Privacy policy

Privacy Policy

Effective Date: January 28, 2025

1. Introduction

Welcome to SmartPacking (operated by Noveum, S.J. Van der Voort). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains:

  • What personal data we collect
  • Why we collect it
  • How we protect it
  • Your rights regarding your data

This policy complies with the General Data Protection Regulation (GDPR) and Dutch privacy laws.

2. Who We Are

Business Name: Noveum
Trading As: SmartPacking
Email: support@noveum.nl
Website: [https://smartpacking.store]
Chamber of Commerce (KVK): [97277746]

For privacy-related questions, contact us at: support@noveum.nl

3. What Personal Data We Collect

We may collect and process the following personal data when you visit our website or use our services:

Contact Information

  • Full name
  • Email address
  • Shipping address
  • Billing address
  • Phone number (optional)

Account Information

  • Username
  • Password (encrypted - we never see your actual password)
  • Order history
  • Saved addresses
  • Wishlist items

Payment Information

  • Payment method selected
  • Transaction details
  • Bank account number (processed securely by payment providers - we don't store this)

Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Pages visited and time spent
  • Referral source (how you found us)

Marketing & Communication Data

  • Newsletter subscription status
  • Email preferences
  • Marketing consent records

4. How We Collect Your Data

We collect data through:

  1. Directly from you when you:
    • Create an account
    • Place an order
    • Subscribe to our newsletter
    • Contact customer support
    • Fill out forms on our website
  2. Automatically through:
    • Cookies and tracking technologies
    • Website analytics tools
    • Server logs

5. Why We Use Your Personal Data

We use your personal data for the following purposes:

Order Processing & Fulfillment ✅

  • Process and fulfill your orders
  • Send order confirmations and shipping updates
  • Handle returns and refunds
  • Issue invoices and receipts

Legal Basis: Performance of contract

Account Management 👤

  • Create and manage your account
  • Provide access to order history
  • Save shipping addresses for faster checkout

Legal Basis: Performance of contract

Customer Service 💬

  • Respond to questions and complaints
  • Provide product support
  • Resolve disputes

Legal Basis: Performance of contract & legitimate interest

Marketing & Communications 📧

  • Send newsletters and promotional offers
  • Inform you about new products
  • Share exclusive deals and discounts

Legal Basis: Your explicit consent (you can unsubscribe anytime)

Website Improvement 📊

  • Analyze website usage and performance
  • Improve user experience
  • Optimize product offerings

Legal Basis: Legitimate interest

Legal Compliance ⚖️

  • Comply with tax and accounting requirements
  • Prevent fraud and abuse
  • Enforce our Terms & Conditions

Legal Basis: Legal obligation & legitimate interest

6. Legal Basis for Processing

We only process your personal data when permitted under GDPR Article 6:

  1. Consent: You have given clear consent (e.g., newsletter signup)
  2. Contract: Processing is necessary to fulfill our agreement with you (e.g., shipping your order)
  3. Legal Obligation: We must comply with the law (e.g., keeping invoices for tax purposes)
  4. Legitimate Interest: Processing is necessary for our business operations (e.g., fraud prevention), provided your rights are not overridden

7. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes outlined above, or as required by law.

Retention Periods:

Data Type Retention Period Reason
Order information 7 years Tax and accounting legal requirement (Netherlands)
Account data Until account deletion or 2 years of inactivity Account management
Marketing data Until you unsubscribe or 2 years of inactivity Marketing purposes
Customer service records 2 years Quality assurance
Website analytics 26 months Google Analytics default (if used)

After these periods, we will securely delete or anonymize your data.

8. Who We Share Your Data With

We only share your personal data with third parties when necessary to provide our services or comply with legal obligations.

Third Parties We Work With:

Payment Processors 💳

  • Shopify Payments, PayPal, Stripe (or your payment provider)
  • Purpose: Process transactions securely
  • Data Shared: Payment details, transaction amount
  • Note: We never store your full credit card information

Shipping & Logistics 📦

  • PostNL, DHL, UPS (or your shipping carriers)
  • Purpose: Deliver your orders
  • Data Shared: Name, shipping address, phone number, order details

Website Hosting & IT Services 🖥️

  • Shopify (e-commerce platform)
  • Cloud storage providers
  • Purpose: Host and maintain our website
  • Data Shared: All data necessary for website operation

Email Marketing 📧

  • Klaviyo, Mailchimp (if you use email marketing)
  • Purpose: Send newsletters and promotional emails
  • Data Shared: Email address, name, purchase history (only if you consent)

Analytics & Advertising 📊

  • Google Analytics (if used)
  • Facebook Pixel (if used)
  • Purpose: Analyze website traffic and ad performance
  • Data Shared: Anonymized usage data, IP addresses

Accounting & Administration 📝

  • Accounting software providers
  • Purpose: Bookkeeping and tax compliance
  • Data Shared: Invoice details, order information

Data Protection Measures:

  • We only work with processors that comply with GDPR
  • We sign Data Processing Agreements (DPAs) with all processors
  • We ensure your data is processed securely and lawfully

International Transfers:

Some processors may be located outside the EU. In such cases, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience on our website.

