Privacy policy

1. Who we are

Saffronbox (KVK 42060239), Netherlands, is the data controller for the personal data processed through this website. Contact: Saffronbox.nl@gmail.com, WhatsApp +31 6 16 560 564.

2. What data we collect

• Account details: name, email address, password (stored encrypted).
• Order details: delivery address, phone number, products ordered, payment method and status.
• Messages you send us by email or WhatsApp.
• Technical data: basic, anonymous visit statistics; advertising cookies only with your consent.

We never store your card details — payments are handled by Stripe.

3. Why we use it (legal basis)

• To process and deliver your orders and send confirmations — performance of a contract.
• To answer your questions, including via our WhatsApp assistant — contract / legitimate interest.
• To keep invoices and order records — legal obligation (Dutch tax law).
• To measure our advertising with Google Ads — your consent, which you can withdraw anytime.

4. Who we share it with

Only with service providers needed to run the shop:

• Stripe (payments)
• Google (Gmail for order emails; Google Ads, only with consent)
• Meta / WhatsApp Business (order and support messages)
• Our hosting and database provider

Some providers may process data outside the EU under EU-approved safeguards (Standard Contractual Clauses). We never sell your data.

5. How long we keep it

Order and invoice records: 7 years (Dutch fiscal retention). Account data: until you delete your account. Chat messages: up to 12 months.

6. Cookies

Essential storage keeps your basket, language and sign-in working. Google Ads cookies load only after you click "Accept all". Change cookie settings

7. Your rights

You may request access to, correction, deletion or a copy of your data, or object to its use. Email Saffronbox.nl@gmail.com and we will respond within one month. You can also file a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).