Verzending & retourneren

Introduction This Privacy Policy describes how LetsGoNuts (“we”, “us”, “our”) processes your personal data when you use LetsGoNuts and purchase our products. We process your data in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy laws. By using our website, you agree to the practices described in this Privacy Policy.

Personal Data We Collect We collect and process the following categories of personal data: 2.1 Data You Provide Directly • Name, address, postal code, city • Email address • Phone number • Account login details (if applicable) • Order details (products purchased, preferences, delivery address) 2.2 Payment Information • Payment method • Transaction details (Processed via secure third-party payment providers; we do not store credit card numbers.) 2.3 Automatically Collected Data • IP address • Browser type and version • Device information • Website usage behavior • Cookies and similar technologies (see Section 9 – Cookies) 2.4 Communication Data • Emails, contact form submissions, customer service interactions

Purpose and Legal Basis of Processing We process personal data for the following purposes: 3.1 To Process Orders • Handling payments • Shipping products • Providing order updates Legal basis: GDPR Art. 6(1)(b) – contract performance. 3.2 Customer Service • Answering questions • Handling returns or complaints Legal basis: Contract performance + legitimate interest. 3.3 Website Functionality & Improvement • Analytics • Security and fraud prevention Legal basis: Legitimate interest (GDPR Art. 6(1)(f)). 3.4 Marketing (Optional) • Email newsletters • Promotions Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw consent at any time. 3.5 Legal Obligations • Tax and accounting requirements Legal basis: GDPR Art. 6(1)(c).

How We Store and Protect Your Data We take appropriate technical and organizational measures, including: • Encrypted connections (SSL) • Secure servers • Access restrictions • Data minimization • Regular security audits We never sell your data to third parties.

Sharing Personal Data We only share your data when necessary for business operations: 5.1 Payment Providers (e.g., iDEAL processors, PayPal, Stripe) 5.2 Shipping Partners (e.g., PostNL, DHL) 5.3 IT & Hosting Providers For website hosting, email services, and maintenance. 5.4 Accounting & Legal Obligations For bookkeeping and compliance with Dutch law. All partners comply with GDPR, and data processing agreements (DPAs) are in place where required.

International Data Transfers If personal data is transferred outside the European Economic Area (EEA), we use: • Standard Contractual Clauses (SCCs) • EU-approved safeguards We ensure all transfers comply with GDPR Chapter V.

Data Retention We keep personal data only as long as necessary for each purpose: • Order & customer data: 7 years (Dutch tax law) • Customer service messages: up to 2 years • Marketing data: until consent is withdrawn • Cookies: see cookie retention in Section 9 After retention periods expire, data is securely deleted or anonymised.

Your GDPR Rights You have the following rights under GDPR: ✔ Right of access ✔ Right to rectification ✔ Right to erasure (“right to be forgotten”) ✔ Right to restrict processing ✔ Right to data portability ✔ Right to object ✔ Right to withdraw consent ✔ Right to lodge a complaint with a supervisory authority (In the Netherlands: Autoriteit Persoonsgegevens) To exercise any rights, contact us at: [Email Address] We respond within 30 days.

Cookies & Tracking Technologies We use cookies for: • Website functionality • Shopping cart operation • Analytics (e.g., Google Analytics, privacy-friendly IP anonymization) • Preferences and user settings You can control cookies via your browser settings or cookie banner. A detailed Cookie Policy can be provided on request.

Children’s Privacy Our webshop is not intended for children under 16. We do not knowingly collect data from minors. Parents may contact us to request deletion of minors’ data.

Automated Decision-Making We do not engage in automated decision-making or profiling that produces legal effects on users.

Changes to This Privacy Policy We may update this Privacy Policy as needed. The latest version will always be available on our website. Continued use of the website means acceptance of the updated policy.