Privacy Policy

Last updated: June 2026

1. Who We Are

Switch It Up! is an eenmanszaak (sole proprietorship) registered in the Netherlands. We operate the website switchitup.shop and are the data controller for personal data collected through this website.

• Address: Lijndraaier 39, 1625 ZL Hoorn, the Netherlands
• Email: info@switchitup.shop
• KVK: 42077404
• BTW-id: NL005476302B25

2. What Data We Collect

Order data — When you place an order, we collect:

• Name and delivery address
• Email address
• Phone number (if provided)
• Payment information (processed securely by Mollie; we never see or store your card details)

Technical data — When you visit our website, our hosting provider automatically logs your IP address, browser type, operating system, and pages visited. This data is used for website security and performance and is not linked to your identity.

3. Why We Collect It (Purposes)

We use your data to:

• Process and deliver your order
• Send order confirmations and shipping updates
• Handle returns and customer service requests
• Detect and prevent fraud
• Comply with legal obligations (tax, accounting)
• Maintain the security and performance of our website

We do not use your data for marketing, profiling, or automated decision-making.

4. Legal Basis (GDPR Article 6)

We process your data on the following legal grounds:

• Contract performance (Art. 6(1)(b)) — processing necessary to fulfil your order.
• Legal obligation (Art. 6(1)(c)) — retaining financial records as required by Dutch tax law.
• Legitimate interest (Art. 6(1)(f)) — website security, fraud prevention, and service improvement, balanced against your rights and freedoms.

5. Third Parties & Data Processors

We share your data only with parties necessary to fulfil your order or operate our business. We have data processing agreements (verwerkersovereenkomsten) in place with each processor.

• Mollie (Netherlands) — payment processing
• Shipping carriers (EU) — order delivery (name and address only)
• Hetzner (Germany) — website and server hosting
• Resend (United States) — transactional email (order confirmations, shipping updates)
• Zoho (EU data centre) — business email correspondence
• Moneybird (Netherlands) — invoicing and accounting

We do not sell, rent, or trade your personal data to any third party.

6. International Data Transfers

Most of our data processors are based in the EU/EEA. Our transactional email provider Resend is based in the United States; data transfers to Resend are protected by EU Standard Contractual Clauses (SCCs). The data shared with Resend is limited to email address, name, and order details necessary to deliver transactional messages.

7. Data Retention

We keep order and financial data for 7 years as required by Dutch tax law (Algemene wet inzake rijksbelastingen). Technical server logs are automatically deleted after 30 days. All other personal data is deleted when it is no longer needed for its original purpose.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Encrypted connections (HTTPS/TLS) for all website traffic
• Secure, access-controlled servers hosted within the EU
• Limited access to personal data on a need-to-know basis

9. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (where legally permitted)
• Restriction — restrict processing in certain circumstances
• Objection — object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format
• Complaint — file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, email info@switchitup.shop. We will respond within 30 days.

10. Cookies

This website uses only essential (functional) cookies that are strictly necessary for the website to operate. These include:

• Session cookie — maintains your browsing session and shopping cart. Deleted when you close your browser.
• Cookie preference — remembers that you have been informed about cookies. Expires after 12 months.

We do not use tracking, analytics, or advertising cookies. Because we only use strictly necessary cookies, no consent is required under the Dutch Telecommunicatiewet (Art. 11.7a).

11. Changes

We may update this policy from time to time. The latest version is always available on this page with the date of the last update shown at the top.