This policy explains what personal data we collect when you visit cartouchemaps.com or buy from us, why, who we share it with and what your rights are.
Who we are
Thomas van der Bruggen Holding B.V., trading as Cartouche Maps, Vermeerstraat 2a, 5301 VE Zaltbommel, the Netherlands (Chamber of Commerce no. 75464136), is the controller of your personal data. Contact: info@cartouchemaps.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, delivery and billing address, phone (if given), order details | Taking, printing, shipping and supporting your order | Performance of the contract |
| Payment details | Processed by our payment provider; we never see your full card number | Performance of the contract |
| Order and invoice records | Bookkeeping and tax | Legal obligation (Dutch law: 7 years) |
| Messages you send us (email, contact form) | Answering you | Legitimate interest |
| Email address for the newsletter, if you sign up | Sending the newsletter; unsubscribe at any time | Consent |
| Analytics: pages and products viewed, cart and checkout steps, device and browser type, approximate country, session recordings with all typed input masked | Understanding which maps people look at and improving the shop | Consent (only after you click “Accept”) |
Analytics and cookies
We use PostHog, hosted in the European Union, for analytics. PostHog only loads after you click Accept in the cookie banner. If you click Reject or make no choice, no analytics cookies are set and nothing is sent. IP addresses are anonymised. You can change your choice at any time with Cookie settings in the footer.
Without consent we only use what the shop needs to work: your shopping cart is remembered in your browser’s local storage, and the checkout (run by Shopify) uses its own necessary cookies.
Who we share data with
We share personal data only with the service providers we need to run the shop:
- Shopify (shop system, checkout and payments): order, customer and payment data.
- Gelato (printing and shipping): your name, delivery address, phone (if given) and the items ordered, so it can print and deliver your order. Gelato passes the delivery details to its carriers.
- Netlify (website hosting and forms): technical server logs, and messages and newsletter sign-ups sent through our forms.
- PostHog (analytics, EU, only with your consent).
- Our email providers, for sending and receiving email.
Some of these companies are based in, or use sub-processors in, countries outside the European Economic Area, such as the United States. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
We never sell your personal data or share it for advertising.
How long we keep it
Order and invoice records: 7 years (legal obligation). Customer messages: up to 2 years after the last contact. Newsletter: until you unsubscribe. Analytics data: no longer than 2 years.
Your rights
You may ask us for access to, correction, deletion or a copy of your personal data, object to or restrict its use, and withdraw your consent at any time (this does not affect earlier processing). Email info@cartouchemaps.com; we answer within one month. You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
California and other US residents: we do not sell or share personal information as defined in US state privacy laws, and we do not use it for targeted advertising. You may ask us by email to access or delete your information.
Changes
We update this policy when our shop or the law changes; the date at the top shows the current version.
