Privacy policy

1. Who we are

House of Papaver is a project of De Digitale Tafel, the controller responsible for your personal data. Contact: info@houseofpapaver.com, Alkmaarseweg 222a, 1944 DV Beverwijk, the Netherlands, KvK 88142477, VAT NL004549670B41.

2. What we collect

• Order data — name, delivery & billing address, email, phone number.
• Payment data — handled by our payment provider; we receive confirmation of payment but never store your full card details.
• Contact & newsletter — the email address and message you send us or the address you use to subscribe.
• Website data — aggregated, cookieless usage statistics: the pages viewed, the country the visit came from, the site or app that referred you, the device type, and clicks on a few buttons such as “add to cart”. This is collected by Plausible Analytics and is never linked to a person.

3. Why we use it (legal bases)

• To fulfil your order — performance of a contract.
• To invoice and meet tax obligations — legal obligation.
• To send our newsletter — your consent (withdraw any time).
• To improve the shop — our legitimate interest in knowing which pages work and which do not. Our analytics uses no cookies and stores no personal data, so no consent is required for it.

4. Who processes your data

We share data only with the processors needed to run the shop, under processing agreements:

• Payments — Mollie B.V. (Amsterdam, the Netherlands).
• Shipping — your order is delivered by a carrier such as PostNL or DHL; labels and tracking are arranged through Sendcloud.
• Hosting — Bunny.net (BunnyWay d.o.o.), an EU-based hosting and content-delivery provider.
• Email — Google Workspace (Google Ireland Ltd.) for our business email. A newsletter provider will be added here when our newsletter launches.

We do not sell your personal data to third parties.

5. How long we keep it

Order and invoice data is kept for 7 years to meet Dutch tax law. Newsletter data is kept until you unsubscribe. Other data is kept no longer than necessary for the purposes above.

6. Your rights

You have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent at any time. Email info@houseofpapaver.com and we will respond within one month. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Cookies and analytics

We use only functional cookies and local storage that are necessary for the shop and cart to work. We use no advertising cookies and no cross-site tracking.

For visitor statistics we use Plausible Analytics, a privacy-focused service hosted in the European Union. Plausible sets no cookies, stores nothing on your device, does not follow you across websites, and does not collect or store any personal data or IP addresses — the data is aggregated and cannot be traced back to you. Because of this, no cookie banner or consent is required, and there is nothing for you to opt out of. If we ever add a tool that does use cookies for analytics or marketing, it will only be placed with your consent and this section will be updated first.

Our content delivery network, Bunny.net (also EU-based), keeps standard server logs of requests to the site. IP addresses in those logs are anonymised before storage.

8. Changes

We may update this policy as the shop evolves. The date at the top reflects the latest version.