Privacy Policy

Privacy Policy – Emma Deal

Last updated: December 15, 2025

Emma Deal (“we”, “us” or “our”) operates this webshop and website. Through this website, we offer products and services (the “Services”). The Services are technically powered by Shopify. In this Privacy Policy, we explain how we collect, use, store, and share personal data when you visit, use, or make a purchase from our Services, or otherwise communicate with us.

In the event of a conflict between this Privacy Policy and our General Terms and Conditions, this Privacy Policy shall prevail with respect to the processing of personal data.

By using our Services, you confirm that you have read and understood this Privacy Policy.

1. Personal data that we process

By “personal data” we mean all information that can be directly or indirectly traced back to an identified or identifiable natural person. Anonymized or aggregated data is not included.

Depending on your use of the Services, we may process the following categories of personal data:

a. Identification and contact details

  • Name

  • Invoice and delivery address

  • Email address

  • Phone number

b. Payment and transaction details

  • Payment method

  • Transaction and payment confirmations

  • Order history
    (Please note: we do not store full credit card details; payments are processed via secure payment providers.)

c. Account details (if applicable)

  • Username

  • Password (encrypted)

  • Account settings and preferences

d. Ordering and usage details

  • Viewed products

  • Shopping cart contents

  • Purchases, returns, cancellations

  • Interactions with the website

e. Communication details

  • Content of emails, chats, or contact requests

  • Correspondence with customer service

f. Technical data

  • IP address

  • Browser and device data

  • Cookies and similar technologies

2. Sources of personal data

We collect personal data via:

  • yourself, when you place an order or contact us;

  • automatically, via our website and cookies;

  • service providers, such as payment and shipping partners;

  • third parties, such as marketing and analytics partners, to the extent permitted by law.

3. Purposes and legal basis of processing

We process personal data only if there is a valid legal basis for doing so.

a. Execution of the agreement

  • Processing and delivering orders

  • Payment processing

  • Customer service and returns

b. Legal obligations

  • Administration and accounting

  • Tax and retention obligations

c. Legitimate interest

  • Website security

  • Fraud and abuse prevention

  • Improvement of our Services

d. Consent (if applicable)

  • Marketing via email or SMS

  • personalized advertisements

You can withdraw your consent at any time.

4. Sharing of personal data

We share personal data only if necessary and in accordance with this Privacy Policy:

  • Shopify (hosting, checkout, security)

  • Payment providers (such as Mollie, Klarna, credit card companies)

  • Logistics partners (shipping and delivery)

  • Marketing and analytics partners (only if permitted)

  • Government agencies , if legally required

  • Business transfer , such as a merger or acquisition

Third parties process personal data exclusively on the basis of data processing agreements or their own legal obligations.

5. Relationship with Shopify

Our webshop is hosted by Shopify. Shopify processes personal data on our behalf and as an independent controller for specific purposes. Information you provide via our webshop is shared with Shopify and may be processed outside the EU.

More information:
https://privacy.shopify.com

6. Cookies and tracking

We use cookies and similar technologies to:

  • to make the website function properly;

  • to collect statistics;

  • to optimize marketing.

You can manage cookies via your browser settings or our cookie policy.

7. Retention periods

We do not retain personal data longer than necessary for:

  • execution of the agreement;

  • legal obligations;

  • dispute resolution;

  • enforcement of rights.

Administrative data is retained for at least 7 years in accordance with tax legislation.

8. Security

We take appropriate technical and organizational measures to protect personal data. Despite these measures, we cannot guarantee absolute security. The transmission of data is at your own risk.

9. Rights of data subjects (AVG / GDPR)

If you live in the EU or EEA, you are entitled to, among other things:

  • access to your personal data

  • rectification

  • removal (“right to be forgotten”)

  • restriction of processing

  • data portability

  • objection to processing

  • withdrawal of consent

You can submit a request via the contact details below. We will respond within the statutory timeframe.

10. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority.

11. International data transfer

If personal data is processed outside the EU/EEA, this is done on the basis of:

  • adequacy decisions, or

  • Standard Contractual Clauses (SCCs).

12. Changes

We may amend this Privacy Policy. The most current version is always available on our website. We will inform you of material changes where required by law.

13. Contact details

Emma Deal
Netherlands

Email: via the contact page
Data controller within the meaning of the GDPR