Privacy Policy
Laatst bijgewerkt op 24 oktober 2026. This privacy policy explains which data we process about you, why, who we share it with and what rights you have. It applies to timberdelights.store.
1. Who is responsible
Claassen Trading, trading as Timber Delights
Zandershof 21, 1971 PG IJmuiden, the Netherlands
E-mail: info@timberdelights.store
Chamber of Commerce (KvK) number: 94458243
VAT number: NL005085090B27
We are the controller for the data in this privacy policy. Send questions or requests to info@timberdelights.store.
2. What data we use and why
| Purpose | Gegevens | Legal basis | Retention period |
|---|---|---|---|
| Fulfilling, charging and delivering your order | name, address, email address, phone number (if you fill it in), order, payment status | performance of the contract | 7 years (statutory retention period for accounting records) |
| Your account | name, email address, password (encrypted), addresses, order history | performance of the contract | as long as your account exists; then deleted, except order data (see above) |
| Emails about your order | name, email address, order | performance of the contract | as for the order |
| Asking your opinion about your purchase (one email, 7 days after dispatch) | name, email address, products bought | legitimate interest; you can object by replying to the email | until you object; a review stays online until you ask us to remove it |
| Customer service and contact form | name, email address, order number, your message | legitimate interest | 2 years after the last contact |
| Nieuwsbrief en welkomstmails (alleen als je je inschrijft en dat per mail bevestigt) | e-mailadres, voornaam (als je die opgeeft), taal, waar en wanneer je je inschreef en bevestigde, IP-adres bij inschrijving, of je een mail opent of op een link klikt | toestemming; intrekken kan altijd met de afmeldlink onderaan elke mail | tot je je afmeldt; daarna bewaren we alleen je e-mailadres en het moment van afmelden, zodat we je niet opnieuw mailen |
| Cadeaukaarten | naam en e-mailadres van koper en ontvanger, je persoonlijke bericht, saldo en gebruik | performance of the contract | zolang er saldo op de kaart staat, daarna 7 jaar (administratie) |
| Returns and withdrawals | name, email address, order number, what you return | legal obligation and performance of the contract | 7 years |
| Securing the website and preventing misuse | IP address, browser data, login attempts | legitimate interest | as short as needed for security |
| Statistics (Google Analytics) | pseudonymised: pages visited, device, approximate region | consent through the cookie banner | 14 months |
We sturen je geen nieuwsbrief of reclame zonder dat je daar zelf voor kiest: je schrijft je in en bevestigt dat via een mail. Afmelden kan altijd met één klik onderaan elke nieuwsbrief. We nemen geen besluiten over je die alleen door een computer worden genomen en we verkopen je gegevens niet.
3. Who we share data with
We only share what is necessary, with parties that help us run the shop. We have (processing) agreements with them on security and confidentiality.
| Party | What for | Where |
|---|---|---|
| WooPayments (Automattic) and Stripe | processing payments and preventing fraud | EU and US |
| Intime | delivering your parcel (name, address, phone number, email address) | Netherlands |
| API2Cart | the connection that passes your shipping details to Intime | possibly outside the EU |
| Brevo | e-mails over je bestelling en je account versturen, en de nieuwsbrief | EU (France) |
| Klarna | achteraf betalen, alleen als je die betaalmethode kiest (Klarna is dan zelf ook verantwoordelijk) | EU (Zweden) |
| FastComet | hosting the website and the database | United Kingdom (London) |
| Cloudflare | website security and speed | global network |
| Google (Analytics, Tag Manager) | statistics, only with your consent | EU and US |
| Wordfence (Defiant) | protection against break-in attempts | US |
| UpdraftPlus and Google Drive | website backups | EU and US |
If you buy through bol.com, bol.com is responsible for that order and bol.com's privacy policy applies. We do not share customer data from the website with bol.com.
4. Data outside the European Union
Some parties process data outside the EU. The United Kingdom has an adequacy decision from the European Commission. For the US, we use parties that are certified under the EU-US Data Privacy Framework or we work with the European Commission's standard contractual clauses.
5. Cookies
We only set cookies that the shop needs to work, such as your bag and your login. We only set Google's analytics cookies after you give consent in the cookie banner. You can change your choice at any time via cookie settings. Exactly which cookies we use is listed in the cookie policy.
6. Security
The website uses an encrypted connection (https). Payment details go straight to the payment service. We protect the website with a firewall, keep software up to date and make daily backups. Only people who need it for their work can access your data.
7. Your rights
You have the right to access your data, have it corrected or deleted, have processing restricted, object, and receive your data in a common file format. If you have given consent, you can withdraw it at any time. Send your request to info@timberdelights.store. We respond within one month. To prevent misuse, we may ask you to show that the data is yours.
If you disagree with how we handle your data, please let us know first. You can also file a complaint with the Dutch Data Protection Authority.
8. Changes
We update this privacy policy when the way we work changes. The date at the top shows when it was last updated.