Privacy Policy

Last updated: April 2026

1. Who We Are

This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase on booook-makers.com (the “Website”).
Data controller: Quentin Creuzet
Hellingbaan 312
1033DB Amsterdam
The Netherlands
KVK number: 42036650
Email: info@booook-makers.com

2. What Personal Data We Collect

When you place an order:

  • Full name
  • Email address
  • Shipping address
  • Billing address (if different)
  • Phone number (if provided)
  • Payment information (processed by Stripe; we do not store your credit card details, see Section 5)

When you contact us:

  • Name, email address, and any information you include in your message.

When you visit the Website:

  • Anonymous, aggregated usage data collected through Umami analytics (see Section 6). No personally identifiable information is collected through analytics.

3. Why We Process Your Data (Legal Basis)

We process your personal data only when we have a lawful basis to do so under the General Data Protection Regulation (GDPR):

  • Processing and fulfilling your order (including shipping and payment): necessary for the performance of a contract (Art. 6(1)(b) GDPR).
  • Communicating with you about your order or enquiry: necessary for the performance of a contract or legitimate interest (Art. 6(1)(b)/(f) GDPR).
  • Complying with legal obligations such as tax and accounting records: legal obligation (Art. 6(1)(c) GDPR).
  • Improving our Website through anonymous analytics: legitimate interest (Art. 6(1)(f) GDPR).

We do not use your personal data for marketing purposes unless you have given us explicit consent to do so. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes described above:

  • Order data (name, address, purchase details) is kept for 7 years after the order date, as required by Dutch tax law (fiscale bewaarplicht).
  • Communication records are kept for as long as necessary to resolve the enquiry, and up to 2 years thereafter.
  • Analytics data collected by Umami is anonymous and aggregated. No personal data is stored.

After the retention period, your data is securely deleted or anonymised.

5. Third-Party Services

We use a limited number of third-party services to operate the Website. These parties process personal data on our behalf or as independent data controllers:

Stripe (Payment processing)
When you make a payment, your payment details are handled directly by Stripe, Inc. We do not receive or store your full credit card number. Stripe processes your data as an independent data controller in accordance with their own privacy policy: https://stripe.com/privacy. Stripe is certified under the EU–U.S. Data Privacy Framework.

Postal / courier services
We share your name and shipping address with the postal or courier service used to deliver your order. This data is shared solely for the purpose of delivery.

Umami (Website analytics)
We use Umami, a privacy-focused analytics tool, to understand how visitors use our Website. Umami does not use cookies, does not collect personally identifiable information, and does not track users across websites. All data is aggregated and anonymous. For more information, see https://umami.is.

6. Cookies

Our Website does not use tracking cookies or advertising cookies. Strictly necessary cookies may be set to enable essential Website functionality, such as maintaining your shopping cart during a session. These cookies do not collect personal data and do not require your consent under the Dutch Telecommunications Act (Telecommunicatiewet). Umami analytics does not place any cookies on your device. If our use of cookies changes in the future, we will update this policy and, where required, request your consent before placing any non-essential cookies.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): You may request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction of processing: You may ask us to limit how we use your data in certain circumstances.
  • Right to data portability: You may request to receive your data in a structured, commonly used, machine-readable format.
  • Right to object: You may object to processing based on our legitimate interests.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at info@booook-makers.com. We will respond to your request within one month, as required by law.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These measures include the use of encrypted connections (HTTPS), secure payment processing via Stripe, and restricted access to personal data.

9. International Data Transfers

Your data may be transferred outside the European Economic Area (EEA) in the following circumstances:

  • Stripe may process payment data in the United States. Stripe participates in the EU–U.S. Data Privacy Framework, ensuring an adequate level of data protection.
  • Shipping to destinations outside the EEA requires sharing your name and address with postal services in the destination country.

We ensure that any international transfer of personal data is protected by appropriate safeguards in accordance with the GDPR.

10. Complaints

If you believe that we have not handled your personal data properly, we encourage you to contact us first at info@booook-makers.com so we can try to resolve the issue. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
Autoriteit Persoonsgegevens Website: https://autoriteitpersoonsgegevens.nl Phone: +31 (0)88 1805 250

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available on this page. If we make significant changes, we will notify you by email or through a notice on the Website.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact us at:
Email: info@booook-makers.com
Address: Hellingbaan 312, 1033DB Amsterdam, The Netherlands