Privacy policy

About our privacy policy

At Karē we value your privacy. We only process the data necessary to (improve) our services and treat all information we collect about you and your use of our services with care. We will never share your information with third parties for commercial purposes.

This privacy policy applies to the use of our website and the services accessible through it. The effective date of this policy is 30.10.2024. When a new version is published, it supersedes all previous versions. This Privacy Policy describes what information we collect from you, how we use it, and with whom and under what conditions we may share it with third parties. We also explain how we store your information, protect it from misuse and outline your rights in relation to the personal information you have provided to us.

If you have any questions about our privacy policy, you can contact our Privacy Contact, whose details are set out at the end of this policy.

Data processing overview

Below you can read about how we process your information, where we store it, the security techniques we use and who has access to your information.

E-commerce Software

Shopify

Our online store is powered by Shopify software. The personal information you provide for our services is shared with Shopify, who will have access to your information to provide technical support, but will never use it for any other purpose. Under our agreement, Shopify is required to implement appropriate security measures, including SSL encryption and a strong password policy. Shopify is certified to process credit card information. Shopify uses cookies to collect technical information about your software usage without collecting or storing personal information. Shopify reserves the right to share the information it collects within its group of companies in order to improve its services. Shopify complies with applicable data retention laws and the EU/US Privacy Shield applies, so your data may be processed in the United States.

Web Hosting

Shopify

We use Shopify for web hosting and email services. Shopify processes personal data on our behalf and does not use it for its own purposes. However, Shopify may collect metadata about the use of its services. This is not personal data. Shopify has implemented appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data and is bound by confidentiality obligations under our agreement.

Email and mailing lists

Google Mail

We use Gmail services for regular business email communications. Gmail has implemented appropriate technical and organisational measures to protect against the misuse, loss and alteration of your and our data. Gmail does not have access to our mailbox and we keep all email communications confidential.

Payment processors

Shopify Payments

We use the Shopify Payments platform to process some of the payments on our webshop. Shopify Payments processes your name, address, location and payment details such as your bank account or credit card number. Shopify Payments has implemented appropriate technical and organisational measures to protect your personal data and reserves the right to use your data to improve its services and to share (anonymised) data with third parties. For deferred payments, Shopify Payments may share personal data and financial information with credit rating agencies. All privacy safeguards also apply to third parties used by Shopify Payments. Your information will only be retained for as long as permitted by law.

Reviews

WebwinkelKeur

We collect reviews via the WebwinkelKeur platform. When you leave a review through WebwinkelKeur, you must provide your name and email address. WebwinkelKeur shares this information with us in order to associate the review with your order. Sometimes WebwinkelKeur may contact you to clarify your review. If we invite you to leave a review, we will only share your name and email address with WebwinkelKeur to send you the invitation. WebwinkelKeur has implemented appropriate technical and organisational measures to protect your personal data and reserves the right to use third parties to provide services for which we have given permission. All privacy safeguards also apply to the services provided by third parties by WebwinkelKeur.

Shipping and logistics

PostNL

When you place an order with us, it is our responsibility to deliver your package. We use the services of PostNL to handle deliveries. It is necessary for us to provide PostNL with your name, address and location. PostNL only uses this information to fulfil the delivery agreement. If PostNL uses subcontractors, it may share your information with these parties.

Invoicing and accounting

Navision

We use the services of Navision for our administration and accounting. We share your name, address and order details to manage sales invoices. Your personal information is sent and stored securely. Navision is committed to confidentiality and will treat your information as confidential and will not use it for any purpose other than that stated above.

External sales channels

Bol.com

We sell some of our products via the Bol.com platform. When you place an order through this platform, Bol.com shares your order and personal information with us. We treat your data confidentially and have taken appropriate technical and organisational measures to protect it from loss and unauthorised use.

Purpose of data processing

General purpose of processing

We only use your data for our services, which means that the purpose of the processing is always directly related to your request. We will not use your data for targeted marketing unless you have given us your express consent to do so. Your information will not be shared with third parties, except to fulfil accounting and administrative obligations, and these parties are bound to confidentiality.

Automatically collected information

Automatically collected information, such as your IP address, browser and operating system, is used to improve our services and is not considered personal information.

Cooperation in Tax and Criminal Investigations

In certain cases, Karē may be required to disclose your information in connection with a government tax or criminal investigation. In such cases, we are required by law to share your information, but we will resist to the extent permitted by law.

Retention periods

We will keep your information for as long as you are a customer of ours. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you request this, we will treat it as a request to forget. This also means that we will not keep your information for more than two years after your last contact or transaction, unless we are required to do so by law. We are required to keep invoices containing your details for administrative purposes for as long as is required by law, but staff will no longer have access to your customer profile or documents created as a result of your request.

Your rights

Under Dutch and European law, you have rights with regard to your personal data that we process or process on our behalf. Below we explain these rights and how you can exercise them. To prevent misuse, we will only send copies of your information to the email address we have on file. If you request information to be sent to another address or by post, we will ask you to identify yourself. We keep a record of completed requests and, in the case of a forgotten request, we keep anonymised data. All copies of your information will be provided in the machine-readable format used within our systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are misusing your data.

Right of access

You always have the right to access your personal data that we process. You can make this request via our privacy contact person. You will receive a response within 30 days and, if granted, we will send you a copy of your data.

Right of rectification

You have the right to rectify your personal data that we process. You can make this request by contacting our Data Protection Officer and you will receive a response within 30 days. If your request is granted, we will confirm that your information has been corrected.

Right to restrict processing

You have the right to restrict the processing of your data. You can request this from our Data Protection Contact and we will respond within 30 days. If your request is granted, we will confirm that your data will not be processed until you remove the restriction.

Right to data portability

You have the right to have your information processed by another party. You can request this from our Data Protection Contact and we will respond within 30 days. If your request is granted, we will provide you with a copy of your information, but our services may be limited thereafter if we can no longer securely link databases.

Right to object and other rights

You have the right to object to the processing of your data by or on behalf of Karē. If you object, we will immediately stop processing your data until your objection is resolved. If your objection is justified, we will permanently stop processing your data. You also have the right not to be subjected to automated decisions or profiling.

Cookies

Google Analytics

Our website uses cookies from Google for its "Analytics" service. We use this service to help us track how visitors use our website. Google may be required to provide this information under applicable laws and may use this information to provide targeted advertising and other services on Google's behalf.

Changes to the privacy policy

We reserve the right to change our privacy policy. This page will always contain the latest version. If the new policy affects the way we process previously collected information, we will notify you by email.

Contact Information

Karē
Burgemeester Stramanweg 101
1101AA Amsterdam
The Netherlands
T (085) 273-8456
E support@kareforall.com

Privacy contact
Stephan van Lier