Privacy policy

Dutch Finest Seeds

Born in Holland, Grown Worldwide

Last updated: [29-4-2026]

What Personal Data Do We Collect?

We collect the following categories of personal data, depending on how you use our services:

• Contact details — name, billing address, shipping address, phone number and email address
• Financial information — payment details, transaction data and payment confirmations
• Account information — username, password and preferences
• Transaction data — viewed products, shopping cart, previous orders, returns and cancellations
• Communication data — the content of messages you send to us
• Device and usage data — IP address, browser type, device information and navigation behaviour on our website

On What Legal Basis Do We Process Your Data?

We process your personal data on the basis of the following legal grounds:

• Performance of a contract — for processing orders, payments, shipping and returns
• Legal obligation — for retaining financial data in accordance with the statutory tax retention period of 7 years
• Legitimate interest — for securing our services, preventing fraud and improving our website
• Consent — for sending marketing emails and placing non-essential cookies. You can withdraw this consent at any time

For What Purposes Do We Use Your Data?

We use your personal data exclusively for the following purposes:

• Fulfilling your order, processing payments, arranging shipping and handling returns — legal basis: performance of a contract
• Managing your account and providing customer service — legal basis: performance of a contract
• Sending marketing communications by email — legal basis: consent. You can unsubscribe at any time via the link at the bottom of our emails
• Securing our services and preventing fraud — legal basis: legitimate interest
• Complying with legal obligations such as tax retention requirements — legal basis: legal obligation

How Long Do We Retain Your Data?

We apply the following retention periods:

• Order data and financial records — 7 years in accordance with the statutory tax retention obligation
• Account data — for as long as your account is active, plus 1 year after deletion
• Customer service communications — maximum 2 years after resolution
• Marketing data — until you withdraw your consent or request deletion
• Website data and cookies — maximum 13 months

Cookies

We use cookies and similar technologies. We distinguish the following categories:

• Functional cookies — necessary for the operation of the webshop, such as maintaining your shopping cart and login status. These do not require consent
• Analytical cookies — used to analyse and improve the use of our website. We ask for your consent for these
• Marketing cookies — placed by Shopify and advertising partners to show relevant advertisements. We ask for your consent for these

Upon your first visit, we ask for your consent for non-essential cookies via a cookie banner. You can adjust your preferences at any time via the cookie settings on our website or through your browser settings.

Who Do We Share Your Data With?

We share your personal data only in the following circumstances:

• With Shopify as our hosting partner and processor of orders and payments
• With delivery services for the fulfilment of shipments
• With payment providers for processing payments
• With marketing partners only if you have given your consent
• With regulators or law enforcement agencies where required by law

We enter into a data processing agreement with all processors in accordance with the GDPR.

Shopify

Our webshop is hosted by Shopify Inc. Shopify processes personal data to enable our services and complies with the GDPR. For more information, please refer to the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

International Transfers of Data

Your personal data may be stored or processed outside the European Economic Area, including by Shopify in the United States. In such cases, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses of the European Commission.

Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections via HTTPS and restricted access to personal data within our organisation. However, we cannot guarantee absolute security.

Your Rights

As a resident of the EU or EEA, you have the following rights:

• Right of access — to the personal data we process about you
• Right to rectification — of inaccurate or incomplete data
• Right to erasure — of your data, unless we have a legal retention obligation
• Right to restriction — of processing in certain circumstances
• Right to data portability — allowing you to request a copy of your data
• Right to object — to processing based on legitimate interest or for direct marketing purposes
• Right to withdraw consent — without this affecting the lawfulness of prior processing

You can exercise these rights by contacting us using the details at the bottom of this page. We will respond within 30 days and may verify your identity before processing your request.

Complaints

If you have a complaint about the way we handle your personal data, please contact us first. If we are unable to resolve the matter together, you have the right to lodge a complaint with the competent data protection authority in your country.

Minors

Our services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and suspect that your child has provided us with personal data, please contact us so we can arrange for its deletion.

Changes

We may update this Privacy Policy when our services or applicable legislation require it. The most current version is always available on our website. In the event of significant changes, we will notify you by email.