Email: info@cphon.nl
Website: www.cphon.com
Privacy Policy
Last updated: September 3, 2025
CPHON is responsible for the processing of personal data as described in this privacy policy. We value your privacy and process personal data in accordance with the General Data Protection Regulation (GDPR).
1. Contact details of the data controller
2. Which personal data we process
We process personal data when you:
- Place an order through our webshop
- Use our services
- Contact us
Collected data may include:
- First and last name
- Email address
- Phone number (optional)
- Payment information (via external providers)
- IP address and browser information (via Shopify)
- Order history
- Any preferences set, such as newsletter subscriptions
Special and/or sensitive data:
Our services are not intended for children under 16 years without parental or guardian consent. If we accidentally collect data from a minor, it will be deleted immediately upon request.
3. Purposes of processing
We process your data for the following purposes:
- Processing orders and payments
- Shipping orders
- Customer service and communication
- Sending newsletters (if consent is given)
- Analyzing webshop usage and improving services (anonymously/statistically via cookies)
- Providing personalized products and content
4. Hosting and webshop via Shopify
Our webshop is hosted on Shopify Inc., based in Canada. Shopify processes your data on our behalf according to their privacy policy, which complies with European privacy law. Shopify provides high-level security, including:
- Encrypted (SSL) connections
- Secure data storage
- Protection against data breaches
More information: Shopify Privacy Policy
5. Payment information
External payment providers (such as Shopify Payments, Mollie, or PayPal) process your payment data directly. CPHON does not receive full card or bank details.
6. Legal grounds for processing
We process personal data based on:
- Execution of a contract (e.g., orders)
- Consent (e.g., newsletter subscription)
- Legal obligation (e.g., tax regulations)
- Legitimate interest (e.g., security, webshop usage analysis)
7. Retention periods
Personal data is not kept longer than necessary:
- Order and invoice data: 7 years (according to tax law)
- Customer contact: maximum 1 year
- Newsletter data: until unsubscribe or withdrawal of consent
- Website and tracking data: 12 months
8. Sharing with third parties
We only share data if necessary for delivery or administration:
- Shopify (webshop and hosting)
- Payment providers (Shopify Payments, Mollie, PayPal)
- Shipping partners (PostNL, DHL)
- Accountant or bookkeeper
- Email software (Klaviyo, Mailchimp, Shopify Email)
All parties have data processing agreements where legally required.
9. Cookies and tracking techniques
Our webshop uses cookies for:
- Technical functioning of the website (shopping cart, checkout)
- Site usage statistics (via Shopify Analytics)
- Browsing behavior for personalized content and marketing
On your first visit, consent is requested for non-essential cookies. You can manage cookies via your browser settings.
More info: Shopify Cookies
10. Your rights
As a data subject, you have the right to:
- Access, correct, or delete your data
- Restrict processing or object to processing
- Data portability
- Withdraw consent (e.g., newsletter)
Requests can be submitted via info@cphon.nl. We respond within 14 days.
To verify identity, you may be asked to provide a copy of your ID with sensitive information blacked out (photo, MRZ, BSN, passport number).
11. Data security
We take appropriate technical and organizational measures to protect your data, including:
- Encrypted webshop (SSL)
- Secure storage via Shopify
- Restricted access to personal data
- Regular monitoring of processing activities
12. Complaints and supervisory authority
If you have questions or complaints about your privacy, contact us via info@cphon.nl.
If necessary, you may file a complaint with the Dutch Data Protection Authority: www.autoriteitpersoonsgegevens.nl
13. Changes to this privacy policy
CPHON reserves the right to modify this policy. The most current version is always available at www.cphon.com/privacy.