Privacy Policy – TiniPicnic

Business ID (KVK number): 98616595
Last updated: April 2026

1. Introduction

At TiniPicnic, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how TiniPicnic collects, uses, stores, shares, and protects your personal information when you visit our website, place an order, or contact us.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

2. Personal Data We Collect

Depending on how you use our website and services, we may collect and process the following personal data:

• First and last name

• Email address and telephone number

• Shipping and billing address

• Order and transaction details

• Payment information, processed securely by our payment providers

• Account information, if you create an account

• Communications with our customer service

• IP address, browser, device, and technical information

• Website usage and cookie data

• Marketing preferences, where applicable

3. How We Use Your Personal Data

We may use your personal data to:

• Process, fulfil, and deliver your orders

• Process payments, returns, and refunds

• Communicate with you about your order

• Respond to questions and provide customer service

• Manage and secure our online store

• Improve our website, products, and services

• Prevent fraud and misuse

• Send marketing communications where you have given consent or where otherwise permitted by law

• Comply with legal, tax, accounting, and administrative obligations

4. Legal Basis for Processing

We only process your personal data when we have a valid legal basis to do so. Depending on the circumstances, this may include:

• Performance of a contract: for example, to process and deliver your order

• Legal obligation: for example, to comply with tax and accounting requirements

• Consent: for example, for certain marketing communications or cookies

• Legitimate interests: for example, to improve our services, secure our website, or prevent fraud, provided your rights and interests do not override these interests

Where processing is based on your consent, you may withdraw your consent at any time.

5. Sharing Your Personal Data

To operate our online store and provide our services, we may share personal data with trusted third parties where necessary, including:

• Payment providers

• Shipping and fulfilment providers

• E-commerce and hosting providers, such as Shopify

• IT and technical service providers

• Accounting and administrative service providers

• Marketing, email, and analytics providers, where applicable

We only share the personal data necessary for these parties to provide their services and take appropriate measures to protect your information where required.

We do not sell your personal data to third parties.

We may also disclose personal data where required by law or when necessary to protect our legal rights.

6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where required, we take appropriate measures to ensure that your personal data remains protected in accordance with the GDPR, for example through an adequacy decision by the European Commission or approved Standard Contractual Clauses.

7. Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Certain information, such as financial and transaction records, may be retained for longer periods to comply with legal, tax, and accounting obligations.

When personal data is no longer required, we delete or anonymise it where reasonably possible.

8. Your Privacy Rights

Under the GDPR, you may have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete personal data

• Request deletion of your personal data

• Request restriction of processing

• Object to certain types of processing

• Receive your personal data in a portable format

• Withdraw your consent at any time

To exercise any of these rights, please contact us at info@tinipicnic.com.

To protect your privacy, we may ask you to provide additional information to verify your identity before processing your request.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure the website functions properly, remember preferences, understand how visitors use our website, and, where applicable, provide relevant marketing.

Where your consent is required, we will ask for permission before placing non-essential cookies.

You can manage your cookie preferences through the cookie settings on our website and through your browser settings. For more information, please refer to our Cookie Policy, where available.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

While we take reasonable measures to safeguard your information, no method of electronic transmission or storage can guarantee complete security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, or applicable laws and regulations.

The latest version will always be available on our website, together with the date it was last updated.

12. Contact Us

If you have any questions about this Privacy Policy, how we process your personal data, or if you would like to exercise your privacy rights, please contact us:

TiniPicnic
Business ID (KVK number): 98616595
Email: info@tinipicnic.com