What Are Cookies?

Small text files stored on your device that help websites remember your preferences and analyze usage.

Types of Cookies We Use:

Strictly Necessary Cookies 🔧

  • Purpose: Essential for website functionality (e.g., shopping cart, checkout)
  • Consent Required: No (required for the website to work)
  • Examples: Session cookies, security cookies

Analytics Cookies 📊

  • Purpose: Understand how visitors use our website
  • Consent Required: Yes
  • Examples: Google Analytics (if used)
  • Data Collected: Pages visited, time on site, device type

Marketing Cookies 🎯

  • Purpose: Show you personalized ads and measure ad performance
  • Consent Required: Yes
  • Examples: Facebook Pixel, Google Ads
  • Data Collected: Browsing behavior, ad interactions

Managing Cookies:

You can control cookies through:

  1. Our cookie banner (first visit - accept or reject)
  2. Your browser settings (block all cookies or delete existing ones)
  3. Opt-out tools for specific trackers (e.g., Google Analytics opt-out)

Note: Disabling cookies may affect website functionality (e.g., shopping cart may not work).

10. How We Protect Your Data

We take data security seriously and implement appropriate technical and organizational measures to protect your personal data from:

  • Unauthorized access
  • Loss or theft
  • Misuse or alteration
  • Accidental disclosure

Security Measures Include:

Technical Safeguards 🔒

  • SSL/TLS encryption for all data transmission (secure HTTPS connection)
  • Encrypted passwords (we never see your actual password)
  • Secure payment processing (PCI-DSS compliant)
  • Regular security updates and patches
  • Firewalls and intrusion detection systems

Organizational Safeguards 👥

  • Access controls (only authorized personnel can access data)
  • Staff training on data protection
  • Confidentiality agreements with employees and contractors
  • Regular data backups (secure and encrypted)
  • Incident response plan for data breaches

Important: While we strive to protect your data, no method of transmission over the internet is 100% secure. Use strong passwords and keep your login credentials confidential.

11. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right to Access 🔍

Request a copy of all personal data we hold about you.

Right to Rectification ✏️

Request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten") 🗑️

Request deletion of your personal data (unless we have legal obligations to retain it).

Right to Restrict Processing ⏸️

Request limitation of how we use your data.

Right to Data Portability 📤

Receive your data in a structured, commonly used format and transfer it to another service.

Right to Object 🚫

Object to processing of your data for:

  • Direct marketing (you can unsubscribe anytime)
  • Processing based on legitimate interest
  • Automated decision-making (profiling)

Right to Withdraw Consent ❌

If processing is based on consent, you can withdraw it at any time (e.g., unsubscribe from newsletters).

12. How to Exercise Your Rights

To exercise any of your rights, contact us at: support@noveum.nl

Please include:

  • Your full name
  • Email address associated with your account
  • Specific right you wish to exercise
  • Any supporting information

Response Time: We will respond within 30 days (1 month) as required by GDPR. In complex cases, we may extend this by an additional 2 months and will inform you.

Verification: To protect your privacy, we may ask for identification to verify your identity before processing requests.

13. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children.

If you believe we have collected data from a child without proper consent, please contact us immediately at support@noveum.nl, and we will delete the information.

14. Complaints & Data Protection Authority

Have a Complaint?

If you're unhappy with how we handle your personal data:

  1. Contact us first: support@noveum.nl - We'll do our best to resolve the issue
  2. If unresolved: You have the right to file a complaint with the supervisory authority

Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (AP)
Website: autoriteitpersoonsgegevens.nl
Email: info@autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 85 00

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • Legal or regulatory requirements
  • New features or services

How We'll Notify You:

  • Website: Updated policy posted with new "Effective Date"
  • Email: Notification sent to your registered email (for significant changes)

Recommendation: Review this policy periodically to stay informed about how we protect your data.

16. Third-Party Websites

Our website may contain links to third-party websites (e.g., social media, payment processors). This Privacy Policy does not apply to those external sites.

We are not responsible for:

  • Privacy practices of third-party websites
  • Content or security of external sites

Recommendation: Review the privacy policies of any third-party websites you visit.

17. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: support@noveum.nl
Business Name: Noveum (S.J. Van der Voort)
Trading As: SmartPacking
Response Time: Within 24-48 hours (Monday-Friday)

We're committed to transparency and protecting your privacy. Your trust matters to us!

18. Summary of Key Points

TL;DR (Quick Summary):

✅ We collect data necessary to process orders and improve our service
✅ We never sell your personal data to third parties
✅ We use secure encryption (SSL) to protect your information
✅ You can access, correct, or delete your data anytime
✅ We only send marketing emails if you consent (unsubscribe anytime)
✅ We comply with GDPR and Dutch privacy laws
✅ We retain order data for 7 years (tax requirement)
✅ You can file complaints with the Dutch Data Protection Authority

This Privacy Policy was last updated on January 28, 2025.

Your privacy matters. If you have questions, contact us at support@noveum.nl