Data & Privacy Policy

Last updated: 31/08/2026

At Handmade by Coelsige, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR/AVG) and applicable Dutch law.

1. Controller & Contact Details

  • Handmade by Coelsige
    Kelsey Yurkow (artist alias: Coelsige)
    KvK Number: 98079913
    Email: info@handmadebycoelsige.com
    Address:     (not a visiting address)
    Rietganslaan 18
    1343 AP, Almere, the Netherlands

2. Personal Data We Collect

When you interact with our webshop, we process the following personal data:

  • Identification & Contact Details: Name, delivery address, billing address, email address, phone number).
  • Order Information: Products purchased, order number, transaction value, payment status.
  • Payment Data: Processed securely via our payment service providers (e.g, Shopify Payments). We never store or have access to your full credit card or bank details.
  • Communication Data: Messages reviews, or inquiries sent via our contact form or email.
  • Technical & Device Data: IP address, browser type, device information, and site interaction data collected via essential cookies.

3. Purpose & Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance (Art. 6(1)(b) GDPR): To process, fulfill, and deliver your orders, and communicate regarding transactions.
  • Legal Obligation (Art. 6(1)(c) GDPR): To comply with Dutch statutory tax and administrative obligations.
  • Legitimate Interest (Art. 6(1)(f) GDPR): To secure, optimize, and improve our webshop functionality and customer service.
  • Consent (Art. 6(1)(a) GDPR): For sending promotional newsletters or non-essential cookies, where you have given explicit consent.

4. Sharing of Personal Data & International Transfers

To process your order, we share necessary personal data with trusted service providers acting as processors:

  • Hosting & E-commerce Platform: Shopify Inc.
  • Payment Service Providers: Shopify Payments.
  • Postal & Delivery Services: PostNL
  • Email Services: Our newsletter provider (only upon explicit opt-in)

Some service providers (such as Shopify) process data outside the European Economic Area (EEA), primarily in Canada and the United States. Such transfers are safeguarded using legal transfer mechanisms approved by the European Commission, such as Standard Contractual Clauses (SCCs) and Data Privacy Framework certifications.

5. Data Retention

We retain your personal data only for as long as necessary:

  • Financial & Order Records: Retained for 7 years to comply with the Dutch statutory tax retention obligation (Art. 52 Algemene wet inzake rijksbelastingen).
  • Customer Support Communications: Retained for up to 2 years after resolution to handle follow-up queries.
  • Newsletter Subscriptions: Retained until you withdraw consent or unsubscribe.
  • Technical Logs & Essential Cookies: Retained for maximum 30 days unless required for security investigations.

6. Your Rights Under the GDPR

As a data subject under the GDPR (AVG), you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Restriction: Request to suspend processing of your data under certain conditions.
  • Right to Erasure: Request deletion of your personal data when it is no longer legally required.
  • Right to Data Portability: Request transfer of your data to yourself or another controller in a structured format.
  • Right to Object: Object at any time to processing based on our legitimate interest.
  • Right to Withdraw Consent: Withdraw your consent for marketing communications at any time via the unsubscribe link in our emails.

To exercise any of these rights, please send an email to info@handmadebycoelsige.com, where you can expect a response within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via their website: https://autoriteitpersoonsgegevens.nl.

7. Cookies & Tracking Technologies

We use functional (essential) cookies necessary for website operation, cart management, and secure checkout. We do not use non-essential tracking or marketing cookies without obtaining your prior explicit consent via our cookie banner.

8. Data Security & Breach Notification

We implement technical and organizational measures (including SSL/HTTPS encryption) to safeguard your personal data. In the unlikely event of a security breach that poses a high risk to your rights, we will notify affected users and the Dutch Data Protection Authority without undue delay and within 72 hours of becoming aware of the incident.