Legal · Privacy

Privacy Policy

Effective date: 24 October 2023  ·  Last updated: June 2026  ·  Version 2.0
Controller: Dhuke Collectibles · KvK 91765978 · NL003797993B63 · Goudreinetgaard 5, 6831AT Arnhem, Netherlands

Dhuke Collectibles ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, what lawful basis we rely on, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) as implemented in Dutch law (UAVG).

If you have any questions about this policy, contact us at info@dhukecollectibles.com before using our services.
1. Who We Are & How to Contact Us
Data Controller Dhuke Collectibles is the data controller responsible for your personal data.

Registered name: Dhuke Collectibles
Address: Goudreinetgaard 5, 6831AT Arnhem, Netherlands
KvK: 91765978
VAT: NL003797993B63
Email: info@dhukecollectibles.com
WhatsApp: +31 684 553 752
Data Protection Officer Dhuke Collectibles is a small business and is not required to designate a formal Data Protection Officer under Article 37 GDPR. All data protection enquiries should be directed to info@dhukecollectibles.com.
2. What Data We Collect & Why

We collect personal data only where we have a lawful basis to do so. The table below sets out what we collect, why, and the lawful basis under Article 6 GDPR:

Data category What we collect Why Lawful basis (Art. 6 GDPR)
Identity & contact Full name, email, phone number To process your order, respond to enquiries, send order updates Contract performance (Art. 6(1)(b))
Delivery Shipping and billing address To deliver your order and issue invoices Contract performance (Art. 6(1)(b))
Payment Payment method details (processed by third-party payment processor — we do not store card data) To collect payment for orders Contract performance (Art. 6(1)(b))
Measurement data Body measurements and style preferences collected during consultation To produce your bespoke garment to the correct specifications and to support the 30-day complimentary alteration window Contract performance (Art. 6(1)(b))
Booking data Name, email, appointment date/time collected via Google Calendar booking system To manage your fitting appointment at The Dhuke Atelier Contract performance (Art. 6(1)(b))
Communications Content of emails, WhatsApp messages, or other correspondence To respond to your enquiries and maintain a record of our agreement Contract performance / Legitimate interests (Art. 6(1)(b) / (f))
Website usage IP address, browser type, device information, pages visited, cookies To operate the website, analyse performance, and improve user experience Legitimate interests (Art. 6(1)(f)) for essential; Consent (Art. 6(1)(a)) for analytics/marketing cookies
Marketing Email address, communication preferences To send promotional messages about our products and services Consent (Art. 6(1)(a)) — you may withdraw at any time

We do not collect special category data (sensitive personal data under Article 9 GDPR) and do not carry out automated decision-making or profiling that produces legal effects.

3. Cookies & Tracking Technologies
Cookie consent When you first visit our website, you will be asked to consent to non-essential cookies via our cookie consent banner (provided by Webador). Essential cookies that are strictly necessary for the website to function are placed without consent. Non-essential cookies (analytics, marketing) are only placed after you have given explicit consent.
Types of cookies we use Essential cookies: Necessary for basic website functionality (shopping cart, session management, security). Cannot be disabled without affecting website performance.

Analytics cookies: Help us understand how visitors use our website (e.g. pages visited, time spent). Only placed with your consent.

Marketing cookies: Used to deliver relevant advertising and track campaign performance. Only placed with your consent.
Managing cookies You can withdraw your cookie consent at any time by clearing cookies in your browser settings or by contacting us at info@dhukecollectibles.com. Note that withdrawing consent for analytics or marketing cookies will not affect the lawfulness of processing carried out before withdrawal.
4. Who We Share Your Data With

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes. We share your data only in the following circumstances:

Recipient Purpose Safeguards
Shipping providers To deliver your order (name and delivery address shared) Data processing agreement in place; data used solely for delivery
Payment processors To process your payment securely PCI-DSS compliant; we do not store card data ourselves
Google (Calendar) To manage appointment bookings via Google Calendar scheduling Google processes data under its own privacy policy and GDPR commitments; data stored on Google servers
Website platform (Webador) Our website is hosted by Webador; technical data (IP address, session data) passes through their infrastructure Webador processes data under its own privacy policy
Legal authorities Where required by law, court order, or regulatory authority Disclosure limited to what is legally required

Where data processors are located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or adequacy decisions) in accordance with GDPR Chapter V.

