Legal
Privacy Policy
Last updated: 1 April 2025
1. Who We Are
Crochetty is a handcrafted crochet boutique based in the Netherlands, operating the online store at crochetty.com. For the purposes of the General Data Protection Regulation (GDPR) we are the data controller of your personal information. You can reach us at info@crochetty.nl.
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: first name, last name
- Contact data: email address, phone number (optional)
- Delivery data: shipping address, city, postcode, country
- Transaction data: order details, payment status (we do not store card numbers)
- Marketing data: newsletter subscription preferences
- Technical data: IP address, browser type, pages visited (via Cloudflare analytics, anonymised)
3. Why We Process Your Data
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Sending order confirmation and shipping emails | Contract performance |
| Sending our newsletter (if subscribed) | Consent |
| Customer service and enquiries | Legitimate interests |
| Fraud prevention and security | Legitimate interests |
| Compliance with tax and accounting obligations | Legal obligation |
4. Third-Party Processors
We share your data only with trusted processors necessary to operate our service:
- Mollie B.V. (payment processing) — processes payment data on our behalf. Mollie is PCI-DSS certified. Privacy policy: mollie.com/en/privacy
- Resend (transactional email) — delivers order confirmation and shipping emails. Privacy policy: resend.com/privacy
- Cloudflare, Inc. (hosting & CDN) — serves and protects our website. Cloudflare processes technical data (IP addresses) in accordance with its privacy policy: cloudflare.com/privacypolicy
We do not sell your personal data to third parties.
5. Data Retention
- Order data is retained for 7 years to comply with Dutch and EU tax and accounting obligations.
- Newsletter subscriptions are retained until you unsubscribe. You can unsubscribe at any time via the link in any marketing email.
- Customer account data is retained until you request deletion of your account.
- Enquiry data is retained for up to 2 years and then securely deleted.
6. Your Rights Under GDPR
Under the General Data Protection Regulation you have the following rights:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete data.
- Right to erasure ('right to be forgotten'): ask us to delete your data where there is no compelling reason for continued processing.
- Right to portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at info@crochetty.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies
We use essential cookies for shopping cart and session functionality. We do not use advertising or tracking cookies. For more information, see our cookie notice on the website.
8. Contact
If you have any questions about this Privacy Policy, please contact us:
Crochetty
Email: info@crochetty.nl