What we collect
When you order from us, here's what we ask for:
- Your name and delivery address, so your parcel reaches you.
- Your email, so we can send your order confirmation and keep you posted.
- Your phone number, only if you add one, and only so a courier can reach you if there's a hiccup with delivery.
- Your payment details, which you type straight into Stripe's own checkout, never onto our systems. All we ever see is the last four digits and a reference for the transaction.
We never ask for sensitive information like health or background. And there are no advertising trackers following you around.
Why we collect it
We handle your details mainly to do what you've asked, send you the order. In legal terms that's performance of a contract (Article 6(1)(b) GDPR). A little goes further on the basis of legitimate interests (Article 6(1)(f)), such as keeping a record of what you bought so we can help with a return or a faulty item later on.
Who else sees it
We pass along only what each partner genuinely needs to do their part:
- Stripe (Ireland), to take your payment.
- Courier (DHL Express, PostNL), your name, address, phone number and the parcel weight.
- Hosting provider, EU-based servers that handle IP addresses and browser details.
We never sell your details, to anyone, for any reason.
How long we keep it
We hold on to order records for seven years, because Dutch tax law says we have to. If you're signed up to our newsletter, we keep your email until you decide to opt out.
Your rights
The GDPR gives you real say over your information. You can ask to see it, fix it, delete it, limit how it's used, object to its use, or take it elsewhere, and you can always raise a concern with your local Data Protection Authority.
To do any of that, just email [email protected] and put "Privacy request" in the subject line. We'll get back to you within a month, and it won't cost you a thing.
Cookies & analytics
We only set the cookies the shop needs to work, your language choice, whether you've dismissed the cookie banner, and staff sign-in. Nothing for marketing, nothing for analytics. The full list lives in our cookie policy.
Contact
Data controller: ONI Ecommerce Limited, Central, Hong Kong. Company Reg. No. 80557386 · [email protected].