Privacy policy

Last updated: 29 June 2026

PAPER HEARTS operates this store and website, including all related information, content, features, tools, products, and Services, in order to provide you, the customer, with a personalised shopping experience (the “Services”). PAPER HEARTS is Powered by Shopify so that we can provide the Services to you. This privacy policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction, or otherwise communicate with us. If there is a conflict between our terms of service and this privacy policy, this privacy policy prevails with respect to the collection, processing, and disclosure of your personal information.

Please read this privacy policy carefully. By using and accessing the Services, you acknowledge that you have read this privacy policy and understand the collection, use, and disclosure of your data as described in this privacy policy.

Personal information we collect or process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another individual. Personal information does not include information that is collected anonymously or that has been de-identified so that you cannot be identified or reasonably linked to it. We may collect or process the following categories of personal information, including inferences drawn from such information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and bank account numbers, payment card details, transaction data, payment method, payment confirmation, and other payment details.
  • Account information including your username, password, security questions, preferences, and settings.
  • Transaction information including items you view, add to your cart, add to your wishlist, purchase, return, exchange, or cancel, and your past transactions.
  • Communications with us including information you include in your communications, such as customer support inquiries.
  • Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information including information about your interaction with the Services, such as how and when you interact with or navigate through the Services.

Sources of personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services, including from your device when you use our products or Services or visit our websites, and through cookies and similar technologies;
  • From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

  • Providing, customizing, and improving the Services. We use your personal information to provide the Services, including fulfilling our contract with you, processing payments, fulfilling orders, remembering your preferences, sending account notifications, processing transactions (purchases, returns, exchanges), creating and managing your account, arranging shipping, enabling returns and exchanges, allowing reviews, and creating a personalized shopping experience such as recommending products.
  • Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending emails, SMS, or postal communications, and showing you online ads based on your activity and purchases.
  • Security and fraud prevention. We use your personal information to verify accounts, ensure secure payments, detect and prevent fraud or illegal activity, and protect our Services.
  • Communicating with you. We use your personal information to provide customer support and maintain our business relationship.
  • Legal reasons. We use your personal information to comply with applicable laws and legal processes, and to enforce our terms and policies.

How we disclose personal information

We may disclose your personal information to third parties in certain circumstances, including:

  • With Shopify, vendors, and other third parties that perform services on our behalf (e.g., IT services, payment processing, analytics, fulfillment, shipping, customer support, cloud storage);
  • With business and marketing partners for advertising and marketing services;
  • When you instruct us or consent to sharing information;
  • Within our corporate group (affiliates);
  • In connection with business transactions such as mergers or bankruptcy, or to comply with legal obligations and protect our rights.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the Services. Information you submit is shared with Shopify and may be transferred internationally. Shopify may also use enhanced features involving data from your interactions with our store and other merchants. Shopify is responsible for certain processing activities. For more information, see Shopify’s privacy policy: https://privacy.Shopify.com/en.

Third-party websites and links

The Services may contain links to third-party websites. We are not responsible for the privacy or security practices of those sites. Information you share on public or semi-public platforms may be visible to others without restriction.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal information from minors under the legal age in your jurisdiction. Parents or guardians can contact us to request deletion of such data.

Security and retention

No security system is perfect, and we cannot guarantee absolute security. We recommend not sending sensitive information through insecure channels. We retain personal data only as long as necessary for account management, legal compliance, dispute resolution, or business purposes.

Your rights and choices

Depending on your location, you may have rights such as:

  • Access to your personal data
  • Deletion of your data
  • Correction of inaccurate data
  • Data portability
  • Managing marketing communications

If you live in the UK or EEA, you may also have rights to object to or restrict processing, and to withdraw consent.

Complaints

You may contact us with complaints or file a complaint with your local data protection authority.

International transfers

Your data may be transferred outside your country. When transferring outside the EEA or UK, we use approved safeguards such as standard contractual clauses.

Changes to this privacy policy

We may update this policy from time to time and will post updates on this page with a revised “Last updated” date.

Contact

If you have questions or wish to exercise your rights, contact us via the form on the website www.paperhearts.nl. For the purposes of applicable data protection law, we are the data controller of your personal information.