Privacy Policy
This page is a draft and has not yet been reviewed by a legal professional. Details are subject to change.
This policy explains what personal data we collect, why, and what rights you have.
What we collect
Contact-form submissions (name, email, message), feedback-widget messages (your message, the page you were on, and your account if signed in), account details if you create one (email, order history), and (only if you accept cookies) anonymised analytics about how you use the site.
Why we process it
To fulfil orders and respond to enquiries (contract/legitimate interest), and to improve the site (consent, for analytics only).
How long we keep it
Order and account data is kept for as long as your account is active plus any period required by Dutch tax law. Contact-form messages are kept only as long as needed to resolve your enquiry.
Your rights
Under the GDPR (AVG) you can request access to, correction of, or deletion of your personal data, and can object to or restrict our processing of it. Contact us to exercise any of these rights.
Who's responsible
Needsum B.V., [Registered address], [Postal code] [City]. For privacy questions, visit our Contact page.
Third parties
We use Firebase (Google) for authentication, data storage, and (with your consent) analytics. Google may process data outside the EU under its standard contractual clauses.
International transfers
Where data is transferred outside the EU/EEA (for example to Google's infrastructure), it is done under appropriate safeguards such as the EU Standard Contractual Clauses.