We value your privacy. That's why we only process data we need for (improving) our services, and we handle the information we collect about you and your use of our services with care.

This privacy policy applies to the use of the website and the associated services of Tinyroots.nl. It describes what information we collect about you, what this information is used for, and with whom and under what conditions this information may be shared with third parties.

It also explains how we store your data, how we protect your data against misuse and what rights you have with regard to the personal data you provide to us.

About data processing

Below you can read how we process your data, where we store it (or have it stored), which security techniques we use and who has access to the data.

Web store software: Shopify

This online store is developed using Shopify software. Personal data you provide to us for our services will be shared with this party. Shopify has access to our data to provide us with (technical) support; they will never use your data for any other purpose. Shopify is obligated to implement appropriate security measures under our agreement with them. Shopify uses cookies to collect technical information regarding your use of the software; no personal data is collected or stored.

Email and mailing list: MailChimp

We send our email newsletters with MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically through our website, you'll see an unsubscribe link. If you click this link and confirm your unsubscribe, you will no longer receive the newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies that track whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and, in that context, to share information with third parties.

Payment provider: Mollie

We use the Mollie platform to process iDeal payments in our online store. Mollie processes your name, address, and city of residence, as well as your payment information, such as your bank account number, so that, based on a legal obligation, thorough customer due diligence can be conducted prior to Mollie providing its services.

Purpose of data processing

We use your data solely for the purposes of providing our services. This means that the purpose of processing is always directly related to the order you place/the purchase you make. We do not use your data for (targeted) marketing. If you share data with us and we use it to contact you at a later date—other than at your request—we will ask for your explicit consent.

Your data will not be shared with third parties, except to comply with accounting and other administrative obligations. These third parties are all obligated to maintain confidentiality under the agreement between them and us, an oath, or a legal obligation.

Automatically collected data

Data automatically collected by our website is processed to further improve our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.

Cooperation with tax and criminal investigations

In certain cases, we may be legally obligated to share your data in connection with government tax or criminal investigations. In such a case, we are forced to share your data, but we will object to this within the limits of the law.

Retention periods

We retain your data for as long as necessary for the purpose for which it was collected, unless you request its deletion sooner. You can request to have your customer data deleted from our system at any time by sending an email to info@tinyroots.nl.

Based on applicable administrative obligations, we must retain invoices containing your (personal) data for as long as the applicable term runs.

Your rights

Under applicable Dutch and European legislation, you, as a data subject, have certain rights with regard to the personal data processed by or on behalf of us.

Below you can see what these rights are and how you can invoke these rights.

In principle, to prevent misuse, we only send copies of your data to the email address we already have on file. If you wish to receive the data at a different email address or, for example, by mail, we will ask you to identify yourself. We maintain a record of processed requests. In the event of customer data deletion, we store anonymized data. You have the right to file a complaint with the Dutch Data Protection Authority at any time if you suspect that we are misusing your personal data.

Right of inspection

You always have the right to access the data you provide that we (have) process and that relates to you personally or can be traced back to you. You can submit a request to this effect by sending an email to info@tinyroots.nl. You will receive a response to your request within 30 days.

If your request is granted, we will send you a copy of all data we have on file to the email address we have on file.

Right to restriction of processing

You always have the right to restrict the data we process (or have processed) that relates to you personally or can be traced back to you. You can submit a request to this effect by sending an email to info@tinyroots.nl. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data will no longer be processed until you lift the restriction.

Right to object and other rights

You have the right to object to the processing of your personal data by or on behalf of Tinyroots.nl in certain circumstances. If you object, we will immediately cease processing your data pending the resolution of your objection. If your objection is justified, we will provide you with copies of the data we process (or have processed) and then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling.

Cookies: Shopify

To prevent you from losing the contents of your shopping cart, the webshop uses temporary cookies.

Third-party cookies

In the event that third-party software uses cookies, this is stated in this privacy statement.