Privacy Policy — Thuisely
Last updated: 21 June 2026
Thuisely (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit or shop at thuisely.com, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG.
1. Who we are
Thuisely is a sole proprietorship (eenmanszaak) registered in the Netherlands, selling 3D-printed home décor products via thuisely.com. Thuisely is the data controller (verwerkingsverantwoordelijke) for the personal data described in this policy.
- Trade name: Thuisely
- KVK number: 42072545
- VAT identification number (BTW-id): NL005472573B24
- Address: Ameland 58, 1506 ZX Zaandam, Netherlands
- Email: info@thuisely.com
For any question about this policy or about your personal data, contact us at the email address above.
2. What personal data we collect
We collect personal data in the following situations:
- Placing an order: name, billing and delivery address, email address, phone number (if provided), and order/payment details.
- Creating an account: name, email address, password (stored encrypted), order history, and saved addresses.
- Newsletter sign-up or abandoned-cart follow-up: email address, and name if provided.
- Contacting us: name, email address, and the content of your message.
- Browsing the website: technical data such as IP address, browser type, device type, pages visited, and approximate location, collected via cookies and similar technologies (see Section 9).
3. Why we use your personal data and our legal basis
Under the GDPR, we may only process personal data where we have a valid legal basis. The table below sets out, for each purpose, which data we use and which legal basis applies.
| Purpose | Data used | Legal basis | Retention |
|---|---|---|---|
| Processing and delivering your order | Name, address, email, order details | Performance of a contract (Art. 6(1)(b) GDPR) | 7 years (Dutch tax/bookkeeping obligation) |
| Processing payment via Mollie | Name, payment details, order amount | Performance of a contract (Art. 6(1)(b) GDPR) | 7 years (Dutch tax obligation) |
| Account management | Name, email, password, order history | Performance of a contract / consent (Art. 6(1)(a)/(b)) | Until account deletion is requested |
| Newsletter & marketing emails | Email, name | Consent (Art. 6(1)(a) GDPR) | Until you unsubscribe |
| Abandoned cart follow-up emails | Email entered at checkout, cart contents | Legitimate interest (Art. 6(1)(f) GDPR) | Deleted once order completed, or after 30 days |
| Website analytics (Google Analytics) | IP address, browsing behaviour, device data | Consent (Art. 6(1)(a) GDPR), see Section 9 | Per Google Analytics retention settings, max 14 months |
| Responding to enquiries/complaints | Name, email, message content | Legitimate interest (Art. 6(1)(f) GDPR) | Up to 2 years after resolution |
| Legal & tax compliance | Invoice and order data | Legal obligation (Art. 6(1)(c) GDPR) | 7 years (Dutch fiscal retention duty) |
4. Who we share your data with
We only share personal data with third parties where necessary to run our business, and only to the extent needed for that purpose. We do not sell your personal data.
4.1 Payment processing
Mollie B.V. processes your payment details to handle transactions made via iDEAL and card payments (Visa, Mastercard). Mollie acts as an independent data controller for payment fraud-prevention and as our processor for the transaction itself. See Mollie’s own privacy policy at mollie.com/privacy for details.
4.2 Website hosting and infrastructure
Our website is hosted by Hostinger, with servers located in the EU/Netherlands. Hostinger processes data on our behalf as a data processor under a data processing agreement.
4.3 Email marketing and customer communication
We use the following tools to send order confirmations, newsletters, and marketing communications:
- Hostinger Reach — our primary tool for sending email marketing campaigns and newsletters.
- Cart Abandonment Recovery for WooCommerce — captures the email address entered at checkout and sends a follow-up email if an order is not completed.
- SureContact — used as a CRM for sending newsletters, running email automations, and tracking ecommerce revenue linked to email campaigns.
- SureMail — ensures reliable delivery of marketing and transactional emails by connecting to a trusted SMTP email-sending service.
These tools process your email address, name (if provided), and relevant order/cart data solely to deliver the communications described above.
