Privacy policy

Privacy policy

Last updated: 2026-09-16

1. Data controller

The controller responsible for processing your personal data on delabon.com is:

  • Company (legal name): XP Onderneming
  • Trading name: Delabon
  • Chamber of Commerce (KvK): 95426477
  • Address: Ten Katestraat 35, 6531 EE Nijmegen, Netherlands
  • Email: info@delabon.com
  • Phone: +31 6 40 17 66 40
  • Hours for enquiries: Monday to Friday, 9:00 to 18:00 (CET/CEST)

2. Personal data we collect

We only collect the information needed to run our shop and process your orders:

  • Account details: name, email, phone (if provided)
  • Delivery details: shipping address
  • Payment details: payment method (card data itself is processed directly by Shopify Payments; we only receive a confirmation, never the card number)
  • Order history: items bought, amounts, dates
  • Technical details: IP address, browser type, device, pages visited (through cookies)
  • Correspondence: the content of emails or messages you send us

3. Why we process your data (purposes and legal basis)

Because our business is established in the European Union, we process your data under the General Data Protection Regulation (GDPR), on the following grounds:

  • Performance of a contract (Art. 6(1)(b)): processing your order, delivery, customer service, returns
  • Legal obligation (Art. 6(1)(c)): keeping accounting records as required by Dutch tax law (typically 7 years)
  • Legitimate interest (Art. 6(1)(f)): fraud prevention, security, improving our shop
  • Consent (Art. 6(1)(a)): newsletters and marketing cookies (you can withdraw it at any time)

4. Who receives your data

We only share your data with trusted processors needed to run the shop:

  • Shopify (e-commerce platform, hosting and payments), Shopify Inc.
  • Payment providers: Shopify Payments (Stripe), Apple Pay, Google Pay, Shop Pay
  • Carriers: the carrier delivering your order
  • Tracking and communication apps: ParcelPanel (order tracking), Translate & Adapt

We never sell your personal data to third parties for marketing purposes.

5. International transfers

Some of our processors (for example Shopify) may store data outside the EU/EEA. Such transfers are protected by the European Commission's standard contractual clauses, adequacy decisions or other appropriate safeguards under Chapter V of the GDPR.

6. Retention period

  • Order data: 7 years (tax law)
  • Account and contact data: until you ask us to delete it, or after 3 years of inactivity
  • Marketing consent: until you withdraw it
  • Technical logs: at most 12 months

7. Your rights

You have the right to:

  • Access your personal data
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict processing
  • Data portability
  • Object to processing based on legitimate interest
  • Withdraw consent at any time

To exercise your rights, contact us at info@delabon.com. We reply within 30 days.

8. Right to complain

If you are not satisfied with how we handle your data, you can complain to the data protection authority where you live. Our lead supervisory authority is the Autoriteit Persoonsgegevens (Netherlands), autoriteitpersoonsgegevens.nl.

We also respect the data protection laws that apply where you live.

9. Cookies and tracking

We use cookies to make sure our shop works properly, to remember your cart and to analyse usage anonymously. You can manage or block cookies in your browser. Marketing cookies are only activated with your consent.

10. Security

We use SSL encryption across the whole shop and protect your data with appropriate technical and organisational measures. Payment data is processed directly by PCI-DSS certified providers; we never store card data on our systems.

11. Automated decisions

We do not make automated decisions, including profiling, that have legal effects on you or affect you in a similarly significant way.

12. Changes to this privacy policy

We may update this privacy policy from time to time. The latest version is always available on this page with an updated "Last updated" date.

13. Contact

Do you have questions about this privacy policy or about how we process your personal data?