Privacy policy

Laura's Play Cotton cares deeply about your privacy. In this privacy policy, you can learn about the data we collect about you, how we use it, with whom we share it, and under what conditions. We also explain how we store your data, how we protect it from misuse, and what rights you have regarding the personal data you provide to us. If you have any questions about our privacy policy, please contact us. You can find our contact details at the bottom of the page.

This privacy policy applies to the use of the website and the services provided by Laura's Play Cotton. We only process data that we need for (improving) our services. Naturally, we handle the information we collect about you with care. We do not provide your data to third parties for commercial purposes.

Data Processing
Below, you can read about how we process your data, where we store it, which security techniques we use, and who has access to the data.

E-commerce Software
Our webshop is developed with software from Shopify. Personal data that you provide to us for our services is shared with this party. Shopify has access to your data to provide us with technical support, ensuring that our webshop continues to operate. They will never use your data for any other purpose. Based on the agreement we have with them, Shopify is required to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. Shopify uses cookies to collect technical information about your use of the software. No personal data is collected and/or stored. Shopify reserves the right to share collected data within its own group to further improve its services.

Web Hosting and Email
We use web hosting and email services from Strato. Strato processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. Strato has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Strato is obligated to confidentiality based on the agreement.

Newsletter
We send our newsletter with Klaviyo. Klaviyo will never use your name and email address for its own purposes. At the bottom of each email sent through our website, you will find the 'unsubscribe' link, allowing you to unsubscribe from our newsletter. You will no longer receive our newsletter. Your personal data is securely stored by Klaviyo. Klaviyo uses cookies and other internet technologies to track whether emails are opened and read. Klaviyo reserves the right to use your data to improve its services.

Payment Platform
For processing (part of) the payments in our webshop, we use the platform Shopify. Shopify processes your name, address details, and your payment details such as your bank account or credit card number. Shopify has taken appropriate technical and organizational measures to protect your personal data. Shopify reserves the right to use your data to improve its services and, in this context, to share (anonymized) data with third parties. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Shopify's services for which they engage third parties. Shopify does not store your data longer than is allowed by law.

Shipping
When you place an order with us and choose shipping, we will have the package delivered to you. We use the services of DHL and Cycloon via ViaTim for this purpose. To deliver the package, it is necessary for us to share your name, address, and place of residence with ViaTim. ViaTim uses this data solely for the purpose of executing the agreement. In case DHL or Cycloon engages subcontractors, DHL or Cycloon also provides your data to these parties.

Accounting
For keeping our administration and bookkeeping, we use Snelstart. We share details regarding your order and, if applicable, your name, address, and place of residence. These data are used for administrating sales invoices. Your personal data is sent and stored securely. Snelstart is obligated to confidentiality and will treat your data confidentially. Snelstart does not use your personal data for other purposes than described above.

Purpose of Data Processing
We only use your data for the purpose of our services. This means that the purpose of the processing is always directly related to the assignment you provide, such as processing a payment, contacting you about your order, or shipping a package. We do not use your data for (targeted) marketing. If you share data with us and we use these data to contact you at a later time – other than at your request – we will ask for your explicit consent. Your data is not shared with third parties, other than for accounting and other administrative obligations. These third parties are all required to confidentiality based on the agreement between them and us, or an oath or legal obligation. The data automatically collected by our website is processed with the aim of improving our services. These data (for example, your IP address, web browser, and operating system) are not personal data.

Cooperation in Tax and Criminal Investigations
In certain cases, Laura's Play Cotton may be required to share your data in connection with tax or criminal investigations by government authorities based on a legal obligation. In such cases, we are obliged to share your data, but we will oppose it within the legal possibilities.

Retention Period
We keep your data for as long as you are a client of ours. This means that we maintain your customer profile until you indicate that you no longer wish to use our services. If you let us know, we will also consider this as a forget request. Based on applicable administrative obligations, we are required to retain invoices containing your (personal) data, so we will keep this data for as long as the applicable term runs. However, employees no longer have access to your client profile and documents we have produced based on your assignment.

Your Rights
Under the applicable Dutch and European legislation, you have certain rights concerning the personal data processed by or on behalf of us. Below, we explain what these rights are and how you can invoke them. In principle, to prevent misuse, we only send copies of your data to your email address already known to us. In case you wish to receive the data at a different email address or by post, we will ask you to verify your identity. We keep a record of handled requests; in the case of a forget request, we administer anonymized data. All copies and excerpts of data are provided in the machine-readable data format we use within our systems. You always have the right to file a complaint with the Dutch Data Protection Authority if you suspect that we are using your personal data incorrectly.

Right of Access
You always have the right to access the data that we (have) process and that relate to you personally or are traceable to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to your known email address, along with an overview of the processors who have these data, specifying the category under which we have stored this data.

Right to Rectification
You always have the right to have the data that we (have) process and that relate to you personally or are traceable to you adjusted. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to your known email address that the data have been adjusted.

Right to Restriction of Processing
You always have the right to restrict the processing of data that relate to you personally or are traceable to you. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to your known email address that the data will no longer be processed until you lift the restriction.

Right to Data Portability
You always have the right to have the data that we (have) process and that relate to you personally or are traceable to you carried out by another party. You can make a request to that effect to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you excerpts or copies of all data about you that we have processed or that have been processed by other processors or third parties commissioned by us to your known email address. In all likelihood, we will no longer be able to continue providing services in such a case, as the secure linking of databases can no longer be guaranteed.

Right to Object and Other Rights
In specific cases, you have the right to object to the processing of your personal data by or on behalf of Laura's Play Cotton. If you object, we will immediately cease processing the data pending the handling of your objection. If your objection is justified, we will provide you with excerpts and/or copies of data that we (have) process and then permanently cease processing. Moreover, you have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe otherwise, please contact our privacy officer.

Changes to the Privacy Policy We reserve the right to change our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects how we process data already collected concerning you, we will inform you by email. The effective date of these terms is 01/06/2020. The publication of a new version renders all previous versions invalid.

Questions
Do you have any questions about our privacy policy? Please contact us.

Our Contact Information
Laura's Play Cotton
Vlaardingweg 62
3044 CK, Rotterdam
Netherlands info@laurasplaycotton.com

Privacy contact
Laura