Privacy policy

 

Privacy Policy – Illustrator under a blankie
https://estherbennink.nl/

About Our Privacy Policy

At Illustrator under a blankie, we value your privacy. We only process data that is necessary for the provision and improvement of our services and handle the information we collect about you and your use of our services with care. We do not make your data available to third parties for commercial purposes.

This privacy policy applies to the use of our website and the services provided through it by Illustrator under a blankie. This policy is effective from 16/10/2025. With the publication of a new version, the validity of all previous versions lapses. This privacy policy describes which data we collect about you, how it is used, and with whom and under what conditions it may be shared with third parties. Additionally, we explain how we store your data, protect it against misuse, and what rights you have in relation to the personal data you provide to us.

Should you have any questions regarding our privacy policy, please contact our privacy officer. You can find the contact details at the end of this policy.

Data Processing

Below, you will find information on how we process your data, where we (have it) stored, the security measures we employ, and who has access to the data.

Webshop Software

Shopify

Our webshop is developed using Shopify software. Personal data that you provide to us in the context of our services is shared with Shopify. Shopify has access to your data solely to provide us with (technical) support and will never use your data for any other purpose. Shopify is contractually obliged to take appropriate security measures. These include the use of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. It uses cookies to gather technical information about your use of the software; no personal data is collected or stored in this process. Shopify reserves the right to share collected data within its own group of companies to further improve its services. Shopify complies with the legally required data retention periods. The EU/US Privacy Shield applies, and your data may be processed in the United States.

Email and Mailing Lists

Shopify

We use Shopify's webshop software to send our newsletters and transactional emails. All confirmation emails you receive from our website and web forms are sent via Shopify’s servers. Shopify will never use your name and email address for its own purposes. Every automated email from our site includes an unsubscribe link; clicking this will prevent further emails from being sent, though this may significantly impair the functionality of our site. Your data is securely transmitted, stored, and accessible via Shopify. Shopify uses cookies and internet technologies to track email open rates and readership. Additionally, Shopify processes information such as your recipient status and email subject lines to improve its service quality. This data is retained for 30 days. Shopify may use your data to improve its services and, in that context, may share information with third parties.

Gmail

We use Gmail for our routine business email correspondence. Google has implemented appropriate technical and organisational measures to prevent misuse, loss, and corruption of your and our data. Gmail does not have access to our inbox, and we treat all email communication as confidential.

Payment Processors

Mollie

We use Mollie to process (part of) the payments in our webshop. Mollie processes your name, address, residence, and payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your data. Mollie reserves the right to use your data to improve its services and may share anonymised data with third parties for this purpose. All protections mentioned above also apply to any services for which Mollie engages third parties. Mollie does not retain your data longer than permitted by law.

Shopify Payments

We also use Shopify Payments to process (part of) the payments in our webshop. Shopify Payments processes your name, address, residence, and payment details. Shopify Payments has taken appropriate technical and organisational measures to protect your data and reserves the right to use anonymised data to improve its services and share this with third parties. If you request a deferred payment (credit facility), Shopify Payments may share your personal and financial information with credit agencies. The same safeguards regarding your personal data apply to third parties engaged by Shopify Payments. Data is not retained beyond the legally permitted retention periods.

Reviews

At present, we do not utilise a review system.

Shipping and Logistics

Maximus Packing

If you place an order with us, your order is packed and processed at our warehouse, which is managed by Maximus Packing. They have access to your address details in order to create shipping labels for PostNL and DHL. Illustrator under a blankie has entered into an agreement with Maximus Packing regarding the handling and security of your data.

PostNL

We use PostNL to deliver your order. For this purpose, we share your name, address, and city with PostNL. These details are used solely to fulfil the delivery. In the event PostNL uses subcontractors, your information will also be shared with them.

DHL

We also use DHL for deliveries. For this purpose, we share your name, address, and city with DHL. These details are used solely to fulfil the delivery. In the event DHL uses subcontractors, your information will also be shared with them.

Purpose of Data Processing

We only use your data to provide our services. This means the purpose of processing is always directly related to your order or request. We do not use your data for (targeted) marketing. Should we wish to contact you for any reason other than at your request, we will seek your explicit consent. Your data is only shared with third parties if required to meet administrative or accounting obligations. These third parties are all contractually bound to confidentiality.

Automatically Collected Data

Data automatically collected by our website is processed to improve our services. These include your IP address, browser type, and operating system—none of which are personal data.

Cooperation in Tax and Criminal Investigations

In certain cases, Illustrator under a blankie may be legally obliged to share your data in connection with tax or criminal investigations by government authorities. In such instances, we are compelled to cooperate, though we will oppose such requests where legally permitted.

Data Retention

We retain your data for as long as you are a client. This means your customer profile is stored until you indicate you no longer wish to use our services. Such a request is also interpreted as a request for erasure. We do not retain your data longer than two years from the last point of contact or transaction, unless required by law. We must retain invoices containing your personal data for as long as applicable legal requirements demand. Our staff no longer has access to your customer profile or documents produced in relation to your order after this time.

Your Rights

Under Dutch and European law, you have certain rights concerning your personal data processed by us or on our behalf. Below, we explain what these rights are and how you may exercise them. To prevent misuse, we will generally only send copies of your data to the email address already known to us. If you wish to receive the data at a different address or by post, we may request identification. We maintain a record of completed requests, and in the case of a request to be forgotten, we retain anonymised records. All data is provided in a machine-readable format as used in our systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we are mishandling your personal data.

Right of Access

You have the right to access the personal data we (have) process(ed) that relates to you. You may submit such a request to our privacy officer. We will respond within 30 days. If approved, we will send a copy of all data we have, along with a list of processors who have access to it and the category under which it is stored.

Right to Rectification

You may request that we amend any data we hold that relates to you. We will respond within 30 days and confirm the rectification by email.

Right to Restriction of Processing

You may request the restriction of the processing of your data. We will respond within 30 days and confirm that your data is no longer processed until you lift the restriction.

Right to Data Portability

You have the right to transfer your data to another service provider. Upon request, we will send a copy of your data in a machine-readable format. Please note, this may result in us being unable to continue providing our services.

Right to Object and Other Rights

You may object to the processing of your personal data. Upon objection, we will cease processing your data pending resolution. If your objection is valid, we will stop processing your data permanently. You also have the right not to be subject to automated decision-making or profiling. We do not process your data in a way that this applies. If you believe otherwise, please contact our privacy officer.

Cookies

Third-Party Cookies

We and our partners, including Shopify, use cookies and other technologies to personalise your experience, show advertisements, and perform analytics. We will not use such technologies for these purposes without your explicit consent.

Changes to This Privacy Policy

We reserve the right to amend this privacy policy at any time. However, the most recent version will always be available on this page. If the changes affect how we process previously collected data, we will notify you by email.

Contact Details

Illustrator under a blankie
Parallelweg 10
7213VT Gorssel
The Netherlands
T: +31 6 289