Privacy policy

Last updated: January 26, 2026

This Privacy Policy explains how personal data is collected, used and protected when visiting the Tiny Trinkets website, creating an account, placing an order, subscribing to the newsletter, or otherwise interacting with the webshop. Personal data is processed in accordance with applicable data protection laws.

Personal Data Collected

Only personal data that is necessary for operating the webshop and providing services is processed.

This may include personal data provided when placing an order, creating an account, subscribing to the newsletter, contacting customer support, or otherwise interacting with the website. This can include identification and contact details, order and transaction information, communication history, and technical information such as IP address, device data, and website usage data.

Payment data is processed securely by payment service providers. Full payment card details are not stored.

Customer Accounts

Customers may create an account on the website. Customer accounts are technically managed through Shopify.

Account data may be accessed for the purpose of:

• processing orders
• providing customer support
• handling returns and refunds
• complying with legal obligations

Customers are responsible for keeping their login credentials confidential.

Purposes of Data Processing

Personal data may be processed to fulfill and deliver orders, provide customer support, handle returns or refunds, send important service-related communication, comply with legal obligations, and improve the webshop experience.

Purposes of Data Processing

Personal data is processed on one or more of the following legal grounds:

• Performance of a contract (such as processing and delivering orders)
• Compliance with legal obligations (such as tax and accounting requirements)
• Legitimate interest (such as webshop security, fraud prevention, and service improvement)
• Consent (such as newsletter subscriptions and marketing cookies)

Where processing is based on consent, consent may be withdrawn at any time.

Marketing and Newsletter

Newsletter subscriptions are voluntary and require explicit consent. Marketing emails are only sent to individuals who have opted in. Unsubscribing is possible at any time via the link included in marketing emails.

Cookies and Website Analytics

The website uses functional cookies that are necessary for its operation. Analytical or marketing cookies may only be placed with consent. A cookie banner and a separate Cookie Policy may be used to manage cookie preferences.

Reviews and User Content

Customers may have the option to leave reviews or feedback on products. Submitting reviews is voluntary. Any content submitted in this way may be publicly visible on the website.

Sharing and Retention of Personal Data

Personal data is shared only where necessary to provide services. This may include sharing data with service providers such as Shopify (as webshop platform), payment service providers, shipping and fulfillment partners, and technical or hosting providers.

Personal data may be processed or stored outside the European Economic Area (EEA), including by service providers such as Shopify. Where personal data is transferred outside the EEA, appropriate safeguards are implemented in accordance with applicable data protection laws, including the use of Standard Contractual Clauses or other legally approved transfer mechanisms.

All third parties process personal data on the basis of confidentiality obligations and data processing agreements where required by law. Personal data is not sold.

Personal data is retained only for as long as necessary to fulfill orders and services, maintain customer accounts (if applicable), and comply with applicable legal, tax, and accounting requirements. Data is not retained longer than necessary for the purposes for which it was collected.

Data Rights

Personal data access or changes can be requested at any time. This includes the right to request access to stored personal data, correct inaccurate information, or request deletion where applicable. Consent for newsletter emails can be withdrawn at any time by unsubscribing. Requests can be submitted by email to info@tinytrinkets.nl. For security reasons, identity verification may be required before a request is processed.

Security Measures

Appropriate technical and organizational measures are implemented to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include secure hosting, encryption where applicable, access restrictions to authorized personnel, and data protection agreements with third-party service providers.

Complaints

Questions or concerns regarding the processing of personal data can be submitted by email to info@tinytrinkets.nl. If a complaint cannot be resolved directly, it may also be submitted to the relevant data protection authority.

Changes to This Privacy Policy

This Privacy Policy may be updated periodically. The most recent version will always be available on the website. Continued use of the website constitutes acceptance of any updates.

Company Information 

Tiny Trinkets
Email: info@tinytrinkets.nl
Website: https://www.tinytrinkets.nl
Chamber of Commerce number: 99086255