Privacy policy
Who is responsible
Studio Milla Novo, Schoollaan 64d, 2121 GH Bennebroek, the Netherlands (KVK 68407181) is responsible for your personal data in this shop. Questions? Email milla@millanovo.com.
What data we use and why
- To process and deliver your order: your name, address, email, phone number, order details and payment status. Legal basis: performing our contract with you.
- For our accounts: order and invoice details, which we must keep for 7 years under Dutch tax law. Legal basis: legal obligation.
- To answer your messages: whatever you share with us by email or the contact form. Legal basis: our legitimate interest in helping you.
- For newsletters: only if you sign up; you can unsubscribe at any time with the link in every email. Legal basis: your consent.
- To improve the shop and our advertising: information about how visitors use the shop, collected with cookies and similar technology. We only use non-essential cookies, such as analytics and advertising cookies from Meta and Pinterest, if you agree to them in the cookie banner. Legal basis: your consent.
Who we share data with
We only share your data with parties that help us run the shop, and only as far as needed: Shopify (our shop platform), payment providers, carriers such as PostNL and UPS, our email and bookkeeping providers, our bookkeeper, and, if you accept those cookies, Meta and Pinterest. Some of these companies process data outside the EU; where that happens, appropriate safeguards such as the EU Standard Contractual Clauses are in place. We never sell your data.
How long we keep it
Order and invoice details: 7 years (legal requirement). Messages: as long as needed to help you, and no longer than 2 years after our last contact. Newsletter data: until you unsubscribe.
Your rights
You can ask us to see, correct or delete your data, to limit or object to its use, or to receive it in a portable format. If you gave consent, you can withdraw it at any time. Email milla@millanovo.com and we'll reply within one month. If you're not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.
Security
We take appropriate measures to protect your data. Payments are processed securely by our payment providers; we never see or store your full card details.
Changes
We may update this privacy policy. The latest version is always on this page.