Privacy Policy
What we collect, why, who we share it with, and the choices you have — in plain English.
Effective date: September 21, 2026 Last updated: September 21, 2026
1. Who we are
Printhuis, a sole proprietorship registered in the Netherlands at Nieuwe Ginnekenstraat 1A, 4811 NM Breda, Netherlands (KvK 86363425), is the controller of the personal information described here. Contact: [email protected].
2. Summary — notice at collection
| Category | Examples | Purpose | Sold or shared? | Kept for |
|---|---|---|---|---|
| Identifiers | Name, email, shipping address, phone, IP address | Fulfil and deliver orders, support, security | Shared with advertising partners (identifiers such as hashed email) for cross-context behavioral advertising — opt out on Your Privacy Choices | 7 years (orders); until deleted (accounts) |
| Commercial information | Orders, products viewed, cart contents | Orders, recommendations, analytics | No | 7 years |
| Internet or network activity | Pages visited, device and browser, referring site, cookies | Site analytics, advertising measurement | Shared with Meta and Pinterest for advertising — opt out on Your Privacy Choices | Per vendor defaults, typically 2–26 months |
| Approximate geolocation | Country and region derived from your IP address | Show shipping availability, fraud prevention | No | Session |
| Payment information | Card or wallet details | Process payments | No — handled by Stripe, PayPal or Amazon Pay; never stored by us | Not stored by Printhuis |
We do not collect sensitive personal information and we do not knowingly sell personal information for money.
3. What we collect and from where
From you: what you type into our forms (checkout, account, contact, reviews, newsletter). From your device: technical data and cookies when you browse. From our partners: payment confirmation from Stripe, PayPal or Amazon Pay, and production and delivery status from Gelato and its carriers.
4. Why we use it and our legal bases
- To perform our contract with you — take, produce and deliver orders, handle guarantee claims (GDPR art. 6(1)(b)).
- To comply with legal obligations — tax and bookkeeping records (art. 6(1)(c)).
- For our legitimate interests — securing the site, preventing fraud, understanding how the shop is used, and measuring advertising (art. 6(1)(f)).
- With your consent — marketing emails and, where required, cookies (art. 6(1)(a)). You can withdraw consent at any time.
5. Who we share it with
- Stripe, PayPal and Amazon Pay — payments and fraud screening
- Gelato and its carriers (UPS, USPS, FedEx) — printing and delivery
- Brevo — transactional and marketing email
- Cloudflare and Hetzner — hosting, security, cookieless analytics
- Google — Analytics, Address Validation
- Meta and Pinterest — advertising and measurement
- Reviews.io — reviews, only if we enable it
Data is processed in the European Union and the United States. Each vendor is bound by a data-processing agreement and only processes data for the purposes above.
6. Cookies and tracking technologies
We use necessary cookies (cart, session, security), analytics cookies (Google Analytics) and advertising cookies and pixels (Meta, Pinterest, Google Ads). US visitors see a short notice on their first visit and can opt out of analytics and advertising at any time on Your Privacy Choices. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out and treat the older Do Not Track signal the same way.
7. Sale, sharing and targeted advertising
Some US laws call it a "sale" or "sharing" when a website lets advertising partners collect data about you for ads shown elsewhere. Our Meta and Pinterest tags do that. You can opt out on Your Privacy Choices or by turning on GPC in your browser. When you have opted out and a pixel still fires for measurement, we send Meta the Limited Data Use flag, which restricts how Meta may use the data.
8. Retention
Orders and invoices: 7 years (Dutch tax law). Accounts: while your account is active. Marketing: until you unsubscribe. Analytics: per vendor defaults. Support emails: 2 years.
9. Your rights
Everyone: under the GDPR you may access, correct, delete, restrict or object to processing of your data, receive a copy in a portable format, and withdraw consent. Email us and we respond within one month.
US state privacy rights
If you live in a US state with a comprehensive privacy law (including California, Virginia, Colorado, Connecticut, Texas, Oregon and others), you have the right to know and access the personal information we hold, to delete it, to correct it, to receive it in a portable format, to opt out of sale, sharing and targeted advertising, and not to be discriminated against for exercising these rights. Submit a request on Your Privacy Choices or by email. We verify requests by matching the email address on your orders (and may ask for an order number); an authorized agent may submit on your behalf with your written permission. We respond within 45 days, extendable once by 45 days when reasonably necessary. If we deny your request you may appeal by replying to our response; we answer appeals within 45 days and tell you how to contact your state attorney general if you disagree.
California
In the last 12 months we collected the categories listed in section 2 and disclosed identifiers and internet activity to advertising partners as described in section 7. We do not sell sensitive personal information, do not use or disclose sensitive personal information beyond what is needed to provide our services, and do not offer financial incentives in exchange for personal information.
Virginia, Colorado, Connecticut, Texas, Oregon and other states
You have the rights listed above, including the right to appeal a denied request as described. Nothing in this policy limits rights your state gives you.
10. Children
Our site is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us data, email us and we will delete it.
11. Security
All traffic is encrypted (TLS), payment details never touch our servers, access to order data is limited to people who need it, and our hosting is protected by Cloudflare.
12. International transfers
We are based in the EU and serve customers in the US, so data moves between the two. Transfers from the EU rely on the European Commission's standard contractual clauses or the vendor's certification under the EU-US Data Privacy Framework.
13. Changes to this policy
We update this page when our practices change and adjust the dates at the top. Significant changes are announced on the site.
14. Contact and supervisory authority
Privacy questions: [email protected]. You may also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in your EU member state.
Questions?
Email [email protected].
Printhuis · Sole proprietorship registered in the Netherlands · Nieuwe Ginnekenstraat 1A, 4811 NM Breda, Netherlands · KvK 86363425 · VAT NL004234167B87