Privacy Policy

IDORE, registered in the Netherlands under KvK number 94472556, is the controller of your personal data as described in this Privacy Policy. We process your data in accordance with the General Data Protection Regulation (GDPR), implemented in the Netherlands as the Algemene Verordening Gegevensbescherming (AVG), and applicable Dutch privacy legislation.

This policy explains what data we collect, why we collect it, how we use it, and what rights you have.

We collect personal data when you place an order, create an account, subscribe to our newsletter, or contact us. This includes:

• Identity data: first name, last name
• Contact data: email address, telephone number (if provided)
• Address data: shipping and billing address
• Order data: products purchased, order history, engraving text
• Payment data: payment method, transaction reference (we do not store full card details; this is processed by our payment provider)
• Usage data: IP address, browser type, pages visited, referral source, collected via cookies
• Communication data: content of emails or messages you send us

We only process your personal data when we have a valid legal basis under Article 6 of the AVG:

• Performance of a contract (Art. 6(1)(b)): processing your order, arranging delivery, handling returns and refunds, providing engraving services
• Legal obligation (Art. 6(1)(c)): retaining order and financial records as required by Dutch tax law (Belastingdienst) for a minimum of 7 years
• Legitimate interest (Art. 6(1)(f)): fraud prevention, website security, improving our services, and analysing aggregate usage data
• Consent (Art. 6(1)(a)): sending marketing emails or newsletters, and placing non-essential cookies. You may withdraw consent at any time.

We do not keep your data longer than necessary for the purposes described above:

• Order and transaction records: 7 years, as required by Dutch tax law
• Account data: for the duration of your account, plus 2 years after your last activity
• Marketing data: until you unsubscribe or withdraw consent
• Customer service communications: 2 years from the last contact

We share your data only where necessary to operate our business:

• Shopify Inc.: our e-commerce platform processes order and customer data. Shopify is GDPR-compliant and acts as a processor under a data processing agreement.
• Payment providers: such as Mollie or Stripe, for secure payment processing. These providers are PCI-DSS certified and operate under their own privacy policies.
• Shipping carriers: your name and address are shared with our logistics partners to fulfil delivery.
• Email service providers: used to send transactional and marketing emails, acting as processors under our instruction.

We do not sell your personal data to third parties. We do not share your data with parties outside the European Economic Area (EEA) without appropriate safeguards under Chapter V of the AVG.

Under the AVG, you have the following rights regarding your personal data:

• Right of access (Art. 15): you may request an overview of all personal data we hold about you
• Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): you may request deletion of your data, subject to legal retention obligations
• Right to restriction (Art. 18): you may request that we limit the processing of your data in certain circumstances
• Right to data portability (Art. 20): you may request your data in a structured, machine-readable format
• Right to object (Art. 21): you may object to processing based on legitimate interest, including direct marketing
• Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at info@idore.eu. We will respond within 30 days as required by the AVG.

We use cookies and similar tracking technologies on our website. For detailed information on what cookies we place, their purpose, and how to manage them, see our Cookie Policy.

We may update this Privacy Policy from time to time. The most current version is always available at idore.eu/pages/privacy-policy. For significant changes, we will notify you by email if you have an account or active subscription.

Questions about this policy? Contact us at info@idore.eu.