The Mouse Mansion Company BV cares deeply about your privacy. We only process data that is necessary for (improving) our services and handle the information we have collected about you and your use of our services with care. We never provide your data for commercial purposes to third parties.
This privacy policy applies to the use of the website and the services provided by Sam & Julia. This privacy policy describes what data we collect about you, how we use this data, and under what conditions and with whom we may share this data with third parties. We also explain how we store your data, protect it from misuse, and outline your rights regarding the personal data you have provided to us.
If you have any questions about our privacy policy, please contact our privacy officer, and you can find the contact details at the end of our privacy policy.
Data Processing
Below, you can read about how we process your data, where we store it (or have it stored), the security techniques we use, and who has access to the data.
E-commerce Software
Shopify
Our e-commerce platform is developed using Shopify software. Personal data that you provide for our services is shared with this company. Shopify has access to your data to provide us with technical support, and they will never use your data for any other purpose. Based on the agreement we have with them, Shopify is obliged to take appropriate security measures, including the application of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information about your use of the software, but they do not collect or store personal data. Shopify reserves the right to share collected data within their own organization to further improve their services. Shopify adheres to the applicable legal retention periods for (personal) data. Where your data is processed outside the EU, this takes place under appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Email and Mailing Lists
Klaviyo
We send our email newsletters using Klaviyo. Klaviyo will never use your name and email address for their own purposes. At the bottom of each email sent automatically through our website, you will find the 'unsubscribe' link. By clicking this link, you will no longer receive our newsletter. Klaviyo stores your personal data securely. Klaviyo uses cookies and other internet technologies to determine if emails are opened and read. Klaviyo reserves the right to use your data to improve their service and share information with third parties for that purpose.
Mijndomein
We use the services of Mijndomein for our regular business email communication. This company has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your data and ours. Mijndomein does not have access to our email and we treat all email communication as confidential.
Google Workspace and Apple
We use Gmail, Google Workspace (including Google Docs and Sheets), and Apple services for our regular business communication and document management. These companies have taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your data and ours. They do not have access to our email content, and we treat all email communication as confidential.
Payment Processors
Mollie
For processing (part of) the payments in our webshop, we use the Mollie platform. Mollie processes your name, address, and location data as well as your payment information such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to improve their service and, in this context, share (anonymized) data with third parties. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Mollie's services for which they engage third parties. Mollie does not retain your data for longer than is permitted by law.
Klarna
For customers who choose to pay afterwards (buy now, pay later), we use the Klarna platform. Klarna processes your name, address, and location data as well as your payment information. Klarna has taken appropriate technical and organizational measures to protect your personal data. In the case of a request for deferred payment, Klarna shares personal data and information about your financial position with credit rating agencies for the purpose of a creditworthiness check. Klarna reserves the right to use your data to improve their service and, in this context, share (anonymized) data with third parties. Klarna does not retain your data for longer than is permitted by law.
PayPal
For customers who choose to pay via PayPal, we use the PayPal platform. PayPal processes your name, email address, and payment information. PayPal has taken appropriate technical and organizational measures to protect your personal data and is a certified processor of payment data. PayPal reserves the right to use your data to improve their service and, in this context, may share data with third parties, including for fraud prevention purposes. PayPal does not retain your data for longer than is permitted by law.
Apple Pay
For customers who choose to pay via Apple Pay, payment is processed through Apple's payment infrastructure in combination with our payment service provider. Apple Pay does not share your actual card number with us or our payment processor; instead, a device-specific number and unique transaction code are used. Apple has taken appropriate technical and organizational measures to protect your personal data.
Google Pay
For customers who choose to pay via Google Pay, payment is processed through Google's payment infrastructure in combination with our payment service provider. Similar to Apple Pay, Google Pay does not share your actual card number with us or our payment processor; instead, a virtual account number is used to process the transaction. Google has taken appropriate technical and organizational measures to protect your personal data.
Shipping and Logistics
When you place an order with us, it is our responsibility to deliver your package to you. Depending on your delivery location, we work with a range of shipping carriers, such as PostNL, DPD, DHL, and GLS, to carry out deliveries. We share your name, address, and location data with the relevant carrier solely for the purpose of fulfilling your order. Where a carrier engages subcontractors, your data may also be shared with these parties for the same purpose.
