Privacy policy

Who we are

Studio Anita de Groot, trading as Atelier Anita de Groot, is responsible for processing your personal information. Our address is Hoogstraat 155A, 3111 HE Schiedam, the Netherlands. Our Dutch Chamber of Commerce number is 61696935.

For privacy questions, contact Anita de Groot at info@anitadegroot.com or write to our boutique address.

What information do we use, and why?

Your purchase and payment

We use your name, billing and delivery addresses, email address, order details and, if provided, telephone number to fulfil your purchase, deliver your parcel and contact you about your order. Payment information and payment status are processed through our payment service provider. This is necessary to perform our contract with you. We also retain information required for our tax records to meet our legal obligations.

Your account

If you create an account, we retain your account and contact details and order history to provide access to your account. You can also order as a guest. Information needed to fulfil your purchase is required; without it, we cannot process your order.

Questions, sizing advice and classes

If you email us or use our contact form, we process your name, email address and message to answer your question. For sizing advice, we use measurements you choose to share. For a course, workshop or waiting list, we use your contact details and class preferences. This allows us to prepare your request or fulfil our agreement with you. For general service enquiries, we have a legitimate interest in helping you.

Returns and complaints

When you withdraw from a purchase, we process your name, email address, purchase details and the items or service concerned. Our online form stores your notice, a reference, the time it was received and the handling of the acknowledgement. This is necessary to process your withdrawal, meet our obligations and, where needed, demonstrate how your notice was handled.

Gift cards

For a gift card, we use the order details and, if you enter them, the recipient’s name and email address and your personal message. The code and balance are needed to issue, send and redeem the card. If you add the card to your account, we store that link so you can view the current balance. This is necessary to provide this service to you. Please only share information needed for the gift.

The website and security

Technical information, such as your IP address, browser details and information about errors or misuse, may be processed to keep the website secure. Our legitimate interest is protecting the shop and preventing misuse. Analytics and advertising technologies that require consent are covered by your cookie choices.

Who do we share information with?

We only share information needed for the service concerned:

• Payments: Mollie and your chosen payment provider process payments and any refunds.
• Delivery: Sendcloud and the chosen carrier use the necessary address, contact and parcel details.
• Technical services: our hosting, email and technical service providers support the operation, security and maintenance of the shop. The website uses WordPress and WooCommerce; Jetpack is a service provided by Automattic.
• Cookies and marketing: the website uses CookieYes for cookie preferences and connections with Google and Meta for analytics and marketing. Non-essential technologies are linked to your consent.
• Legal obligations: for example, the Dutch Tax Administration where disclosure is required.

Payment, delivery and platform providers may also process information under their own privacy policies. Providers such as Google, Meta and Automattic may process information outside the European Economic Area. Such transfers must have appropriate safeguards, for example an adequacy decision or European standard contractual clauses. You can ask us for information about the safeguards applicable to your data.

How long do we keep information?

We keep personal information only for as long as it is needed for the purpose for which we use it. We do not add extra fixed retention periods. Where the law requires us to keep records, we retain only the information covered by that obligation.

• Tax records: we retain legally required basic records, such as invoices and purchase and sales records, for seven years. A longer period applies only where required by a specific legal provision; records under the VAT One Stop Shop schemes (OSS/IOSS) must be kept for ten years. The legal rules determine when the period starts. A document still relevant to an ongoing agreement remains part of the records.
• Enquiries, classes, waiting lists and sizing advice: we retain the information needed while handling your enquiry, registration or participation. Once this is complete and the information is no longer needed, we delete it. Only information subject to a statutory retention obligation is kept for that purpose.
• Customer accounts: we use the information to provide your account and the services you request. When your account is closed, we delete information no longer needed for those purposes, except where retention is legally required. We first make suitable arrangements for any outstanding orders or gift card balance.
• Gift cards: we keep code, balance and any account-link information while needed to manage and redeem your card. Afterwards, only information required for statutory records is retained.
• Returns and complaints: the necessary information remains available while we handle them. Afterwards, we delete information no longer needed, unless the law requires us to retain it.
• Security information: only for as long as needed to investigate and resolve errors or misuse, unless further retention is legally required.
• Cookies: duration varies by cookie and is listed under Cookie preferences. You can refuse non-essential cookies.

Tax retention obligations do not automatically apply to your entire account or all your messages. Once the information is no longer needed and any statutory retention obligation has ended, we delete or anonymise it.

Cookies and your choices

Necessary cookies support functions such as your basket, login and language or cookie preferences. Other technologies may measure visits or support advertising. You can refuse non-essential cookies and change your consent later using Cookie preferences on the website. Withdrawing consent does not affect the lawfulness of earlier use.

If you follow a link to Instagram or another external platform, that platform’s privacy and cookie policies apply there.

Your rights

You may ask to access, correct or delete your personal information or restrict its use. You may also object to processing based on a legitimate interest, withdraw consent and, where the right applies, receive your information in a usable digital format.

Email your request to info@anitadegroot.com. Please do not routinely send a copy of your identity document. Only if we have reasonable doubts about your identity will we ask for the additional information necessary to check it.

We normally respond within one month. For complex or multiple requests, this may be extended by up to two months; we will explain this within the first month.

You can also lodge a complaint with the Dutch Autoriteit Persoonsgegevens.

Security and updates

We take appropriate technical and organisational measures to protect personal information. If you suspect misuse or a security issue, please email info@anitadegroot.com.

We update this policy when our services or use of personal information change. The date of the latest update is shown at the top.