Legal
Privacy policy
Draft — not yet legally valid. Fill in the controller details and confirm the list of processors actually in use (payment provider, hosting, email, analytics, ad pixels) before publishing. This is scaffolding, not legal advice.
Who controls your data
[Legal entity name], trading as Casa Nimasa, [registered address], KVK [KVK number]. For any privacy question, write to [email protected].
What we collect, and why
- Order data — your name, email, delivery address and order contents. We need this to perform the contract, and we keep it as long as tax law requires (seven years in the Netherlands).
- Payment data — handled entirely by our payment provider. We receive a payment reference and status, never your card or bank credentials.
- Newsletter — your email address, only if you ask for it. You can unsubscribe from any message.
- Analytics and advertising — only with your consent, given through the cookie banner. See our cookie policy.
Who we share it with
Only the processors we need to run the shop: our payment provider, our hosting provider, our carrier, and our email provider. We do not sell your data to anyone, ever.
Your rights
Under the GDPR you may ask us for a copy of your data, correct it, have it deleted, restrict or object to how we use it, or take it elsewhere. Email us and we will act within a month. If you are unhappy with how we respond, you can complain to the Autoriteit Persoonsgegevens.
Security
The site is served over HTTPS and access to order data is limited to the people who need it. No system is perfect — if a breach ever affects you, we will tell you.