Privacy Policy

Last updated: January 2026

At Hupacha, your privacy matters to me. In this policy, I explain what personal data I collect, why I collect it, and how I handle it. I process your data with care and in accordance with the General Data Protection Regulation (GDPR).

1. Who is responsible for your data?

Hupacha

Sole trader
Willem Pijperlaan 24 (no visitor address)
6952 DK Dieren, Netherlands

Email:
Phone:

Chamber of Commerce number: 99429764

I am responsible for the processing of personal data as described in this privacy policy. If you have any questions about how your data is handled, please feel free to get in touch.

2. What data do I collect?

Depending on how you interact with me or which services you use, the following personal data may be processed:

When placing an order

  • First and last name
  • Address details (billing and delivery address)
  • Email address
  • Payment details (processed by the payment provider)
  • Order details and order history

When signing up for the newsletter

  • Name
  • Email address

When contacting me via the contact form

  • Name
  • Email address
  • Phone number (if provided)
  • The content of your message
  • Any files you attach

When visiting the website

  • Anonymised usage statistics via Matomo (fully cookie-free)

3. Why do I collect this data?

I only collect data that is necessary for a specific purpose. Here is an overview:

Purpose Legal basis
Processing and dispatching your order Performance of a contract
Sending invoices and payment reminders Performance of a contract / Legal obligation
Contacting you about your order or enquiry Performance of a contract / Legitimate interest
Sending the newsletter Consent
Improving the website Legitimate interest
Complying with legal obligations (e.g. tax returns) Legal obligation

4. How long do I keep your data?

I do not retain your personal data for longer than necessary for the purpose for which it was collected:

  • Order data and invoices: 7 years (statutory retention period for tax purposes)
  • Contact form messages: up to 2 years after the last contact, unless an active customer relationship exists
  • Newsletter subscribers: until you unsubscribe
  • Website statistics: anonymised, and therefore not traceable to individuals

5. Do I share your data with third parties?

Your data is never sold to third parties. I only share your data with parties that are necessary for the delivery of my services:

Carriers

To deliver your order, I share your name, address and, where applicable, phone number with the carrier (e.g. DHL).

Payment service providers

Payments are processed by external payment providers. They receive the data necessary to complete the transaction.

Hosting and email

The website and email are hosted by trusted parties within the European Union.

I have put appropriate agreements in place with all parties that process data on my behalf, to ensure the security and confidentiality of your data.

6. Data security

I take the protection of your data seriously and have implemented appropriate measures to prevent misuse, loss, unauthorised access and unwanted disclosure:

  • The website uses an SSL certificate (HTTPS)
  • Payment data is processed via certified payment providers (PCI-DSS compliant)
  • Access to personal data is limited to what is necessary
  • Systems are kept up to date regularly

7. Your rights

Under the GDPR, you have several rights regarding your personal data:

  • Right of access: you may request to see what data I hold about you
  • Right to rectification: you may request that incorrect data be corrected
  • Right to erasure: in certain cases, you may request that your data be deleted
  • Right to restriction: in certain cases, you may request that processing be limited
  • Right to data portability: you may receive your data in a commonly used format
  • Right to object: you may object to the processing of your data
  • Right to withdraw consent: if you have given consent, you may withdraw it at any time

Would you like to exercise any of these rights? Please complete the contact form as fully as possible, or send an email to . I will respond as soon as possible, and always within 14 days.

To confirm that the request has been made by you, I may ask you to include a copy of a valid identity document. Please black out your passport photo, MRZ (the strip of numbers at the bottom), passport number and national identification number to protect your privacy.

8. Cookies and website analytics

For website analytics, I use Matomo, a privacy-friendly alternative to Google Analytics. Matomo runs in a fully cookie-free and anonymised way. This means no cookies are placed for analytical purposes and you are not tracked across different websites.

You can find more information in the cookie policy.

9. Changes

This privacy policy may be updated from time to time, for example due to changes in legislation or in my services. The most current version is always available on this page. I will notify you of any significant changes.

10. Complaints

Do you have a complaint about the way I handle your data? Please contact me first, so we can work towards a solution together.

If we are unable to resolve it, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag

Website: www.autoriteitpersoonsgegevens.nl

Hupacha
Verlicht je ruimte

Free Shipping

On orders over €150

14-Day Return Window

No questions asked

International Warranty

Protected in your country of purchase

Secure Payment

iDeal / Wero / Bancontact / Bank Transfer