Privacy Policy
This describes what personal data Terra Ficta collects when you visit terraficta.com or place an order, why, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR / AVG).
Who is responsible
[Marvin Koppejan Holding B.V. — please confirm exact legal spelling], trading as Terra Ficta, registered in the Netherlands under KVK number 54900816, is the controller of the personal data described here. Questions or requests can be sent to atelier@terraficta.com.
What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, shipping and billing address | To process and deliver your order, and to send order confirmations | Performance of a contract |
| Order history and correspondence | Customer support, handling returns or complaints | Performance of a contract / legitimate interest |
| Payment details | Processing payment | Performance of a contract |
| Email address (if you contact us directly) | Responding to your question | Legitimate interest |
We do not collect more than we need to fulfil your order and support you afterwards. We do not sell personal data to anyone.
Payment data
Payments are processed by Stripe, our payment provider. Your card details are entered directly into Stripe's systems and never pass through or are stored on Terra Ficta's own systems. Stripe acts as an independent controller for payment data and has its own privacy policy, available at stripe.com/privacy.
Fulfilment and shipping
To print and ship your order, we share your name, delivery address, and the details of what you ordered with our print and fulfilment partner [and, where used, our shipping carriers]. These parties only receive what they need to fulfil the order and are not permitted to use your data for any other purpose.
[If any fulfilment partner is based outside the EU/EEA, note that here and confirm the applicable safeguard — e.g. Standard Contractual Clauses — before publishing.]
How long we keep it
We keep order and correspondence data for as long as needed to fulfil the order, handle any warranty or return claim, and meet our legal obligations — including Dutch tax law, which requires financial records to be kept for 7 years. Outside of that requirement, we do not keep personal data longer than needed for the purpose it was collected for.
Cookies and analytics
[Update this section to match reality before publishing. If the live site uses no cookies or analytics beyond what is strictly necessary to run the checkout, state that plainly. If analytics (e.g. Plausible, Google Analytics) or marketing pixels are added later, this section must describe them and, where required, a cookie consent banner must be added to the site.]
Your rights
Under the GDPR, you have the right to:
- Ask what personal data we hold about you, and receive a copy of it
- Ask us to correct inaccurate data
- Ask us to delete your data, where we are not legally required to keep it
- Ask us to restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these, email atelier@terraficta.com. We will respond within one month.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No system is completely secure, but we limit access to personal data to what is needed to run Terra Ficta.
Changes to this policy
We may update this policy from time to time, for example as Terra Ficta's tools or partners change. The date at the top of this page shows when it was last revised.
Contact
[Holding B.V.], trading as Terra Ficta
[address, Amsterdam, Netherlands]
atelier@terraficta.com