Privacy policy

Hearth & Paw is the controller of the personal data described in this policy.

• Hearth & Paw
• Chamber of Commerce (KvK): 97633143
• Email: contact@weblement.dev

• Account details: your name and email address when you create an account.
• Order details: name, email address, delivery address, phone number (if provided), the products you order and your order history.
• Payment details: payments are processed by Stripe. We receive confirmation that you paid, but we never see or store your full card or bank details.
• Communication: the messages you send us by email or through the contact form.
• Newsletter: your email address, only if you sign up.
• Technical data: IP address, browser type and pages visited, recorded in server logs by our hosting provider for security and to keep the site running.

• To process and deliver your order and handle returns (performance of a contract).
• To manage your account and show your order history (performance of a contract).
• To keep our financial records as required by Dutch tax law (legal obligation).
• To answer your questions and provide customer service (legitimate interest).
• To protect our website against fraud and misuse (legitimate interest).
• To send our newsletter, only with your consent. You can unsubscribe at any time via the link in every email.

We never sell your personal data. We only share it with service providers that help us run the shop, and only the data they need:

• CJdropshipping: our fulfilment partner, which packs and ships your order (name, delivery address, phone number and order contents).
• Delivery companies: to deliver your parcel and send tracking updates.
• Stripe: to process payments securely.
• Clerk: to manage secure sign-in to your account.
• Sanity: the system in which we store our product catalogue and orders.
• Vercel: the hosting provider of this website.

We may also share data when we are legally required to, for example with the tax authorities.

Some of these providers are based outside the European Economic Area, for example in the United States (Stripe, Clerk, Vercel) and China (CJdropshipping, for order fulfilment). When data is transferred outside the EEA we make sure it is protected with appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

• Order and invoice data: 7 years, as required by Dutch tax law.
• Account data: as long as your account exists. You can ask us to delete it at any time.
• Customer service messages: up to 2 years after your question has been resolved.
• Newsletter: until you unsubscribe.

We only use functional cookies and browser storage that are needed for the website to work: to keep you signed in and to remember the items in your shopping bag. These do not require consent.

We do not use advertising or tracking cookies. If we start using analytics or marketing cookies in the future, we will ask for your permission first.

We take appropriate technical and organisational measures to protect your personal data, such as encrypted connections (HTTPS), secure payment processing and limited access to customer data.

You have the right to:

• access the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted, unless we are legally required to keep it;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw your consent at any time (for example for the newsletter).

To use any of these rights, email us at contact@weblement.dev. We will respond within one month. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this privacy policy from time to time. The latest version is always available on this page. See also our terms and conditions.