltjes.nl