4.4 Website analytics
We use Google Analytics to understand how visitors use our website. Google may process data outside the EU/EEA; Google participates in the EU-U.S. Data Privacy Framework and offers Standard Contractual Clauses as a safeguard for such transfers. See Section 9 for how this relates to cookie consent.
4.5 Shipping
We share your name, delivery address, and email address with our shipping carrier(s) solely to deliver your order and provide tracking information.
4.6 Legal requirements
We may disclose personal data where required by Dutch or EU law, such as to tax authorities for bookkeeping obligations, or to law enforcement upon a valid legal request.
5. International data transfers
Most of the tools we use store data within the EU/EEA. Where a tool we use (such as Google Analytics) may transfer data outside the EU/EEA, that transfer is based on an adequacy mechanism recognised under the GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
6. How long we keep your data
We keep personal data only as long as necessary for the purposes described in Section 3. In general:
- Order and invoice data: retained for 7 years to comply with Dutch fiscal/bookkeeping law (administratieplicht), even if you delete your account.
- Account data: retained until you ask us to delete your account, after which we delete or anonymise it except where retention is legally required (e.g. invoice history).
- Newsletter and marketing data: retained until you unsubscribe or ask us to delete it.
- Abandoned cart data: typically deleted automatically after a short period (around 30 days) or once the order is completed.
7. Your rights under the GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure (“right to be forgotten”) — to request deletion of your data, subject to legal retention obligations such as tax law.
- Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used format, or have it transferred to another provider.
- Right to object — to object to processing based on legitimate interest, including direct marketing, at any time.
- Right to withdraw consent — where processing is based on consent (e.g. newsletter, analytics cookies), you may withdraw it at any time, free of charge.
To exercise any of these rights, contact us at info@thuisely.com. We will respond within one month, as required by the GDPR.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl if you believe your data has been processed unlawfully.
8. How we protect your data
We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, and misuse, including:
- Encrypted (HTTPS/SSL) connections across the website and checkout.
- Secure, PCI-compliant payment processing via Mollie — we never see or store your full card details.
- Encrypted password storage for customer accounts.
- Data processing agreements with third-party processors such as Hostinger and our email marketing tools.
- Access to personal data limited to what is necessary to run the business.
9. Cookies and similar technologies
9.1 What cookies we use
Our website uses CookieYes, a consent management platform, to manage cookie consent in line with Dutch and EU law. When you first visit thuisely.com, a cookie banner asks you to choose which categories of cookies you allow. Our website may use the following types of cookies and tracking technologies:
- Strictly necessary cookies — required for core website functions such as the shopping cart, checkout, and account login. These do not require consent and cannot be switched off.
- Analytics cookies (Google Analytics) — used to understand how visitors use the site, such as which pages are viewed and how long visitors stay. These only load after you actively consent via the CookieYes banner.
9.2 How consent works
Under the Dutch Telecommunicatiewet and the GDPR, cookies that are not strictly necessary — including Google Analytics — may only be placed after you have given informed, prior consent. Our CookieYes banner enforces this by blocking Google Analytics and any other non-essential cookies from loading until you actively click “Accept” or otherwise opt in to that category. You can:
- Accept or reject non-essential cookie categories individually when the banner first appears.
- Change your cookie preferences at any time via the cookie settings link in the website footer.
- Withdraw consent at any time, which stops new analytics cookies from being set going forward.
9.3 Managing cookies in your browser
In addition to the CookieYes banner, you can manage or delete cookies through your browser settings at any time. Note that blocking strictly necessary cookies may affect the functioning of the shopping cart and checkout.
10. Children’s privacy
Our website and products are not directed at children, and we do not knowingly collect personal data from individuals under 16 without parental consent. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect new tools, features, or legal requirements. The version published on thuisely.com at any given time is the version that applies. Material changes will be highlighted on the website.
12. Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Thuisely
Ameland 58, 1506 ZX Zaandam, Netherlands
Email: info@thuisely.com
KVK: 42072545 | BTW-id: NL005472573B24