Privacy policy
Pineut cares deeply about your privacy. We only process the data we need to provide (and improve) our services, and we handle all information about you and your use of our services with the utmost care. We never share your data with third parties for commercial purposes.
This privacy policy applies to the use of the website and the services offered through it by Pineut. This policy came into effect on 25/08/2025; any new version supersedes all previous versions.
This privacy policy describes what data we collect about you, how we use it, and under what conditions it may be shared with third parties. We also explain how we store your data, how we protect it against misuse, and what rights you have regarding the personal data you provide to us.
If you have any questions about our privacy policy, please get in touch with our privacy contact.
About data processing
Webshop software – Shopify
Our webshop is built using software from Shopify. Personal data you provide to us for our services is shared with this party. Shopify has access to your data solely to provide us with technical support and will never use it for any other purpose. Shopify is required to implement appropriate security measures, including SSL encryption and a strict password policy.
Email and mailing lists – Klaviyo
We send our email campaigns and newsletters via Klaviyo. Klaviyo processes your name and email address to send our emails and automated messages. Your data is stored securely. Klaviyo uses cookies and tracking technologies to gain insight into email opens and click-throughs, helping us improve our communications. Every email includes an unsubscribe link at the bottom.
Office365
For our regular business email, we use Microsoft Office365. This party has implemented appropriate technical and organisational measures to prevent misuse, loss, and corruption of data.
Payment processors – Shopify Payments
For processing (some of) the payments in our webshop, we use Shopify Payments. Shopify Payments processes your name, address, city, and payment details (such as bank account or credit card number). Shopify Payments has implemented appropriate security measures to protect your personal data and may use anonymised data to improve its services.
Shipping and logistics – PostNL
To deliver your order, we use the services of PostNL. This requires us to share your name, address, and city with PostNL.
Invoicing and accounting – Visma
For our accounting, we use Visma. We share your data (name, address, order details) solely for administrative purposes.
External sales channels – Bol.com
We sell some of our products via Bol.com. When you place an order there, Bol.com shares your order details with us.
Purpose of data processing
General purpose of processing
We use your data solely to provide our services. This means the purpose of processing is always directly related to the order you place with us. We do not use your data for (targeted) marketing. If you share data with us and we wish to contact you at a later stage for any reason other than at your request, we will ask for your explicit consent. Your data is not shared with third parties, except to fulfil accounting and other administrative obligations. All such third parties are bound by confidentiality under their agreement with us, or by oath or legal obligation.
Automatically collected data
Data automatically collected by our website is processed for the purpose of improving our services. This data (such as your IP address, web browser, and operating system) does not constitute personal data.
Cooperation with tax and criminal investigations
In certain circumstances, Pineut may be legally required to share your data in connection with a government tax or criminal investigation. In such cases we are compelled to share your data, but we will resist doing so to the fullest extent permitted by law.
Retention periods
We retain your data for as long as you are a customer. This means we keep your customer profile until you indicate that you no longer wish to use our services. Such a request will also be treated as a request to be forgotten. For applicable administrative obligations, we are required to retain invoices containing your (personal) data for the duration of the relevant statutory period. However, staff will no longer have access to your customer profile or any documents created in connection with your order.
Your rights
Under applicable Dutch and European legislation, you have certain rights regarding the personal data processed by or on our behalf. Below we explain what these rights are and how you can exercise them. To prevent misuse, we generally send copies of your data only to the email address we already have on file for you. If you wish to receive your data at a different email address or by post, we will ask you to verify your identity. We keep a record of all handled requests; in the case of a request to be forgotten, we record anonymised data. All copies of your data will be provided in the machine-readable format used within our systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we are misusing your personal data.
Right of access
You always have the right to view the data we process that relates to or can be traced back to you. You can submit such a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send a copy of all your data to the email address we have on file, along with an overview of the processors holding that data and the category under which it is stored.
Right to rectification
You always have the right to have the data we process that relates to or can be traced back to you corrected. You can submit such a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send a confirmation to the email address we have on file confirming that the data has been updated.
Right to restriction of processing
You always have the right to restrict the processing of data that relates to or can be traced back to you. You can submit such a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send a confirmation to the email address we have on file confirming that the data will no longer be processed until you lift the restriction.
Right to data portability
You always have the right to have the data we process that relates to or can be traced back to you transferred to another party. You can submit such a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send copies of all data we have processed about you, or that has been processed on our behalf by other processors or third parties, to the email address we have on file. In all likelihood, a request of this nature would mean we can no longer continue to provide our services, as the secure linking of data files can no longer be guaranteed.
Right to object and other rights
In certain circumstances, you have the right to object to the processing of your personal data by or on behalf of Pineut. If you object, we will immediately suspend data processing pending the outcome of your objection. If your objection is upheld, we will provide you with copies of the data we process and permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that triggers this right. If you believe otherwise, please contact our privacy contact.
Cookies
Google Analytics
Our website places cookies from Google, a US-based company, as part of its Analytics service. We use this service to track and report on how visitors use our website. This processor may be legally required to provide access to this data. We have not permitted Google to use the analytics information obtained for other Google services.
Third-party cookies
Where third-party software solutions make use of cookies, this is stated in this privacy statement.
Changes to the privacy policy
We reserve the right to amend this privacy policy at any time. This page will always show the most up-to-date version. If a new privacy policy affects the way we process data we have already collected about you, we will notify you by email.
Contact details
Pineut Dorus Rijkersweg 15, 2315 WC Leiden Netherlands T (010) 845-8986 E info@pineut.nl
Privacy contact
Marlies van Iterson