Privacy statement

Which data we process

Contact details: name, business email address, phone number (if provided) and company details such as company name, Chamber of Commerce and VAT number.

Request and order details: products, quantities, print, logos and designs, configurator previews, delivery and invoice addresses, preferred delivery date, messages and print proofs.

Account details: email address, an encrypted password, your role within your company and your notification preferences.

Contact messages: what you send us via the contact form or by email, including attachments.

Technical data: what is needed to run the website securely, such as your IP address in server logs and the cookies listed in the cookie statement.

What we use it for

To process your request, prepare a quote and print proofs, produce and deliver your order and invoice it. Legal basis: performance of the contract or steps prior to it.

To manage your account and keep you informed by email about your request. Legal basis: performance of the contract.

To keep our accounts. Legal basis: legal obligation.

To answer your question via the contact form and keep the website secure. Legal basis: our legitimate interest.

To inform you about new products at most once a month, only if you choose to. Legal basis: consent, which you can withdraw at any time.

Who we share data with

We never sell your data. We only share it where necessary for the order or for the website to work:

Production and logistics partners: they receive the data needed to make and deliver your order, such as the logo, the print proof and the delivery address.

Service providers that run the website and email: website hosting, a database and file storage in the European Union (Frankfurt), and Microsoft 365 for email. We have agreements with these parties on the security and confidentiality of your data.

Where a service provider processes data outside the European Economic Area, this is based on the European Commission's standard contractual clauses or a comparable safeguard.

How long we keep data

Quotes, orders, invoices and related data are kept for 7 years because of the statutory retention obligation.

We keep your account until you delete it. Your company's requests and orders are then retained for the records.

A quote list without an account is deleted after 180 days without use. Contact messages are kept for a maximum of 2 years.

Security

We protect your data with appropriate measures. Logos, print proofs and quotes are kept in protected storage and can only be opened via a temporary, personal link. Passwords are stored encrypted.

Your rights

You have the right to access, correct or delete your data, to object to processing, to restrict processing and to data portability. You can change much of your data yourself in My account; for anything else, email contact@beyondmerchandise.com. We respond within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may amend this privacy statement. The date at the top shows which version applies.