Privacy policy

Altag B.V. cares about your privacy. We only process the data we need to handle your order and improve our service. We handle the information we collect about you and your use of our website with care, and we never sell your data to third parties.

This privacy policy applies to the use of the altag.nl website and the services offered on it. This version applies from 28 September 2026; when a new version is published, all previous versions cease to apply.

Below you can read what data we collect about you, what we use it for, who we share it with, how long we keep it, how we protect it and what rights you have. Altag B.V. is the controller responsible for processing your personal data as described in this privacy policy. Do you have any questions? You will find our contact details at the bottom of this page.

1. Online shop software

Our online shop is built with WordPress and the WooCommerce shop software. When you place an order, we store your name, address, email address, phone number (if you enter it), your order and the payment status. You always order from us as a guest; we do not create a customer account for you.

We have taken appropriate technical and organisational measures to prevent misuse, loss and unauthorised access as far as possible.

2. Web hosting

Our website and our email are hosted by Hostinger. The data of our online shop is stored on a server within the European Union. Hostinger only processes personal data on our behalf and does not use your data for its own purposes. Hostinger may, however, record technical data about the use of its services, such as server logs for security purposes. Hostinger has taken appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data and is bound by confidentiality.

3. Email

We do not have a newsletter and do not send you promotional emails. We send all emails ourselves, from ln.gatla@ofni and via Hostinger’s mail server. These are the following emails:

Service emails about your order: the order confirmation, the shipping confirmation with track and trace, your invoice and messages about a return or refund.
A reminder about your shopping cart: if you enter your email address at checkout but do not complete the order, we send you a reminder with a link to your cart.
A review request: after your order has been delivered, we ask you to rate your experience with us.

At the bottom of the reminder and the review request there is a link to unsubscribe; after that you will no longer receive these emails. We keep a log of sent emails (recipient, subject, content and delivery status) so that we can check whether an email has arrived. This log is automatically deleted after 90 days.

We also use Hostinger for our regular business email. Hostinger does not use the content of our emails for its own purposes, and we treat all email correspondence confidentially.

4. Payments

We work with Buckaroo, Mollie and PayPal to process payments. These payment service providers process the data needed for your payment, such as your name, email address, the amount and your payment details, for example your account number or credit card details. We never see your full credit card details ourselves. Payment service providers are legally required to retain certain data, for example to prevent fraud and money laundering, and are themselves responsible for that processing.

Buckaroo

Through Buckaroo you pay with iDEAL | Wero, Bancontact, credit card, Belfius, KBC or bank transfer. Buckaroo is a Dutch payment service provider supervised by De Nederlandsche Bank.

Mollie and Klarna

If you choose Klarna, the payment is processed via Mollie. Mollie passes the data needed for the payment on to Klarna. Klarna may carry out an identity and credit check to assess whether you can pay later, and is itself responsible for that processing. You can find more information in Klarna’s privacy notice.

PayPal

If you pay with PayPal, you complete the payment with PayPal. For this, PayPal receives your name, email address, delivery address and the order amount. PayPal is itself responsible for the data in your PayPal account.

5. Reviews

We collect reviews via Google, WebwinkelKeur and Trustpilot.

Google

After your order has been delivered, we send you a review request (see chapter 3).

You post a review on Google with your own Google account. Google publishes your review with your account name and is itself responsible for that data. On our website we show our Google rating and a selection of reviews; these are loaded via the Trustindex service.

WebwinkelKeur

We are a member of WebwinkelKeur. If you leave a review via WebwinkelKeur, you provide your name, place of residence and email address there. WebwinkelKeur shares this data with us so that we can link the review to your order, and publishes your name and place of residence with the review. WebwinkelKeur may contact you for an explanation of your review and keeps your data for as long as the review is published. We do not send any customer data to WebwinkelKeur ourselves.

Trustpilot

You can also post a review about us on Trustpilot. You do this with your own Trustpilot account; Trustpilot publishes your name with the review and is itself responsible for that data. We do not share any customer data with Trustpilot ourselves.

6. Shipping and logistics

When you place an order, it is our job to have your parcel delivered to you. For this we work with PostNL, DPD, DHL and Deutsche Post; which carrier delivers your parcel depends on the country and the shipping method. We share your name, address and town with the carrier and, where needed for the delivery notification or track and trace, also your email address or phone number. The carrier only uses this data for the delivery. If the carrier uses subcontractors, it also makes your data available to them.

We create shipping labels via a shipping platform or via the carrier’s business portal. The shipping platform processes your address details on our behalf.

