Privacy Policy
Last updated: January 2026
At Hupacha, your privacy matters to me. In this policy, I explain what personal data I collect, why I collect it, and how I handle it. I process your data with care and in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data?
Hupacha
Sole trader
Willem Pijperlaan 24 (no visitor address)
6952 DK Dieren, Netherlands
Email:
Phone:
Chamber of Commerce number: 99429764
I am responsible for the processing of personal data as described in this privacy policy. If you have any questions about how your data is handled, please feel free to get in touch.
2. What data do I collect?
Depending on how you interact with me or which services you use, the following personal data may be processed:
When placing an order
- First and last name
- Address details (billing and delivery address)
- Email address
- Payment details (processed by the payment provider)
- Order details and order history
When signing up for the newsletter
- Name
- Email address
When contacting me via the contact form
- Name
- Email address
- Phone number (if provided)
- The content of your message
- Any files you attach
When visiting the website
- Anonymised usage statistics via Matomo (fully cookie-free)
3. Why do I collect this data?
I only collect data that is necessary for a specific purpose. Here is an overview:
| Purpose | Legal basis |
|---|---|
| Processing and dispatching your order | Performance of a contract |
| Sending invoices and payment reminders | Performance of a contract / Legal obligation |
| Contacting you about your order or enquiry | Performance of a contract / Legitimate interest |
| Sending the newsletter | Consent |
| Improving the website | Legitimate interest |
| Complying with legal obligations (e.g. tax returns) | Legal obligation |
4. How long do I keep your data?
I do not retain your personal data for longer than necessary for the purpose for which it was collected:
- Order data and invoices: 7 years (statutory retention period for tax purposes)
- Contact form messages: up to 2 years after the last contact, unless an active customer relationship exists
- Newsletter subscribers: until you unsubscribe
- Website statistics: anonymised, and therefore not traceable to individuals
5. Do I share your data with third parties?
Your data is never sold to third parties. I only share your data with parties that are necessary for the delivery of my services:
Carriers
To deliver your order, I share your name, address and, where applicable, phone number with the carrier (e.g. DHL).
Payment service providers
Payments are processed by external payment providers. They receive the data necessary to complete the transaction.
Hosting and email
The website and email are hosted by trusted parties within the European Union.
I have put appropriate agreements in place with all parties that process data on my behalf, to ensure the security and confidentiality of your data.
6. Data security
I take the protection of your data seriously and have implemented appropriate measures to prevent misuse, loss, unauthorised access and unwanted disclosure:
- The website uses an SSL certificate (HTTPS)
- Payment data is processed via certified payment providers (PCI-DSS compliant)
- Access to personal data is limited to what is necessary
- Systems are kept up to date regularly
7. Your rights
Under the GDPR, you have several rights regarding your personal data:
- Right of access: you may request to see what data I hold about you
- Right to rectification: you may request that incorrect data be corrected
- Right to erasure: in certain cases, you may request that your data be deleted
- Right to restriction: in certain cases, you may request that processing be limited
- Right to data portability: you may receive your data in a commonly used format
- Right to object: you may object to the processing of your data
- Right to withdraw consent: if you have given consent, you may withdraw it at any time
Would you like to exercise any of these rights? Please complete the contact form as fully as possible, or send an email to . I will respond as soon as possible, and always within 14 days.
To confirm that the request has been made by you, I may ask you to include a copy of a valid identity document. Please black out your passport photo, MRZ (the strip of numbers at the bottom), passport number and national identification number to protect your privacy.
8. Cookies and website analytics
For website analytics, I use Matomo, a privacy-friendly alternative to Google Analytics. Matomo runs in a fully cookie-free and anonymised way. This means no cookies are placed for analytical purposes and you are not tracked across different websites.
You can find more information in the cookie policy.
9. Changes
This privacy policy may be updated from time to time, for example due to changes in legislation or in my services. The most current version is always available on this page. I will notify you of any significant changes.
10. Complaints
Do you have a complaint about the way I handle your data? Please contact me first, so we can work towards a solution together.
If we are unable to resolve it, you have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Website: www.autoriteitpersoonsgegevens.nl
Hupacha
Verlicht je ruimte
