Privacy Policy

Who We Are (Data Controller)

This website is operated by Anna S. Hawthorne, an author-webshop based in the Netherlands. This Privacy Policy explains how we collect, use, and protect your personal data when you place an order or otherwise use our website.

Business name: Anna S. hawthorne

KVK number (Chamber of Commerce): TBA

Address: Baankstraat 3, 7205AT, Zutphen, Netherlands

Email: anna.s.hawthorne@gmail.com

Website: https://www.annahawthorne.com/

Legal Basis for Processing

We process your personal data on the basis of Article 6(1)(b) of the General Data Protection Regulation (GDPR): processing is necessary for the performance of a contract to which you are a party — specifically, to fulfil the orders you place with us.

In plain terms: we need your data to send you what you ordered and to communicate with you about your order. We do not process your data for any other purpose.

What Personal Data We Collect

When you place an order, we collect the following personal data:

First name and last name
Email address
Phone number
Delivery address (street, house number, city, postcode, country)

We collect only the data necessary to fulfil your order and to contact you in connection with it (for example, to confirm your order or resolve a delivery issue).

How We Use Your Data

We use your personal data solely for the following purposes:

Processing and fulfilling your order (physical or digital products)
Shipping physical products to your delivery address
Delivering digital products (e.g. via email or download link)
Contacting you about your order if necessary (e.g. delivery issues, order confirmation)
Complying with our legal obligations (e.g. financial record-keeping)

We do not use your data for marketing, profiling, or automated decision-making.

Sharing of Personal Data

We do not sell, rent, or trade your personal data to any third party.

We may share your data with third-party service providers strictly to the extent needed to fulfil your order (for example, a postal or courier service to deliver a physical product). These parties act as data processors on our behalf and are contractually bound to handle your data in accordance with GDPR and only for the purpose of delivering your order.

We do not display third-party advertisements on our website and do not share your data with advertising networks.

Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy and to comply with legal obligations.

Order data (name, address, email, phone): retained for 7 years to comply with Dutch tax and accounting obligations (Article 52 of the Algemene wet inzake rijksbelastingen).
After this period, your data will be securely deleted or anonymised.

Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, theft, unauthorised access, disclosure, or alteration. Access to your data is restricted to us as the data controller and, where strictly necessary, to processors involved in order fulfilment.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR) — you may request a copy of the data we hold about you.
Right to rectification (Art. 16 GDPR) — you may ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR) — you may ask us to delete your data, where no legal obligation requires us to retain it.
Right to restriction of processing (Art. 18 GDPR) — you may ask us to limit how we process your data in certain circumstances.
Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR) — you may object to processing based on our legitimate interests.

To exercise any of these rights, please contact us at: [your@email.com]

We will respond to your request within 30 days. We may ask you to verify your identity before processing the request.

Cookies and Tracking

We do not use third-party tracking cookies or advertising cookies on our website. If we use any functional cookies (for example, to maintain your shopping cart session), these are strictly necessary for the operation of the shop and do not track you across other websites. If you would like more detail about any cookies currently in use, please contact us at [your@email.com].

Right to Lodge a Complaint

If you believe your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens (AP)

Website: https://www.autoriteitpersoonsgegevens.nl

Telephone: +31 (0)88 1805 250

Post: Postbus 93374, 2509 AJ Den Haag, Netherlands

We would, however, appreciate the opportunity to address your concern directly before you approach the AP. Please contact us first.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The most current version will always be available on our website. The date at the top of this document indicates when it was last revised.

Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Name: Anna S. hawthorne