Kalpa VOF

Privacy Policy

kalpa.nl  —  this version applies from 28 August 2026 and replaces all earlier versions.

1. About this policy

Kalpa VOF cares about your privacy. We only collect and use personal data that we genuinely need to run our webshop and serve you well, and we never sell your data or hand it to third parties for their own marketing purposes.

This policy explains what personal data we collect, why, who we share it with (and why), how long we keep it, and what rights you have. If anything here is unclear, our privacy contact is happy to help — see the contact details at the end.

2. Who we are

Kalpa VOF

Frederik van Eedenhove 4, 3438 PW Nieuwegein, The Netherlands

Phone: +31 6 28401925

Email: info@kalpa.nl

Privacy contact: Remy van Nieuwenhoven

3. The parties who help us process your data

To run our webshop, we work with a small number of trusted service providers. Each of them only processes your data to do their specific job for us, under a data processing agreement, and none of them may use your data for their own purposes.

Shopify — our webshop platform

Our online shop runs on Shopify. Shopify processes the personal data you share with us (such as your name, address and order details) on our behalf, to keep the shop running and to let us handle your order. Shopify applies industry-standard security measures, including encryption. Because Shopify is a non-EU company, your data may be processed outside the EU/EEA; this is safeguarded through Shopify's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Pay.nl — payments

We use Pay.nl to process payments. Pay.nl handles your name, address, and payment details (such as your bank account or card number) to complete your transaction securely. Pay.nl does not retain your data for longer than legally required, and applies appropriate technical and organisational security measures.

PostNL, FedEx, and other carriers — delivery

To get your order to you, we share your name, address, and place of residence with the carrier handling your delivery — usually PostNL or FedEx, and occasionally another carrier where that's the better fit for your order. Carriers only use this data to deliver your package, including where they engage a local subcontractor for the final leg of delivery.

As an extra privacy measure, we ship all calendars and similar products in plain, neutral packaging, so the contents of your order aren't visible or identifiable to anyone else who happens to see the parcel.

Mailchimp — email newsletters

If you sign up for our newsletter, we use Mailchimp to send it. Mailchimp stores your name and email address securely and never uses them for its own purposes. Every newsletter includes an unsubscribe link. Mailchimp uses tracking technology to show us aggregate statistics such as open and click rates.

Gmail — business correspondence

We use Gmail for our day-to-day business email. Google applies appropriate technical and organisational security measures to protect this correspondence, and we treat all email traffic with you as confidential.

Data sharing between Kalpa websites

customer between sister-websites www.kalpa.nl and www.cutepinups.com are shared. Both are websites of Kalpa vof and are serviced from the same office.

4. Why we process your data

•      To process and deliver your order, including payment and shipping.

•      To handle customer service questions, returns, or warranty claims.

•      To send you our newsletter, but only if you've actively signed up for it — we don't use your data for marketing you haven't asked for.

•      To meet our legal and tax obligations, for example keeping financial records for the statutory retention period.

Data collected automatically through our website (such as your IP address, browser, and operating system) is used only to keep the site running smoothly and to understand, in aggregate, how visitors use it — this data doesn't identify you personally.

5. Cookies

Our website uses Google Analytics cookies to understand, in aggregate, how visitors use our site. We only place these once you've given consent via our cookie banner; you're always free to decline. We haven't allowed Google to use this data for any of its other services. If we ever add cookies from other third parties, we'll list them here.

6. International data transfers

Some of our service providers — including Shopify, Google (Gmail and Analytics), and Mailchimp — are based in, or process data in, the United States. Where that's the case, the transfer is protected either by the European Commission's EU-U.S. Data Privacy Framework or by standard contractual clauses, both of which are recognised, current legal mechanisms under EU data protection law for sending personal data outside the EU/EEA.

7. How long we keep your data

We keep your customer and order data for as long as you're an active customer. If you tell us you no longer wish to use our services, we treat this as a request to be forgotten and anonymise your profile, aside from what we're legally required to retain.

For bookkeeping, we don't store individual customer invoices in our accounting records. This means your personal details aren't kept as part of our financial administration beyond what naturally exists in the webshop, payment, and shipping records described above, which we retain for the Dutch statutory period of 7 years.

8. Your rights

Under Dutch and EU data protection law, you can ask us at any time to:

•      see the personal data we hold about you (access);

•      correct data that's inaccurate or incomplete (rectification);

•      limit how we use your data (restriction);

•      receive your data in a portable, machine-readable format (portability); or

•      object to how we're using your data (objection).

To use any of these rights, contact our privacy contact using the details below. We'll respond within 30 days. To protect you against fraud, we normally only send data or confirmations to the email address we already have on file for you; if you'd like it sent elsewhere, we'll first ask you to verify your identity.

If we uphold an objection, we stop processing your data immediately while we look into it, and permanently once we've confirmed it's justified. We don't use your data for automated decision-making or profiling.

You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time if you believe we're handling your data incorrectly.

9. Sharing with authorities

In specific cases, we may be legally required to share your data as part of a tax or criminal investigation. If this happens, we'll only do so to the extent the law requires, and we'll push back wherever the law gives us room to do so.

10. Changes to this policy

We may update this policy from time to time; the most recent version is always available on this page. If a change affects how we handle data we've already collected about you, we'll let you know by email.

11. Contact

Kalpa VOF

Frederik van Eedenhove 4, 3438 PW Nieuwegein, The Netherlands

Phone: +31 6 28401925

Email: info@kalpa.nl

Privacy contact: Remy van Nieuwenhoven