1. Who we are
B.M. Huisman
Europalaan 2b
3526KS Utrecht
The Netherlands
Email: info@bmhuisman.nl (general) / website@bmhuisman.nl (technical)
VAT: NL003712492B71
KvK: 82680205
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website (https://bmhuisman.nl) or use our services (WooCommerce, MailPoet, customer login).
2. What data we collect
We may collect the following personal data:
– Name
– Billing address
– Shipping address
– Email address
– Phone number
– Payment information (processed by third-party payment providers)
– IP address
– Browser and device information
– Order history
– Contact form data: name, email address, phone number (optional) and the content of your message
– Login username and password (stored securely by WordPress)
– Anonymous website statistics: pages visited, where the visit came from, browser, device type and approximate location. This data is not linked to a person.
3. How we collect your data
– When you create an account or log in
– When you place an order (via WooCommerce)
– When you sign up for newsletters (via MailPoet)
– When you send us a message through the contact form, or email us directly
– Automatically via cookies (see our Cookie Policy)
– Automatically through anonymous website statistics, without cookies (see section 4)
4. Why we process your data (purposes and legal basis)
Process and deliver orders – Contract performance
Payment processing (Stripe, PayPal, iDEAL – future) – Contract performance
Invoicing and tax compliance – Legal obligation
Customer account management – Contract performance
Fraud prevention and website security – Legitimate interest
Direct marketing (newsletters) to existing customers – Legitimate interest
Responding to messages sent through the contact form or by email – Legitimate interest (answering your question)
Anonymous website statistics – Legitimate interest (to see how the website is used and to improve it). The statistics tool places no cookies and does not store your IP address. Visits are not linked to a person, and if your browser sends a “Do Not Track” signal we do not count your visit
Legal claims and dispute handling – Legal obligation
5. Who we share your data with
We share your data only when necessary:
– Payment processors (Stripe, PayPal, iDEAL – to be implemented) – for payment handling
– MailPoet – to send newsletters and emails
– Hosting provider (located within the EU/EEA) – for website and database storage
– Our own mail server (hosted by netcup in Germany, within the EU/EEA) – to send and receive the emails the website sends, including messages from the contact form
– Website statistics (Umami, on a server in Germany, within the EU/EEA, managed by us) – anonymous statistics about the use of the website. No statistics data goes to third parties
– Law enforcement or tax authorities – if required by Dutch or EU law
We do not sell your data to third parties.
6. Data transfers outside the EEA
Some of our third-party services (e.g., MailPoet, Stripe, PayPal) may transfer data to the United States or other countries outside the European Economic Area (EEA). When this happens, we rely on:
– EU-US Data Privacy Framework (where applicable)
– Standard Contractual Clauses (SCCs)
You may request a copy of these safeguards by emailing website@bmhuisman.nl.
7. How long we keep your data
– Customer account & order data: 7 years (Dutch tax retention requirement)
– Newsletter subscription data: Until you unsubscribe
– Contact form messages and emails: 1 year after last contact. The contact form does not store your message on the website; it is sent to us by email only.
– Payment information: Not stored by us (handled by payment processors)
– Website statistics: Anonymous, kept as long as needed for trend analysis
8. Your rights (GDPR)
You have the right to:
– Access your personal data
– Rectify inaccurate data
– Erasure (“right to be forgotten”) – subject to legal retention obligations
– Restrict processing
– Data portability
– Object to direct marketing
– Withdraw consent (where consent is the legal basis)
To exercise your rights, email: website@bmhuisman.nl
We will respond within 1 month.
9. Security
We use measures including SSL encryption, protection against automated form submissions, regular software updates and strong password policies. However, no internet transmission is 100% secure.
10. Children
Our website is not intended for children under 16. We do not knowingly collect their data.
11. Changes to this policy
We may update this Privacy Policy. The latest version will always be posted here with a new “Last updated” date.
12. Contact
For privacy questions or data requests:
B.M. Huisman
Europalaan 2b, 3526KS Utrecht, The Netherlands
Email: website@bmhuisman.nl
Effective date: 1 June 2026 | Last updated: 14 November 2026