Privacy Policy

 

Heartsmiths collects only the personal data needed to process your order and run this website, and never sells it.

 

Who we are. Heartsmiths (KvK 93719914), the Netherlands. Contact: helloheartsmiths@gmail.com.

 

What we collect and why.

• Name, address, email, phone: to process, ship and follow up your order. Legal basis: performance of a contract.

• Payment details: to take payment; handled by our payment provider, we never see full card numbers. Legal basis: performance of a contract.

• Order history: accounting and tax records (kept 7 years, as Dutch law requires). Legal basis: legal obligation.

• Messages you send us: to answer your questions. Legal basis: legitimate interest.

• Email address for our newsletter, if you sign up: to send news and new pieces; unsubscribe anytime. Legal basis: consent.

• Website usage data and cookies: to keep the site working and improve it. Legal basis: consent (via the cookie banner) or legitimate interest for essential cookies.

 

Who we share it with. Only with services that help us run the shop: Wix (website and payments), our shipping carrier, Linguise (website translation), and Google (search and shopping listings). Some of these may process data outside the EU under EU-approved safeguards.

 

How long we keep it. Order data for 7 years (tax law); other data no longer than needed for its purpose.

 

Your rights. You can ask to see, correct, delete or export your data, object to its use, or withdraw consent at any time. Email helloheartsmiths@gmail.com. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.