Privacy Policy

Who we are

Last updated: 17 June 2026

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website, place an order, or otherwise interact with us.

The data controller responsible for your personal data is:

• Alcanside B.V.
• Energieweg 53A, 6541 CW Nijmegen, the Netherlands
• Chamber of Commerce (KvK) number: 91428483
• VAT number: NL865654694B01
• Email: contact@alcanside.com

If you have any questions about this policy or about how we handle your personal data, you can contact us at any time at contact@alcanside.com.

Data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data: your name, email address, phone number, and billing and shipping address.
• Order and transaction data: details of the products you purchase, order history, order status, and related correspondence.
• Payment data: payment information needed to process your purchase. Payments are handled by our payment providers, and we do not store full card numbers on our own systems.
• Account data: if you create an account, your login details and account preferences.
• Device and usage data: information collected automatically when you use our website, such as your IP address, browser type, device information, pages viewed, and similar data gathered through cookies and comparable technologies.
• Communications: the content of messages you send us, for example through email, contact forms, or customer service channels.
• Marketing preferences: your choices about whether you wish to receive marketing communications from us.
• Personalisation data: any personalisation text you supply, such as a name or number to be printed on a product.

How we use it

We use your personal data for the following purposes:

• To fulfil and deliver your orders, including using any personalisation text you supply (such as a name or number) to produce your personalised item.
• To process your payments.
• To provide customer service and respond to your questions.
• To handle returns, exchanges, and warranty claims. Please note that personalised products are made to order and may be treated differently for returns, as explained in our Refund & Returns policy.
• To detect, prevent, and address fraud and other unlawful activity.
• To send you marketing communications, where you have given consent or where otherwise permitted by law.
• To operate, maintain, and improve our website and services.
• To comply with our legal and regulatory obligations.

Marketing emails

We send marketing emails (for example newsletters and offers) only where you have given your consent, or where otherwise permitted by law for existing customers in respect of similar products. Every marketing email includes an unsubscribe link, and you can withdraw your consent at any time. Abandoned-cart and similar automated emails are sent on the basis of consent or a soft opt-in, depending on your region. Transactional emails, such as order confirmations, shipping updates and service messages, are necessary to perform our contract with you and are sent regardless of marketing preferences.

Legal bases

Where the GDPR applies to you, we rely on the following legal bases to process your personal data:

• Performance of a contract: to fulfil your orders, process payments, and provide the products and services you request.
• Legal obligation: to comply with applicable laws, for example tax and accounting rules that require us to keep certain records.
• Legitimate interests: for purposes such as preventing fraud, securing our website, understanding how our services are used, and improving our products, provided your interests and fundamental rights do not override these interests.
• Consent: for sending marketing communications and for placing non-essential cookies. You can withdraw your consent at any time.

Cookies

We use cookies and similar technologies to operate our website, remember your preferences, measure performance, and support advertising. You can manage your preferences for non-essential cookies at any time.

Strictly necessary cookies are always active because the site cannot work without them. Non-essential cookies and marketing pixels, including those used by Google Analytics 4, the Meta Pixel, the TikTok Pixel and Klaviyo, are only set and loaded after you give consent through our cookie banner. You can change or withdraw your consent at any time.

For full details about the cookies we use and how to control them, please see our Cookie Policy.

Sharing & processors

We share your personal data only with trusted partners and service providers, and only to the extent needed to run our business. These include:

• Shopify, our e-commerce platform, which hosts our online store and processes order data on our behalf.
• Payment providers, who process your payments securely.
• Shipping, fulfilment and warehousing partners, who store and deliver your orders. Some of these partners may be located outside the Netherlands.
• Klaviyo, which we use to send transactional and marketing emails.
• Google Analytics 4, which helps us understand how our website is used.
• Meta (Facebook and Instagram), Google and TikTok, which we use for advertising and measurement through pixels and similar technologies.
• Customer service tools, which help us manage and respond to your enquiries.
• Review platforms, which we may use to send review invitations and collect feedback.
• Fraud prevention tools, used by us, our platform or our payment providers to detect and prevent fraudulent activity.
• IT, hosting, analytics and email infrastructure providers, who support the secure operation of our website and communications.

We do not sell your personal data for money. However, our advertising partners (Meta, Google and TikTok) may receive certain data through cookies and pixels for measurement and advertising purposes, including advertising directed at audiences in the United States. Under California and other US state laws, this kind of activity may be considered "sharing" or "selling" of personal information. Please see the US privacy rights section below for more detail and for how to opt out.

International transfers

Some of our service providers are located outside the European Economic Area (EEA), for example in the United States. When we transfer your personal data outside the EEA, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses, to ensure your data continues to receive an adequate level of protection.

Retention

We keep your personal data only for as long as needed to fulfil the purposes described in this policy, and to meet our legal and tax obligations. As a guide, we apply the following retention periods:

• Order and invoice data: 7 years, in line with Dutch tax obligations.
• Customer service communications: typically up to 2 years after our last contact with you.
• Marketing data: until you unsubscribe or withdraw your consent.
• Account data: until you delete your account, or after a period of inactivity.
• Cookie data: according to the lifespan of each cookie, as set out in our Cookie Policy.

Where data is no longer needed, we delete or anonymise it. Where a fixed period is not practical, we determine the retention period using criteria such as the purpose of processing, our legal obligations, and any applicable limitation periods.

Your rights (EU)

If the GDPR applies to you, you have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to request deletion of your data in certain circumstances.
• Restriction: to request that we limit how we use your data.
• Portability: to receive your data in a structured, commonly used, machine-readable format.
• Objection: to object to certain processing, including direct marketing.
• Withdraw consent: to withdraw any consent you have given, at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint: to complain to a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

To exercise any of these rights, please email us at contact@alcanside.com. We may need to verify your identity before responding.

US privacy rights

Depending on your state of residence, and whether the relevant privacy law applies to us, you may have rights under US state privacy laws such as the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and comparable laws in other states. Whether these laws apply can depend on thresholds such as revenue or the volume of consumer data processed. Where they apply, your rights may include:

• Right to know / access: the categories of personal information we have collected about you and, where applicable, access to the personal information itself.
• Right to delete: the personal information we hold about you, subject to certain exceptions.
• Right to correct: inaccurate personal information.
• Right to opt out: of the sale or sharing of your personal information, including sharing for cross-context behavioural advertising or targeted advertising where applicable.
• Right to limit: where applicable, to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

Do Not Sell or Share My Personal Information: where applicable, you can opt out of the sale or sharing of your personal information and of targeted (cross-context behavioural) advertising. You can do this using the "Do Not Sell or Share My Personal Information" link in the footer of our website, by adjusting your cookie preferences, or by emailing us at contact@alcanside.com.

Opt-out preference signals: where required by applicable law, we also honour recognised browser-based opt-out preference signals, such as the Global Privacy Control (GPC).

Residents of US states with applicable privacy laws can exercise their rights using the methods described above, or by contacting us at contact@alcanside.com. We may need to verify your identity before responding.

Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, and alteration. However, no method of transmission over the internet or of electronic storage is 100% secure, and we cannot guarantee absolute security.

Children

Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "last updated" date at the top of this page shows when the latest version took effect. We encourage you to review this policy periodically.

Contact

If you have any questions, requests, or concerns about this Privacy Policy or about how we handle your personal data, please contact us at contact@alcanside.com.