External Sales Channels
We no longer sell our products directly through external marketplaces such as Bol.com or Amazon. Products available on these platforms are sold by independent retailers and distributors, who are responsible for their own privacy policy and data handling practices. If you have questions about an order placed through such a platform, please contact the relevant seller directly.
Purpose of Data Processing
General Purpose of Processing
We use your data exclusively for our services. This means that the purpose of processing is always directly related to the order you have placed. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time, other than at your request, we will ask for your explicit consent. Your data is not shared with third parties, except for financial and other administrative obligations.
These third parties are all bound to confidentiality based on the agreement between them and us or an oath or legal obligation.
Automatically Collected Data
Data automatically collected by our website is processed to further improve our services. This data (e.g., your IP address, web browser, and operating system) is not considered personal data.
Cooperation with Fiscal and Criminal Investigations
In some cases, Sam & Julia may be required by law to share your data in connection with a fiscal or criminal investigation by the government. In such cases, we are obligated to share your data, but we will oppose it within the legal possibilities.
Retention Periods
We retain your data for as long as you are our customer. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will consider it as a request for data removal. According to applicable administrative obligations, we must keep invoices with your (personal) data, so we will store this data for as long as the applicable term runs.
However, our employees will no longer have access to your customer profile and the documents we have created as a result of your order.
Your Rights
Based on current EU legislation (GDPR), you, as a data subject, have certain rights concerning the personal data processed by or on behalf of us. We explain what these rights are and how you can invoke them below.
In principle, to prevent abuse, we only send copies of your data to the email address already known to us. If you wish to receive the data at another email address or, for example, by post, we will ask you to identify yourself. We maintain a record of handled requests, and in the case of an erasure request, we retain anonymized data for administrative purposes. You will receive all copies of your data in the machine-readable data format that we use within our systems.
You have the right at all times to file a complaint with your national Data Protection Authority if you believe that we are using your personal data incorrectly.
Right of Access
You have the right to inspect the data that we process and that relates to your person or is traceable to you. You can make a request with that intention to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data at the email address known to us, with an overview of the processors that have this data under their control, along with a statement of the category under which we have stored this data.
Right to Rectification
You have the right to have the data that we process and that relates to your person or is traceable to you corrected. You can submit a request with that intention to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us that the data has been adjusted.
Right to Restriction of Processing
You have the right to restrict the data we process that relates to your person or is traceable to you. You can make a request with that intention to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us that the data will not be processed until you lift the restriction.
Right to Data Portability
You have the right to receive the data that we process and that relates to your person or is traceable to you, so that you can transfer it to another party. You can make a request with that intention to our privacy officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies of all data about you that we have processed or that have been processed by others on our behalf.
Right to Object and Other Rights
In certain cases, you have the right to object to the processing of your personal data by or on behalf of Sam & Julia. If you object, we will immediately cease the data processing pending the settlement of your objection. If your objection is well-founded, we will provide you with copies of the data that we have processed and then permanently cease the processing.
You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our privacy officer.
Cookies
Google Analytics
Cookies are placed on our website by the American company Google, as part of the "Analytics" service. We use this service to keep track of and receive reports on how visitors use the website. This processor may be obliged to provide access to this data on the basis of applicable laws and regulations. We collect information about your browsing behavior and share this data with Google. Google can interpret this information in conjunction with other datasets and thereby track your movements on the internet. Google uses this information to offer, among other things, targeted advertisements and other Google services and products.
Third-Party Cookies
In case third-party software solutions use cookies, it will be mentioned in this privacy statement.
Changes to the Privacy Policy
We always reserve the right to change our privacy policy. However, you will always find the most recent version on this page. If the new privacy policy affects the way in which we process data that has already been collected concerning you, we will notify you by email.
Contact Information
Sam & Julia – The Mouse Mansion
Muntplein 8
1012 WR Amsterdam
Netherlands
T: +31 20-2157341
E: info@sam-julia.com
Privacy Officer Manita Schaapman E: manita.schaapman@sam-julia.com