5. How Long We Keep Your Data
Data type Retention period Reason
Order and transaction records 7 years from the date of transaction Dutch tax law (Belastingdienst) requires financial records to be kept for 7 years
Measurement data Duration of the client relationship + 1 year, or until deletion requested To support alterations, repeat orders, and ongoing service. Deleted promptly on request.
Booking / appointment data 12 months from the appointment date For service history and follow-up communication
Marketing communications consent Until consent is withdrawn We only send marketing where you have consented and will stop immediately on withdrawal
General correspondence (email, WhatsApp) 3 years from last contact For service continuity and dispute resolution
Website analytics (cookies) As per cookie expiry (typically 1-2 years) Standard analytics retention; adjustable in cookie settings
6. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights. We will respond to all requests within 30 days (extendable by 2 months for complex requests, with notification):

Right of Access (Art. 15)

Request a copy of the personal data we hold about you, including the purposes for processing and how long we keep it.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure (Art. 17)

Request deletion of your personal data where there is no longer a lawful basis to hold it. Note: we may need to retain certain data to comply with legal obligations (e.g. tax records).

Right to Restrict Processing (Art. 18)

Request that we limit how we use your data while a dispute or complaint is being resolved.

Right to Data Portability (Art. 20)

Request your personal data in a structured, commonly used, machine-readable format, or ask us to transfer it directly to another controller.

Right to Object (Art. 21)

Object to processing based on legitimate interests or for direct marketing purposes. We will stop processing immediately on receipt of an objection to direct marketing.

Right to Withdraw Consent (Art. 7(3))

Where processing is based on consent (e.g. marketing emails, analytics cookies), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Complain (Art. 77)

You have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens (AP), Postbus 93374, 2509 AJ Den Haag.

To exercise any of these rights, contact us at info@dhukecollectibles.com. We may need to verify your identity before processing your request.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

Technical measures SSL/TLS encryption for all data transmitted via our website; secure third-party payment processing (we do not store payment card data); access controls limiting who can view personal data within our organisation.
Organisational measures Personal data is accessed only by those who need it to perform their role. We review our security practices regularly.
Data breach In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and, where required, notify affected individuals without undue delay.

No system is completely secure. We cannot guarantee absolute security, but we are committed to taking reasonable steps to protect your data.

8. Third-Party Links

Our website may contain links to third-party websites (e.g. social media platforms, Google Maps). We are not responsible for the privacy practices of those websites and this Privacy Policy does not apply to them. We encourage you to read their privacy policies before submitting any personal data.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will:

How we notify you Post the updated policy on this page with a revised "Last Updated" date, and where the change is significant, notify you by email (if we hold your email address) at least 14 days before the change takes effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

We recommend checking this page periodically. Previous versions are available on request.

10. Contact Us
For all privacy enquiries and rights requests Dhuke Collectibles
Goudreinetgaard 5, 6831AT Arnhem, Netherlands
KvK: 91765978 · VAT: NL003797993B63

Email: info@dhukecollectibles.com
WhatsApp: +31 684 553 752
Website: www.dhukecollectibles.com
Supervisory authority If you are not satisfied with our response to your privacy request, you have the right to complain to the Dutch data protection authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl
Postbus 93374, 2509 AJ Den Haag
Tel: +31 70 888 8500
Your rights matter to us. This Privacy Policy is designed to be clear and honest about how we handle your data. If anything is unclear, please contact us at info@dhukecollectibles.com — we will respond within 2 business days. For independent guidance on your data rights, you can also consult Autoriteit Persoonsgegevens or seek free legal advice at Juridisch Loket.