Algemene voorwaarden

This policy explains what personal data we collect, why, and your rights. We take your privacy seriously and comply with the EU General Data Protection Regulation (GDPR).

Who we are

Open B.V. (“we”, “us”), operating open2thinkshop.com.

Address: Prins Hendrikkade 78 G, 1012 AE Amsterdam, the Netherlands.

KvK: 99627353 · RSIN: 869067060 · BTW/VAT: Nl869067060B01

Contact for privacy matters: [info@open2thinkshop.com]

We are the data controller for the personal data described below.

What we collect

•     Order and contact details: name, email, shipping and billing address, phone (if provided).

•     Payment information: processed securely by our payment provider. We do not see or store your full card details.

•     Order history: the products you bought and related order information.

•     Technical and usage data: via cookies and our store platform — for example IP address, device/browser type, and pages viewed.

How we use it (and the legal basis)

•     To process and deliver your order, and provide support — necessary to perform our contract with you.

•     To meet legal obligations such as tax and accounting records — legal obligation.

•     To prevent fraud and keep the store secure — legitimate interest.

•     To send marketing emails, where you’ve opted in — consent (you can unsubscribe anytime).

We do not sell your data

We do not sell, rent, or trade your personal data to third parties for their own marketing.

Who processes your data on our behalf

We run our store on Shopify, which stores and processes order and customer data as our processor on behalf of Open B.V. We also use a payment provider and a shipping carrier to fulfil your order. These providers only receive the data needed for their role and are bound to protect it. Some of these providers (including Shopify) may process data outside the EU; where they do, appropriate safeguards such as the EU Standard Contractual Clauses apply.

How long we keep it

We keep order and invoice data for as long as required by Dutch tax law (currently 7 years). Other data is kept only as long as needed for the purpose it was collected, after which it is deleted.

Your rights

Under the GDPR you have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent at any time. To exercise any of these, email [info@open2thinkshop.com]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Cookies

Our store uses cookies to make the site work, remember your cart, and understand how the site is used. You can manage cookies through your browser settings and our cookie banner.