Privacy policy

Last updated: 1 November 2026

1. Who is responsible for your personal data?

The controller responsible for the personal data described in this Privacy Policy is:

Burgzorg Service, trading as Shailodesigns
Hertogs Wetering 7
1509 KJ Zaandam
The Netherlands

Dutch Chamber of Commerce number: 60734523
Email address: info@shailodesigns.nl
Website: https://shailodesigns.nl

Shailodesigns has not appointed a separate Data Protection Officer. If you have any questions about privacy, you can contact us using the email address above.

2. When does this Privacy Policy apply?

This Privacy Policy applies when you:

  • visit our website;

  • place an order;

  • use a customer account;

  • personalise a product;

  • upload a design, photograph, logo, text or other file;

  • contact us;

  • submit a return, cancellation or warranty request;

  • subscribe to newsletters or other commercial communications;

  • use Shop, Shop Pay or other connected Shopify services;

  • use our products or services in any other way.

3. What personal data do we process?

Depending on how you use our online store, we may process the following information.

Contact and identification information

  • first and last name;

  • company name, where applicable;

  • billing and delivery address;

  • email address;

  • telephone number.

Order and transaction information

  • order number;

  • ordered products and product options;

  • sizes, colours, quantities and personalisation choices;

  • payment status and payment method used;

  • shipping and Track & Trace information;

  • returns, cancellations, refunds and complaints;

  • invoicing and tax information.

We do not normally receive your full payment-card details. These are processed by your selected payment service provider.

Information for personalised products

  • uploaded designs, photographs, logos and images;

  • names and text incorporated into a design;

  • dimensions, colours and positioning;

  • digital previews;

  • production and print files;

  • comments and production instructions.

Technical and usage information

  • IP address;

  • browser and device information;

  • operating system;

  • language and time-zone settings;

  • cookie and privacy preferences;

  • pages visited and products viewed;

  • shopping-cart and checkout information;

  • date and time of website visits;

  • information used for security and fraud prevention;

  • interactions with our online store, Shopify, Shop and connected services.

Communications and marketing information

  • emails, contact forms and customer-service messages;

  • complaints and return enquiries;

  • photographs supplied with messages;

  • newsletter subscriptions and consent records;

  • unsubscribes and marketing preferences;

  • delivery, opening and engagement information relating to marketing communications;

  • review invitations and related order references.

We receive most information directly from you. We receive certain technical, payment, delivery, marketing and fraud-prevention information through Shopify, apps, payment service providers and carriers.

4. Why do we process personal data?

Performance of a contract

We process personal data to:

  • receive and process orders;

  • design and produce personalised products;

  • convert supplied files into production or print files;

  • process payments;

  • package and deliver orders;

  • provide Track & Trace information;

  • process returns, cancellations and refunds;

  • provide customer service and statutory warranty support.

The legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.

Legal obligations

We retain certain invoicing, payment and order information to comply with tax, accounting and other legal obligations.

Legitimate interests

Where consent is not legally required, we may process information for our legitimate interests, including:

  • securing our online store;

  • preventing fraud and misuse;

  • resolving technical problems;

  • improving our products and services;

  • handling complaints;

  • establishing, exercising or defending legal claims;

  • measuring customer satisfaction;

  • sending neutral review invitations;

  • maintaining limited business and usage statistics.

We balance these interests against your privacy interests and rights.

Consent

We request consent where this is legally required, including for:

  • non-essential cookies and similar technologies;

  • certain analytics, personalisation and advertising purposes;

  • newsletters sent to individuals who are not yet customers;

  • publicly displaying a design, photograph or finished product as an example of our work.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Uploaded designs and files

We use DORO Custom Product Designer by SetuBridge for product personalisation.

This application allows you to upload images, photographs, logos, text and other files. These files may contain personal data.

We use these files to:

  • create and check your design;

  • assess its technical suitability;

  • produce your order;

  • create a digital preview;

  • handle complaints or repeat orders.

Do not upload information that is unnecessary for the product, such as identity documents, Dutch citizen service numbers, medical information, payment information or other confidential information.

If you use another person’s personal data, such as their name or portrait photograph, you are responsible for ensuring that you are legally permitted to provide and use that information.

