Privacy Policy

Last updated: 30-09-2025

This Privacy Policy explains how Rob Engelman (“we”, “us”, “our”) processes personal data collected via this website (mister-pearl.com) and our webshop activities.

1. Who we are & Contact

Data controller: Rob Engelman. For any privacy questions or requests, contact: r.engelman@upcmail.nl.

2. What data we collect

Order data: name, email, phone, shipping/billing address, ordered items, totals.
Accountless checkout: we do not require accounts; data is provided per order.
Communications: emails you send us (e.g., order questions, returns).
Technical: essential cookies (see Cookie Policy).

3. Why we use your data (legal bases)

Contract: to process, ship, and service your order.
Legal obligation: tax/audit retention requirements.
Legitimate interest: fraud prevention, basic site security.
Consent: only for non-essential cookies/analytics if we introduce them in future.

4. Payments & shipping

Payments are handled via the methods offered at checkout. We share the minimum necessary data with payment providers and carriers (e.g., name, address) to fulfill your order.

5. Cookies

We use essential cookies to operate the site (e.g., session, consent). See the Cookie Policy for details and choices.

6. Retention

Order/transaction records: kept per Dutch tax law (typically up to 7 years).
Routine communications: as long as necessary to handle your request.
Cookies: see specific lifetimes in the Cookie Policy.

7. Sharing

We do not sell your data. We share data only with service providers needed to run our shop (e.g., hosting, payment, shipping) under appropriate safeguards.

8. Security

We take reasonable technical and organizational measures to protect your data. No system is 100% secure.

9. Your rights (GDPR)

You can request access, rectification, erasure, restriction, portability, or object to processing where applicable. You may also withdraw consent where processing is based on consent. Contact us at r.engelman@upcmail.nl.

You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).