About Our Privacy Policy

At Cupcakedozen.nl, we value your privacy. We only process data necessary for improving our services and handle the information collected about you and your use of our services with care. Your data will never be shared with third parties for commercial purposes.

This privacy policy applies to the use of our website and the services offered through it. The effective date of these terms is 04/02/2025. Any new version of this policy will replace previous versions. This document outlines the data we collect, how we use it, and the circumstances under which it may be shared with third parties. We also explain how we store and protect your data and your rights regarding your personal information.

If you have any questions about our privacy policy, please contact our designated privacy officer. You can find the contact details at the end of this document.

Data Processing

Below, we explain how we process your data, where it is stored, the security measures we apply, and who has access to it.

E-commerce Platform

Lightspeed
Our webshop operates on Lightspeed software. Any personal data you provide for our services is shared with Lightspeed. They only access this data for technical support and will never use it for other purposes. Under our agreement, Lightspeed is required to implement appropriate security measures, including SSL encryption and a strong password policy. They use cookies to collect technical information but do not store personal data. Lightspeed reserves the right to share anonymized data within their company to improve their services.

Web Hosting

Antagonist
We use Antagonist for web hosting and email services. They process personal data on our behalf and do not use it for their own purposes. Antagonist may collect metadata about service usage, but this does not include personal data. They have implemented technical and organizational measures to prevent unauthorized access and data loss. Antagonist is bound by a confidentiality agreement.

Email and Mailing Lists

Reloadify
We use Reloadify to manage email communication and newsletters. All confirmation emails and web forms are sent via Lightspeed’s servers. Reloadify does not use your name or email address for its own purposes. Every email contains an ‘unsubscribe’ link. Clicking this link will stop further emails, but this may impact our service functionality. Reloadify securely stores your data and uses cookies to track email engagement. They may share data to improve their services.

Antagonist
For general business email communication, we use Antagonist. They have security measures in place to prevent data loss or corruption. Antagonist does not access our mailbox, and all correspondence is treated confidentially.

Payment Processing

Buckaroo
We use Buckaroo to process payments. They handle personal data such as name, address, and payment details securely. Buckaroo may share anonymized data to enhance their services. They comply with all legal retention periods.

Billink
If you use post-payment options, your data may be used for risk analysis, fraud prevention, and credit assessments. For details on how Billink processes data, refer to their privacy statement.

Reviews

WebwinkelKeur
We collect reviews via WebwinkelKeur. When you leave a review, you must provide a name and email address. WebwinkelKeur shares this data with us so we can link the review to your order. They may contact you for feedback verification. All security measures for personal data also apply to any third parties WebwinkelKeur engages.

Shipping and Logistics

Webshoporders.nl
For order deliveries, we use Webshoporders.nl. Your name and address are shared with them for shipping purposes only. If subcontractors are used, they may also receive this data.

Accounting and Administration

e-Boekhouden.nl
We use e-Boekhouden.nl for financial administration. They store customer details securely for invoice processing. They are bound by confidentiality and will not use your data for other purposes.

Purpose of Data Processing

We only use your data to fulfill our services. We do not use your information for targeted marketing without your explicit consent. Data is only shared with third parties when required for legal, accounting, or administrative purposes. All partners are bound by confidentiality agreements.

Automatically Collected Data

We collect technical data, such as IP address and browser type, to improve our services. This data is not linked to personal information.

Legal Compliance

In some cases, we may be required by law to share data with authorities for tax or criminal investigations. We will always try to protect your data within the legal framework.

Data Retention

We retain your data as long as you remain a customer. If you request account deletion, we will treat this as a data removal request. Inactive customer data is deleted after two years unless legally required otherwise. Invoice data is stored for the mandatory legal period.

Your Rights

Under European data protection laws, you have rights concerning your personal data. You may:

• Request access to your stored data.

• Request correction of inaccurate information.

• Request restriction of data processing.

• Request data transfer to another service provider.

• Object to data processing.

• Request deletion of your data.

Requests will be processed within 30 days. Identity verification may be required to prevent fraud. You can file complaints with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data is misused.

Cookies

Google Analytics
We use Google Analytics to track website usage. Google may be required to share data with authorities based on legal obligations. We do not allow Google to use analytics data for other services.

Third-party Cookies
If third-party software on our website uses cookies, it will be disclosed in this privacy policy.

Changes to This Policy

We may update this policy at any time. The latest version is always available on our website. If changes affect the processing of previously collected data, we will notify you via email.

Contact Information

Cupcakedozen.nl
Rozengaarde 30
3831CD Leusden
The Netherlands
T: (033) 369-0031
E: privacy@cupcakedozen.nl

Privacy Officer: Lotte Soesbergen