We will not publish your design, photograph or finished product on our website, social media or in advertising without separate consent.

More information about SetuBridge is available at:
https://www.setubridge.com/privacy-policy/

6. Shopify, Shop and Shopify Network Intelligence

Our online store is hosted and technically operated through Shopify.

Shopify processes website, device, customer, order and transaction information to provide the online store, checkout, payments, security and other Shopify services.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our online store. This allows Shopify to combine information about interactions with our store with information from other Shopify services and other online stores to provide enhanced services.

These services may be used for:

  • security and fraud prevention;

  • improving Shopify and merchant services;

  • personalising the shopping experience;

  • analysing store and advertising performance;

  • displaying more relevant content and advertisements;

  • understanding how customers interact with our online store and advertisements.

For customers in the European Economic Area, Shopify uses information for non-essential personalisation and advertising only in accordance with applicable consent and privacy choices.

Shop and Shop reminders

Eligible Shop users may receive email or push notifications from Shopify concerning:

  • an abandoned shopping cart;

  • previously viewed products;

  • price reductions;

  • products that are back in stock.

These reminders may be based on activity in our online store or in the Shop app. Shopify manages these messages and the related privacy and notification settings.

More information:

  • Shopify Consumer Privacy Policy

  • Shopify Privacy Portal

You can change your cookie preferences through our cookie banner. Shop users can also manage certain preferences through their Shop account.

7. With whom do we share personal data?

We do not sell your personal data.

We share information only when this is necessary to provide our services, when a valid legal basis exists or when we are legally required to do so.

Shopify

Shopify processes information for hosting, checkout, payments, security, Shop, Shop Pay, Shopify Messaging and other enabled Shopify services.

SetuBridge

SetuBridge processes design and usage information for DORO Custom Product Designer. SetuBridge is based in India and may process information there.

Klaviyo

We use Klaviyo for newsletter subscriptions, double opt-in, email marketing and managing marketing preferences.

Klaviyo may process information including:

  • name;

  • email address;

  • newsletter subscription status;

  • consent and unsubscribe information;

  • email sending, delivery and engagement information;

  • order and customer information when synchronised with Klaviyo.

More information:
https://www.klaviyo.com/legal/privacy

Payment service providers

Payments are processed by Shopify Payments and/or the payment service provider you select during checkout. These parties may process payment, identification, device and fraud-prevention information.

PostNL and other carriers

To deliver or return orders, we may share your name, address, email address, telephone number, shipping information and order reference with PostNL or another carrier used for the shipment.

Trustpilot

When we use automated review invitations, we may share your name, email address and order number with Trustpilot.

Trustpilot acts as a processor for the invitation service. If you independently post a public review or use a Trustpilot account, Trustpilot processes that information for its own purposes in accordance with its privacy policy.

More information:
https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

Other service providers

We may share information with service providers for:

  • email and customer service;

  • administration and accounting;

  • hosting and technical support;

  • security and fraud prevention;

  • translation and localisation;

  • legal or financial advice.

Public authorities

We may share personal data with the Dutch Tax and Customs Administration, police, supervisory authorities, courts or other competent authorities where we are legally required to do so.

8. Transfers outside the European Economic Area

Some service providers may process information outside the European Economic Area. This includes certain Shopify group companies, Klaviyo and SetuBridge in India.

A transfer will take place only where a valid legal basis and, where required, an appropriate transfer mechanism are in place. This may include:

  • an adequacy decision of the European Commission;

  • the EU–US Data Privacy Framework;

  • the European Commission’s Standard Contractual Clauses;

  • Binding Corporate Rules;

  • another safeguard permitted by law.

You may contact info@shailodesigns.nl to request more information about the safeguards applicable to a specific transfer.

9. Retention periods

We do not retain personal data for longer than necessary, unless a statutory retention obligation or legal dispute requires a longer retention period.

