Privacy policy

Last updated: 2 October 2026

At Royal Crystalline we handle your personal data with care. This privacy policy explains which data we process when you visit our web shop or place an order, why we do so, and what your rights are. We only process what is necessary and never sell your data to third parties.

1. Who are we?

Royal Crystalline
Volendamstraat 4, 6843 VN Arnhem, the Netherlands
E-mail: info@royalcrystalline.nl
Phone: +31 26 213 2512
Chamber of Commerce: 60685077 · VAT: NL001383583B07

We are the controller for the processing of your personal data as described in this privacy policy.

2. Which data do we process?

2.1 When you place an order (with or without an account)

  • Name, e-mail address and phone number
  • Billing and delivery address
  • Ordered products, amounts and the status of your order
  • The chosen payment method and payment status. We do not receive your bank or card details: these are processed by our payment provider Mollie.

2.2 With a customer account

  • The data above, your password (stored only in encrypted form) and your order history

2.3 Newsletter

  • Your e-mail address, only if you sign up yourself

2.4 Contact and customer service

  • Name, e-mail address and the content of your message

2.5 Technical data

  • IP address and technical details of your request (such as browser and requested page) in our server log files. We use these exclusively for security and to detect abuse.

3. Why do we process your data?

  • Fulfilling your order: processing, payment, shipping, confirmation and handling any returns or questions. Legal basis: performance of the contract.
  • Your customer account: so you can view previous orders and check out faster. Legal basis: performance of the contract.
  • Administration: invoicing and bookkeeping. Legal basis: legal obligation.
  • Newsletter: Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in every newsletter.
  • Security: protecting our web shop against abuse and attacks. Legal basis: legitimate interest.

4. How long do we keep your data?

  • Orders and invoices: 7 years (statutory tax retention obligation)
  • Customer account: as long as you have the account. You can have it deleted at any time; order data we are legally required to keep will be retained.
  • Newsletter: until you unsubscribe
  • Contact messages: up to 2 years after the last contact
  • Server log files: up to 90 days

5. With whom do we share your data?

We never sell or rent your data. We only share what is necessary with these parties:

  • Mollie B.V. (the Netherlands): processing your payment (iDEAL, Bancontact, PayPal). If you choose PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) also processes your data, under PayPal's own privacy policy.
  • PostNL (the Netherlands): delivery of your parcel (name, address and, for track & trace, e-mail address and possibly phone number)
  • Brevo (France): sending e-mails about your order and, if you signed up, the newsletter
  • Hetzner Online GmbH (Germany): hosting of our web shop and database
  • Microsoft (Microsoft 365): our mailbox info@royalcrystalline.nl, where your e-mails to us arrive. Microsoft processes this data within the EU Data Boundary.

We have agreements with these parties on the protection of your data. We may also disclose data where required by law.

We do not use services from Google or Meta (Facebook, Instagram) and do not place advertising or tracking pixels.

6. Cookies

Our web shop only uses functional cookies that are necessary for the shop to work, for example to remember your shopping cart and language and to keep you logged in. No consent is required for these. We do not use analytical or marketing cookies. Should we wish to do so in the future, we will ask for your consent first.

7. Security

  • All connections to our web shop are encrypted (HTTPS)
  • Passwords are only stored in encrypted (hashed) form
  • Our servers are continuously monitored for suspicious activity; attacks are blocked automatically
  • Regular backups and security updates; only authorised persons have access

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can withdraw any consent you have given, such as for the newsletter, at any time.

You can view and change much of your data yourself via My account. For other requests, please e-mail info@royalcrystalline.nl. We will respond within one month.

9. Complaints

Not satisfied with how we handle your data? Please contact us first; we will be happy to resolve it together. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

10. Changes

We may update this privacy policy, for example when we offer new services or legislation changes. The date of the last change is shown at the top of this page.