Privacy policy

Privacy Policy

Last updated: 2026-05-16

1. Data Controller

The data controller for the processing of your personal data on delabon.com is:

  • Company (legal name): XP Onderneming
  • Trading name: Delabon
  • Chamber of Commerce (KvK): 95426477
  • Address: Ten Katestraat 35, 6531 EE Nijmegen, Netherlands
  • Email: info@delabon.com
  • Phone: +31 6 40 17 66 40
  • Hours for inquiries: Monday–Friday, 9:00–18:00 (CET/CEST)

2. Personal data we collect

We only collect the information necessary to operate our shop and fulfill your orders:

  • Account information: name, email, phone (if provided)
  • Delivery information: shipping address
  • Payment information: payment method (the card data itself is processed directly by Shopify Payments — we receive a confirmation only, never the card number)
  • Order history: items purchased, amounts, dates
  • Technical information: IP address, browser type, device, pages visited (via cookies)
  • Correspondence: the contents of emails or messages you send us

3. Why we process your data (purposes and legal basis)

Under Article 6 of the General Data Protection Regulation (GDPR), we process your data on the following grounds:

  • Performance of a contract (Art. 6(1)(b)): processing your order, delivery, customer service, returns
  • Legal obligation (Art. 6(1)(c)): retention of accounting records under Dutch and Danish tax law (typically 7 years)
  • Legitimate interest (Art. 6(1)(f)): fraud prevention, security, improving our shop
  • Consent (Art. 6(1)(a)): newsletters and marketing cookies (always revocable)

4. Recipients of your data

We only share your data with trusted processors needed to operate the shop:

  • Shopify (e-commerce platform, hosting and payments) — Shopify Inc., Canada/EU
  • Payment providers: Shopify Payments (Stripe Payments Europe), MobilePay (Vipps MobilePay A/S, Denmark), Apple Pay, Google Pay, Shop Pay
  • Shipping carriers: the chosen carrier (PostNord, GLS, DHL or equivalent)
  • Tracking and communication apps: ParcelPanel (order tracking), Translate & Adapt

We never sell your personal data to third parties for marketing purposes.

5. International transfers

Some of our processors (e.g. Shopify) may store data outside the EU/EEA. Such transfers are protected by the European Commission's Standard Contractual Clauses or other appropriate safeguards under GDPR Chapter V.

6. Retention period

  • Order data: 7 years (tax law)
  • Account and contact data: until you request deletion, or after 3 years of inactivity
  • Marketing consent: until you withdraw it
  • Technical logs: max. 12 months

7. Your rights (GDPR Chapter III)

You have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure ("right to be forgotten") (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time (Art. 7)

To exercise your rights, contact us at info@delabon.com. We will respond within 30 days.

8. Right to complain

You have the right to lodge a complaint with the Danish data protection authority:

  • Datatilsynet
  • Carl Jacobsens Vej 35, 2500 Valby, Denmark
  • Phone: +45 33 19 32 00
  • Web: www.datatilsynet.dk

Because the data controller is established in the Netherlands, you may also complain to the Dutch authority Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

9. Cookies and tracking

We use cookies to ensure our shop functions correctly, to remember your cart, and to analyze usage anonymously. You can manage or block cookies via your browser. Marketing cookies are only activated with your consent.

10. Security

We use SSL encryption across the entire shop and protect your data with appropriate technical and organizational measures. Payment data is processed directly by PCI-DSS certified providers — we never store card data on our systems.

11. Automated decision-making

We do not make automated decisions, including profiling, that produce legal effects or similarly significantly affect you.

12. Changes to this privacy policy

We may update this privacy policy from time to time. The latest version will always be available on this page with a revised "Last updated" date.

13. Contact

Questions about this privacy policy or about how we process your personal data?