7. External sales channels

We also sell some of our products via bol.com. If you place an order via bol.com, bol.com shares your order and address details with us. We only use this data to process your order. We treat your data confidentially and have taken appropriate technical and organisational measures to protect it against loss and unauthorised use. bol.com is responsible for the processing on the platform itself.

8. Contact forms

In our contact form you enter your name, email address, a subject and your message. With the return registration form you provide your order number, your email address and, if you wish, an explanation; we then use your order number to check whether your order is still within the return period. We receive what you enter by email and only use it to handle your question or return.

9. Cookies, statistics and advertising

Our website uses cookies. Functional cookies are needed to make the online shop work, for example for your shopping cart, your language choice and your cookie preferences. For statistics and advertising cookies, we first ask for your consent via the cookie banner. You can change your choice or withdraw your consent at any time. You can read which cookies we place in our cookie policy.

Google Analytics

With your consent, we use Google Analytics to track how visitors use our website so that we can improve it. Google receives data about your device, your browser and your visit to our website.

Google Ads

We advertise via Google Ads. With your consent, we measure whether a visit via an ad leads to an order. For this purpose, when you place an order we send your contact details to Google in encrypted form. Google only uses this data for that measurement.

Transfers outside the European Union

Google may process data on servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection. Other parties in this privacy policy that process data outside the European Union do so on the basis of an adequacy decision or the standard contractual clauses of the European Commission.

Other third-party services

On our website we also show the WebwinkelKeur trust mark and reviews via Trustindex, and we use Google Tag Manager. Your browser loads these elements directly from those parties, which means they receive technical data such as your IP address.

10. Purpose and legal basis of processing

We only use your data for the purposes set out in this privacy policy. Each purpose has a legal basis:

Carrying out your order, such as payment, shipping, invoices, returns and customer service: performance of the contract.
Keeping our records, such as invoices: legal obligation.
The shopping cart reminder, the review request and securing and improving our online shop: our legitimate interest. You can always object to this or unsubscribe.
Statistics and measuring advertising: your consent, which you can withdraw at any time.

We only share your data with the parties mentioned in this privacy policy and, where necessary for our accounting and administration, with parties that assist us with this. All these parties are bound by confidentiality under a contract, an oath or the law.

Automatically collected data

Our server automatically records technical data, such as your IP address, your browser and your operating system. We only use this data to secure the website and keep it working properly.

Automated decision-making

We do not make decisions about you based solely on automated processing. Only when you pay with Klarna may Klarna itself carry out an automated credit assessment (see chapter 4).

Cooperation with tax and criminal investigations

In certain cases, Altag may be required by law to share your data in connection with a tax or criminal investigation by the authorities. In that case, we only share the data we are legally obliged to provide.

11. Retention periods

We do not keep your data longer than necessary for the purpose for which we collected it:

Order and invoice data: 7 years, due to the statutory tax retention obligation.
Data from a shopping cart that was not completed: a maximum of 90 days.
The log of sent emails: 90 days.
Messages via the contact form, the return form or by email: for as long as necessary to handle your question or return.

If you ask us to delete your data, we will do so, except for the data we are legally required to keep. We then only use that data to comply with that legal obligation.

12. Your rights

Under the General Data Protection Regulation (GDPR), you have rights regarding the personal data processed by us or on our behalf. You can send a request to ln.gatla@ofni or via our contact form. You will receive a response within one month.

Right of access: you can ask which data we process about you. You will then receive a copy of your data, with an overview of the parties that process this data on our behalf.
Right to rectification: you can have incorrect or incomplete data corrected.
Right to erasure: you can ask us to delete your data, except for the data we are legally required to keep.
Right to restriction: you can ask us to temporarily restrict the processing of your data, for example while we assess a request for correction.
Right to data portability: you can receive the data you provided to us yourself in a common, machine-readable file or have it forwarded to another party.
Right to object: you can object to processing based on our legitimate interest, such as the shopping cart reminder and the review request. We will then stop that processing.
Withdrawing consent: if you have given consent, for example for cookies, you can withdraw it at any time. This does not affect processing in the period before.

To prevent misuse, we only send copies of your data to the email address we already have on file. If you would like to receive the data at a different email address or by post, we will ask you to prove your identity. We keep a record of handled requests; for a request for erasure, we only keep anonymised data.

Do you disagree with the way we handle your data? Please contact us first so that we can find a solution together. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the data protection authority in your own country.

13. Changes to this privacy policy

We may change this privacy policy, for example if we start using a new service. You will always find the most recent version on this page. If a change affects the way we process data we have already collected about you, we will inform you by email.