About our privacy policy

Namture cares deeply about your privacy. We therefore process only the data needed to provide and improve our services, and handle the information we collect about you and your use of our services carefully. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the Namture website and the services provided through it. These terms take effect on 16/11/2022. Publishing a new version invalidates all previous versions. This policy describes what data we collect about you, how it is used, and with whom and under what conditions it may be shared. It also explains how we store your data, protect it against misuse and what rights you have concerning the personal data you provide.

If you have questions about this policy, contact our privacy contact person. Contact details are at the end of this policy.

About data processing
Below we explain how we process your data, where it is stored, which security techniques we use and who can access it.

Online shop software

Shopify
Our online shop is developed using Shopify software. Personal data you provide for our services is shared with Shopify. Shopify can access your data to provide technical support and will never use it for another purpose. Our agreement requires Shopify to take appropriate security measures, including SSL encryption and a strong password policy. Shopify is a certified credit card data processor. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected or stored. Shopify reserves the right to share collected data within its group to improve its services. Shopify observes the applicable statutory retention periods for personal and other data. The EU/US Privacy Shield applies; your data may be processed in the United States.

Email and mailing lists

MailChimp
We send email newsletters using MailChimp. MailChimp will never use your name or email address for its own purposes. Every automated email sent through our website has an unsubscribe link at the bottom. Using it stops your newsletter subscription. MailChimp stores your personal data securely and uses cookies and other internet technologies to show whether emails are opened and read. MailChimp reserves the right to use your data to improve its services and share information with third parties for that purpose.

Office365
We use Office365 for regular business email. This provider has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as far as possible. Office365 has no access to our mailbox, and we treat all email correspondence confidentially.

Payment processors

Mollie
We use Mollie to handle some or all payments in our online shop. Mollie processes your name, address, place of residence and payment details, such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect personal data. Mollie reserves the right to use your data to improve its services and share anonymised data with third parties for that purpose. The safeguards above also apply to services for which Mollie uses third parties. Mollie retains your data no longer than statutory periods permit.

Reviews

LOOX
We collect reviews through LOOX. Leaving a review requires your name and email address. LOOX shares these details with us so we can link the review to your order and also publishes your name on its own website. LOOX may contact you to clarify your review. If we invite you to leave a review, we share your name and email address with LOOX solely to send that invitation. LOOX has taken appropriate technical and organisational measures to protect personal data. LOOX reserves the right to engage third parties to provide its services, and we have authorised this. The safeguards above also apply to the services for which LOOX uses third parties.

Shipping and logistics

PostNL
When you place an order, we must have your parcel delivered. We use PostNL for deliveries and must share your name, address and place of residence with them. PostNL uses this data only to perform the agreement. If PostNL engages subcontractors, it also shares your data with them.

DHL
When you place an order, we must have your parcel delivered. We use DHL for deliveries and must share your name, address and place of residence with them. DHL uses this data only to perform the agreement. If DHL engages subcontractors, it also shares your data with them.

Invoicing and accounting

Exact
We use Exact for administration and accounting. We share your name, address, place of residence and order details to administer sales invoices. Your personal data is transmitted and stored securely. Exact is bound by confidentiality and treats your data confidentially. Exact does not use it for purposes other than those described above.

Purpose of data processing

General purpose
We use your data exclusively to provide our services. Processing is always directly related to the task you give us. We do not use your data for targeted or other marketing. If we wish to contact you later using data you shared, other than at your request, we ask for explicit consent. We do not share your data with third parties except to meet accounting and other administrative obligations. These parties are bound by confidentiality through an agreement, oath or statutory obligation.

Automatically collected data
Data collected automatically by our website is processed to improve our services. This data, such as your IP address, browser and operating system, is not personal data.

Cooperation with tax and criminal investigations
Namture may be legally required to share your data for government tax or criminal investigations. In that case, we are obliged to share it but will oppose this to the extent permitted by law.

Retention periods
We retain your data while you are a customer. Your customer profile is kept until you tell us you no longer wish to use our services; we also treat this as a request to be forgotten. We retain data for no longer than two years after the last contact or transaction unless there is a legal basis for longer retention. Administrative obligations require us to retain invoices containing your personal data for the applicable period. Employees will, however, no longer have access to your customer profile or documents produced in connection with your instructions.

Your rights
Under applicable Dutch and European legislation, you have rights regarding personal data processed by or on behalf of us. We explain them below and how to exercise them. To prevent misuse, we generally send copies of data only to the email address already known to us. If you want the data sent to another email address or by post, we will ask you to identify yourself. We record completed requests and retain anonymised records of requests to be forgotten. Copies are provided in the machine-readable format used in our systems. You may complain to the Dutch Data Protection Authority at any time if you suspect misuse of your personal data.

Right of access
You may always access the data we process or have processed that relates to you or can be traced to you. Request access through our privacy contact person. We will respond within 30 days. If granted, we send a copy of all data to your known email address, with an overview of the processors holding it and the categories under which it is stored.

Right to rectification
You may always have data we process or have processed that relates to you or can be traced to you corrected. Submit a request to our privacy contact person. We will respond within 30 days. If granted, we confirm the correction at your known email address.

Right to restrict processing
You may always restrict processing of data relating or traceable to you. Submit a request to our privacy contact person. We will respond within 30 days. If granted, we confirm at your known email address that processing will stop until you lift the restriction.

Right to data portability
You may always have another party process the data we process or have processed that relates or is traceable to you. Submit a request to our privacy contact person. We will respond within 30 days. If granted, we send copies of all data processed about you by us or by other processors or third parties on our instructions to your known email address. We will probably be unable to continue providing our services, because secure linking of data files can no longer be guaranteed.

Right to object and other rights
In applicable cases, you may object to processing by or on behalf of Namture. We will immediately stop processing while your objection is handled. If upheld, we provide copies of the data we process or have processed and then permanently stop processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way to which this right applies. If you believe otherwise, contact our privacy contact person.

Cookies

Google Analytics
Our website places cookies from the US company Google as part of its Analytics service. We use it to track and report how visitors use the website. This processor may be required by applicable legislation to disclose the data. We have not authorised Google to use the analytics information for other Google services.

Third-party cookies
Where third-party software uses cookies, this is stated in this privacy policy.

Changes to this policy
We reserve the right to change our privacy policy at any time. The latest version is always available on this page. If a new policy affects how we process data already collected about you, we will notify you by email.