Política de privacidad

1. Who controls your data

My Drawberry is operated by Written Bits, Koningshof 4, 2353 SW Leiderdorp, Netherlands. Chamber of Commerce (KvK): [KvK number]. VAT (BTW): [BTW number]. Contact: [email protected].

For privacy questions or to exercise your rights, email [email protected]. Order and refund emails are sent from [email protected].

2. Data we process

• Identity and contact data: name and email
• Shipping address for fulfilment
• Order and payment data processed by Stripe (we do not store full card numbers)
• Uploaded drawing files and related validation results
• Locale or language preference
• Limited technical and analytics data when analytics is enabled

3. Why we process data

• To take and fulfil your order and communicate about it
• To process payment and handle taxes where required
• To validate drawings for manufacturing readiness (recommendation only)
• To operate, secure, and improve the website
• To comply with legal obligations

4. Legal bases

Depending on the activity, we rely on performance of a contract, legal obligation, legitimate interests (such as securing the site and understanding aggregate usage), and consent where the law requires it.

5. Who receives data

• Stripe, for checkout and payment
• Hosting and infrastructure providers that run this application
• Email delivery providers for order and refund messages sent from [email protected]
• Optional product analytics (PostHog) when configured: page interaction and session replay with input masking. We do not send customer name, email, phone, address, drawing files, access tokens, or Stripe ids in named analytics events
• An AI provider used only to assess a normalized drawing image. Customer name, email, and phone are not sent to that model
• Suppliers involved in making or shipping your necklace, using the order details needed for fulfilment

6. International transfers

Some processors may process data outside the Netherlands or the EEA. Where that happens, we rely on appropriate safeguards required by applicable law (such as standard contractual clauses or the processor’s equivalent mechanism).

7. Retention

We keep order, customer, and drawing data as long as needed for fulfilment, support, accounting, and legal retention duties. Analytics retention follows the settings of the analytics tool in use.

8. Your rights

Depending on applicable law (including the GDPR if it applies to you), you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also lodge a complaint with a supervisory authority. To make a request, contact [email protected].

9. Children

The storefront is aimed at adults purchasing the product. Drawings may show children’s artwork uploaded by the customer. We do not knowingly collect personal data from children for their own accounts.

10. No sale of personal data

We do not sell your personal data.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do.