Privacy policy

About Our Privacy Policy

Colourful Goodies values your privacy greatly. We only process data that is necessary for (improving) our services and handle the information we collect about you and your use of our services with care. We never provide your data for commercial purposes to third parties.

This privacy policy applies to the use of the website and the services provided by Colourful Goodies. The effective date of these terms is 09/18/2022, and the validity of all previous versions expires upon the publication of a new version. This privacy policy describes what data we collect about you, how we use this data, and under what conditions we may share this data with third parties. We also explain how we store your data, protect it from misuse, and outline your rights regarding the personal information you provide to us.

If you have any questions about our privacy policy, please contact our privacy contact person; you can find the contact details at the end of our privacy policy.

Data Processing

Below, you can read about how we process your data, where we store it (or have it stored), the security measures we use, and who has access to the data.

Web Hosting Shopify

We use web hosting and email services from Shopify. Shopify processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services, which is not personal data. Shopify has implemented appropriate technical and organizational measures to prevent data loss and unauthorized use of your personal data. Shopify is bound by a confidentiality agreement.

Office365 For our regular business email communications, we use Office365. This party has implemented appropriate technical and organizational measures to prevent misuse, data loss, and data corruption of both your data and ours. Office365 does not have access to our mailbox, and we treat all our email communications confidentially.

Shipping and Logistics DHL/PostNL/DPD

When you place an order with us, it is our responsibility to deliver your package to you. We use the services of DHL/PostNL/DPD for these deliveries. Therefore, we need to share your name, address, and location details with DHL/PostNL/DPD. DHL/PostNL/DPD uses this data solely for executing the agreement. In case DHL/PostNL/DPD engages subcontractors, they will also provide your data to these parties.

Purpose of Data Processing General Purpose of Processing

We use your data exclusively for the purpose of providing our services. This means that the processing purpose is always directly related to the order you provide. We do not use your data for (targeted) marketing unless you explicitly consent to us using this data to contact you at a later time, other than as requested by you. Your data will not be shared with third parties, except for accounting and other administrative obligations. These third parties are all bound by confidentiality under the agreements between them and us or by a legal oath.

Automatically Collected Data Data automatically collected by our website is processed to further improve our services. This data, such as your IP address, web browser, and operating system, is not considered personal data.

Cooperation with Tax and Criminal Investigations

In certain cases, Colourful Goodies may be legally obligated to share your data due to tax or criminal investigations by governmental authorities. In such cases, we are obliged to share your data, but we will oppose it to the extent allowed by the law.

Data Retention

We will retain your data as long as you are a client of ours. This means we will keep your client profile until you inform us that you no longer wish to use our services. If you notify us of this, we will also consider it a request for forgetting your data. In accordance with applicable administrative obligations, we are required to keep invoices with your (personal) data, which we will retain for as long as the applicable period. However, employees no longer have access to your client profile and the documents we have created based on your order.

Your Rights

Under the prevailing Dutch and European legislation, you, as a data subject, have certain rights regarding the personal data processed by us or on our behalf. Below, we explain these rights and how you can exercise them. To prevent misuse, we typically send copies of your data and data copies only to your already known email address. If you request to receive the data at a different email address or by post, we may ask you to provide identification. We maintain records of handled requests, and for forget requests, we maintain anonymized data. All copies and data copies are provided in the machine-readable data format that we use within our systems. You have the right to file a complaint with the Dutch Data Protection Authority if you believe that we are using your personal data incorrectly.

Right of Access

You have the right to access the data we (or others) process and that relate to your person or are traceable to you. You can make such a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data, with an overview of the processors that hold this data, specifying the category under which we have stored this data.

Right to Rectification

You have the right to have data processed by us (or others) and related to your person or traceable to you amended. You can make such a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted to the email address we have on record.

Right to Restrict Processing

You have the right to restrict the data processed by us (or others) related to your person or traceable to you. You can make such a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data will no longer be processed until you lift the restriction.

Right to Data Portability

You have the right to have data processed by us (or others) related to your person or traceable to you transferred to another party. You can make such a request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you copies of all data about you that we have processed or that have been processed on our behalf by other processors or third parties, to the email address we have on record. In all likelihood, we will no longer be able to continue providing our services in such a case, as the secure linking of data files can no longer be guaranteed.

Right to Object and Other Rights In certain cases, you have the right to object to the processing of your personal data by Colourful Goodies or on our behalf. If you object, we will cease processing the data immediately, pending the handling of your objection. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy contact person.

Cookies

Google Analytics

Our website places cookies from the American company Google as part of the "Analytics" service. We use this service to monitor and receive reports on how visitors use the website. This processor may be required, according to applicable law and regulations, to provide access to this data. We have not allowed Google to use