Privacy Policy
We take the security of your personal information very seriously. This policy explains what data we collect, why we collect it, and the rights you have over it.
1. Who We Are (The Data Controller)
Framelyn is owned and operated by Super Patron B.V., a company registered in the Netherlands, which is the data controller responsible for processing your personal information on this website.
COMPANY DETAILS
Legal Entity: Super Patron B.V.
Trading Name: Framelyn
Dutch Chamber of Commerce (KvK) number: 92800211
EU VAT number: NL866176949B01
Address: Het Hout 35, 9723LA Groningen, The Netherlands
Email: info@framelyn.com
Phone: +31 6 22808102
2. Information We Collect
We only collect data necessary to provide our services and fulfill our obligations. This may include:
- Order Information: Your name, shipping/billing address, email, phone number, and transaction details are required for payment processing.
- Uploaded Photos: The photos you upload to personalize your frame. These are used only to produce your order.
- Account Details: Information related to your user profile, if you create one.
- Website Usage Data: Technical information like your IP address, browser type, device type, and how you interact with our site (collected via consent).
- Marketing Data: Email address and preferences, only if you have explicitly consented to receive our newsletter.
3. Why We Process Your Data (Purposes and Legal Grounds)
As a company based in the Netherlands selling to customers in the United Kingdom, we process your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR). We use your data for the following purposes:
- Fulfilling Orders: Performance of a Contract [GDPR Art. 6(1)(b)]
- Legal Compliance: Legal Obligation (Tax, Accounting) [GDPR Art. 6(1)(c)]
- Communication & Support: Performance of a Contract [GDPR Art. 6(1)(b)]
- Website Security & Fraud Prevention: Legitimate Interest [GDPR Art. 6(1)(f)]
- Analytics & Advertising: Your Consent [GDPR Art. 6(1)(a)]
4. How We Share Your Data
We only share data when it is necessary to complete your order or run our services efficiently. Recipients may include:
- Payment Providers: To securely process your transactions.
- Production and Fulfillment Partners: To print, frame and ship your order, including the photo you uploaded.
- Logistics Companies: To deliver your items.
- IT Hosting Providers: To maintain the website and secure data storage.
- Analytics and Advertising Partners (such as Google and Meta): To measure website traffic and show relevant ads, only with your consent.
- (Note: Our platform is powered by Shopify. Please review Shopify's Privacy Policy for more details on their data handling.)
We do not sell your personal information for money.
5. Payments and Security
When you pay directly, your transaction data is handled according to strict PCI-DSS security standards. We only retain payment details for as long as needed to complete the transaction and meet our legal accounting requirements.
6. Analytics, Advertising and Cookies
- Analytics: We use Google Analytics to understand website traffic.
- Advertising: We may use advertising tools such as the Meta Pixel and Google Ads to measure the performance of our ads and show relevant ads to visitors.
- Cookies: Our site uses cookies for essential functions (like your shopping cart). Analytics and advertising cookies are only used with your permission.
- Manage Consent: You can withdraw or change your consent for cookies, analytics and advertising at any time through the cookie settings available on the banner.
- (For more information on cookies, refer to Shopify's Cookie Policy.)
7. Data Security and Retention
- Security: We protect all data using SSL/TLS encryption during transmission and store it on secure servers. We maintain appropriate technical and organizational security measures to protect your information.
- Uploaded Photos: Photos you upload are used only to produce your order and are deleted once your order has been completed and any return or complaint period has ended.
- Retention: We only keep your data for as long as necessary to fulfill the purposes outlined here or as required by Dutch tax, accounting, or legal obligations. Once that period expires, the data is securely deleted or anonymized.
8. Your Privacy Rights
You have full control over your personal data. Regardless of where you live, you have the right to:
- Access: View the information we hold about you.
- Correction: Correct any inaccurate or incomplete data.
- Deletion: Request the permanent deletion of your data.
- Restriction: Limit how we process your data.
- Portability: Receive your data in a portable format.
- Objection: Object to processing based on legitimate interest.
- Opt-Out of Targeted Advertising: Ask us not to use your data for personalized ads.
- Withdraw Consent: Revoke consent for processes based on your permission (e.g., marketing).
UK Privacy Rights: If you are based in the United Kingdom, these rights apply to you under the UK GDPR and the Data Protection Act 2018. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, please contact us at info@framelyn.com. We will respond within 30 days.
9. International Transfers
Framelyn is operated from the Netherlands, and your data may be processed in the United Kingdom, the European Union and other countries where our service providers operate. Where data is transferred outside the United Kingdom or the European Economic Area, we use appropriate safeguards, such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum, to protect your information.
10. Children's Privacy
Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe that a child has provided us with personal information, please contact us at info@framelyn.com and we will delete it.
11. Third-Party Websites and Services
Our website may contain links to third-party websites, applications, or services.
We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party services you choose to use.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, technology, or applicable legal requirements.
The updated version will be posted on this page with the revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal information.
13. Contact Us
If you have questions about this Privacy Policy or would like to exercise a privacy right, please contact us:
Framelyn
Operated by Super Patron B.V.
Dutch Chamber of Commerce (KvK) number: 92800211
Het Hout 35, 9723LA Groningen
The Netherlands
Email: info@framelyn.com
Phone: +31 6 22808102