Legal
Privacy statement
Last updated: 14 October 2026
This is a translation of our Dutch privacy statement. If the two versions differ, the Dutch version prevails.
Trace of Faith (eenmanszaak) (42202868, info@trace-of-faith.nl) is the controller of the personal data you share with us through our website. We process as little as possible, and only what is needed to fulfil your order and answer your questions.
What data and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, address, email, (phone) | Fulfilling and shipping your order, communicating about it | Contract | 7 years (tax retention obligation for order records) |
| Name, email, Google ID (account) | Optional account: view orders and tracking. Sign-in via Google (Supabase Auth); we never receive a password | Contract / consent | Until you have the account deleted |
| Payment details | Processing payment, handled by Stripe; we only see status and amount | Contract | See Stripe |
| Email address (newsletter), time and text of sign-up | After confirmation (double opt-in): a welcome series, new designs and news. You can unsubscribe in every email | Consent | Until you unsubscribe |
| Email address and contents of an unfinished order | At most two reminders (after 4 and 24 hours), only if you ticked the email box at checkout | Consent | 30 days |
| Email address with an order | Asking after 10 days how you like it (only with email consent at checkout) | Consent | As the order |
| Statistics (Google Analytics 4) and the source of your visit | Understanding which pages and channels work. Only with consent via the cookie banner | Consent | 14 months (Google); source with your order for as long as the order |
| Advertising data (Meta Pixel and Conversions API): pages visited, cart, purchase, IP address, browser and, on purchase, a hashed email address | Measuring which ads work and showing you something again later. Only with consent via the cookie banner | Consent | With us until the purchase has been reported; with Meta according to their policy |
| Name, email, message (contact) | Answering your question | Legitimate interest | 2 years |
| Product feedback (reason and an optional short note) | Learning which designs and prices suit you. Anonymous: without name, email or IP address | Legitimate interest | 2 years |
| Anonymised visit statistics | Understanding how the site is used (Plausible, without cookies or personal data) | Legitimate interest | n/a |
Who we share data with
- Production and delivery: name, address, email and phone number only go to the systems and carriers needed to make and deliver your order, under a data processing agreement.
- Stripe (payments): processes your payment; we receive no card or bank details.
- Supabase (database, EU region): storage of orders and messages.
- Cloudflare (hosting, security): processes technical data such as IP address to deliver the site.
- Resend (email): sends order confirmations, shipping notifications and, if you chose to, the newsletter and reminders.
- Google (Google Analytics 4): statistics, only with your consent.
- Meta (Facebook and Instagram): measuring ads, only with your consent.
- Anthropic: the customer service assistant on the site; we do not send any data from your account or order with it.
We never sell data and do not share it with anyone other than the above, unless required by law. Some of these providers are based outside the EU, for example in the United States. Transfers then take place on the basis of the EU standard contractual clauses or the EU-US Data Privacy Framework.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Email info@trace-of-faith.nl; we respond within 30 days. Order data we must keep for tax purposes cannot be deleted earlier. You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the data protection authority in your country (in Belgium the Data Protection Authority/GBA, in Luxembourg the CNPD).
Security
All connections are encrypted (HTTPS). Access to order data is restricted to the owner and secured with a password and signed sessions. Payment details never leave Stripe.
Cookies
We always use functional storage (such as your cart and language choice); statistics and marketing cookies only if you choose so in the cookie banner. Change your choice via "Cookie settings" at the bottom of every page. See the cookie statement.