In principle, we use the following retention periods:

  • invoices and tax records: 7 years;

  • order information forming part of our statutory records: 7 years;

  • production and design files: no longer than 12 months after completion of the order, unless longer retention is required for a complaint, repeat order or legal dispute;

  • customer-service, complaint and return correspondence: no longer than 2 years after the matter has been resolved, unless longer retention is necessary;

  • customer accounts: for as long as the account remains active or until you request deletion, except for information we are legally required to retain;

  • newsletter information: until you unsubscribe;

  • consent, unsubscribe and sending records: for as long as necessary to demonstrate that marketing communications were sent lawfully;

  • cookie preferences and technical security information: for as long as necessary to manage preferences, security, fraud prevention or incidents.

Service providers may retain information in accordance with their own legal obligations and retention periods.

When information is no longer required, it will be deleted, anonymised or made inaccessible.

10. Cookies and similar technologies

Our online store uses cookies and similar technologies.

Essential cookies

Essential cookies are used for purposes including:

  • the shopping cart;

  • checkout and payments;

  • security;

  • language and privacy preferences;

  • customer accounts.

Consent is not required for strictly necessary cookies.

Non-essential cookies

Where legally required, we request consent for non-essential analytics, personalisation and marketing cookies.

These technologies may be used for:

  • website analytics;

  • performance measurement;

  • additional preferences;

  • personalised content;

  • marketing and advertising;

  • external components, such as a Trustpilot widget;

  • Shopify Network Intelligence and enhanced Shopify services.

You can refuse your selection or change it later using the Cookie Preferences link in the footer of our website.

Refusing non-essential cookies does not prevent you from placing a regular order.

11. Newsletters, marketing and review invitations

We send electronic marketing communications when:

  • you have given your prior consent; or

  • you are already a customer and the communication concerns our own similar products or services, where permitted by law.

When we collect your email address, you will be informed about the purpose of the subscription. Newsletter subscriptions may be verified using a double opt-in process.

You can unsubscribe free of charge at any time using the unsubscribe link in the message or by contacting info@shailodesigns.nl.

If you object to direct marketing, we will stop sending it to you.

Service communications relating to an order, payment, delivery, return, warranty or account are not marketing communications and may remain necessary for the performance of the contract.

Following an order, we may, where permitted by law, send a neutral invitation asking you to review our services. You may object to receiving future review invitations.

12. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

These measures include:

  • secure Shopify connections;

  • access security and account controls;

  • restricted access to customer and design information;

  • security and fraud-prevention measures;

  • reviews of installed apps and access permissions;

  • service providers that apply appropriate security measures.

No digital system is completely free from risk. If a security incident occurs, we will act in accordance with the applicable notification and information obligations.

13. Your privacy rights

Depending on the circumstances, you have the right to:

  • access your personal data;

  • have inaccurate personal data corrected;

  • have your personal data deleted;

  • restrict the processing of your personal data;

  • object to processing;

  • object to direct marketing;

  • receive your information in a portable format;

  • withdraw your consent;

  • request information about international transfers;

  • lodge a complaint with a supervisory authority.

You can submit a request by emailing info@shailodesigns.nl.

Please provide sufficient information to clarify which personal data your request concerns. We may request additional information to verify your identity. Do not send a copy of your complete identity document unless we specifically request appropriate information from you.

We will generally respond to a request within one month. For a complex request or multiple requests, this period may be extended in accordance with the GDPR. You will be informed of any extension within the first month.

Some information cannot be deleted immediately if we still require it for statutory records, fraud prevention, a legal dispute or another valid legal basis.

14. Automated decision-making

Shailodesigns does not itself make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Shopify, payment service providers and fraud-prevention services may perform automated checks to assess payments, security risks and potential fraud. Depending on the processing concerned, these parties may be independently responsible for that processing.

15. Children

Our online store is not specifically directed at children under the age of 16.

We do not knowingly collect personal data from children where consent from a parent or legal representative is required and has not been provided.

Do you believe that a child has provided personal data to us without valid consent? Please contact us at info@shailodesigns.nl.

16. Complaints

Do you have a complaint about how we process personal data? Please contact us at info@shailodesigns.nl so that we can investigate your complaint.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

https://www.autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap

17. Changes

We may update this Privacy Policy when our online store, apps, business operations, legal obligations or data-processing activities change.

The latest version will be published on shailodesigns.nl. Where legally required, we will inform the individuals concerned of significant changes.