Privacy Policy
Your data, your rights. A clear, GDPR-compliant explanation of what we collect and how we use it.
Data Controller
Exotic Store, registered in Amsterdam, Netherlands (KvK: 12345678, BTW: NL123456789B01), is the data controller responsible for your personal data.
What Data We Collect
We collect: name, email, delivery address, phone number, order history, and payment method tokens (no card numbers stored). We may also collect browsing data via cookies.
How We Use Your Data
To process and deliver your orders, send order confirmations and shipping updates, improve our platform, and with your consent, send marketing communications.
Data Sharing
We share data with: delivery partners (PostNL, DHL), our payment processor (Stripe), and our hosting provider. We do not sell your data to third parties.
Your Rights (GDPR)
Under GDPR you have the right to access, correct, port, and delete your personal data. To exercise these rights, contact support@exoticstore.nl. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Data Retention
Order data is retained for 7 years as required by Dutch tax law. Account data is kept until you request deletion.
Have questions about our policies?
Our team is here to help — usually replies within 4 hours.