Privacy policy
Last updated: 23 August 2026
Decorations by Bram respects your privacy and handles personal data with care.
In this Privacy Policy, we explain which personal data we process when you visit our webshop, place an order, book a workshop, subscribe to our newsletter or otherwise contact us. We also explain why we use this data, with whom we share it, how long we retain it and what rights you have.
1. Who is responsible for your personal data?
Decorations by Bram is responsible for the processing of personal data as described in this Privacy Policy.
Decorations by Bram
Grazenseweg 6A
4856 BB Strijbeek
The Netherlands
Email: info@decorationsbybram.nl
Telephone: +31 (0)85 576 07 089
Chamber of Commerce number: 42046202
VAT number: NL869460195B01
For questions about privacy or to exercise your privacy rights, you can contact us at info@decorationsbybram.nl.
2. What personal data do we process?
The personal data we process depends on how you use our webshop and services.
2.1 Contact and order details
When you place an order, book a workshop or contact us, we may process, among other things:
- name;
- email address;
- telephone number;
- billing address;
- delivery address;
- order details;
- products purchased and selected variants;
- selected shipping, delivery or collection method;
- workshop reservations;
- communications relating to your order, workshop or enquiry.
2.2 Payment and transaction data
For processing and administering payments, we process data such as:
- the amount paid;
- the selected payment method;
- payment status;
- transaction and reference details.
Information required to actually process a payment, such as full payment card or bank details, is, where applicable, processed directly by Shopify Payments, Mollie or another payment service provider involved in the transaction.
Decorations by Bram does not necessarily receive or store all full payment details itself.
2.3 Account data
If you use a customer account, we may process information necessary to manage that account, such as contact details, account identification, preferences and settings.
2.4 Data about the use of our webshop
When you visit our webshop, technical information may be processed automatically, such as:
- IP address;
- device type;
- browser and operating system;
- technical identifiers;
- pages visited;
- products viewed;
- interactions with the webshop;
- information about how you reached our webshop.
Some of this information is processed using cookies and similar technologies.
For non-essential cookies and tracking technologies, we ask for consent where this is legally required.
2.5 Communications
When you send us an email, complete a contact form or otherwise contact us, we process the information necessary to answer your question, make arrangements with you or provide our services.
3. Workshops, dietary requirements and allergies
We do not request health information through the webshop or through our booking system.
Before a workshop, we may contact the lead booker directly to discuss practical requirements, dietary preferences, allergies or other relevant circumstances.
Information about an allergy or medical intolerance may constitute health data and therefore special-category personal data.
We only request information that is necessary to organise the workshop safely and appropriately, and we process health information only where a valid legal basis exists, including explicit consent where required.
Where a lead booker provides information about another participant, we ask that this is only done with that participant’s consent.
Health information:
- is used exclusively for the relevant workshop;
- is not stored as standard customer information in Cowlendar;
- is not retained longer than necessary;
- is, in principle, deleted no later than 30 days after the relevant workshop.
4. Why do we process personal data?
We only process personal data where there is a valid legal basis for doing so.
4.1 Orders and deliveries
We use personal data to:
- process orders;
- administer payments;
- produce products;
- ship or deliver orders;
- arrange collection;
- process returns and refunds;
- contact you about an order.
Legal basis: performance of a contract.
4.2 Workshops
We use personal data to:
- process a workshop booking;
- reserve a date and time;
- manage participant numbers and packages;
- process payments;
- send practical information;
- contact you about the workshop.
Legal basis: performance of a contract.
For health data, such as information about allergies or medical intolerances, we additionally rely on explicit consent where required.
4.3 Financial administration
We process and retain certain personal data because we are legally required to do so, for example for financial, tax and accounting purposes.
Legal basis: legal obligation.
4.4 Customer service and communication
We use personal data to answer questions, resolve issues and provide our services properly.
Legal basis: performance of a contract or our legitimate interest in providing good customer service, depending on the circumstances.
4.5 Security and fraud prevention
We may process personal data to protect our webshop, payments and customers against fraud, misuse, security incidents and other unauthorised activities.
Legal basis: our legitimate interest in maintaining a safe and reliable webshop and, where applicable, a legal obligation.
4.6 Newsletter
We send our newsletter only to people who have actively subscribed.
Through the newsletter, we may inform you about:
- new creations;
- inspiration;
- workshops;
- news from Decorations by Bram;
- offers and promotions.
Legal basis: consent.
You can unsubscribe at any time using the unsubscribe link in the newsletter.
Unsubscribing from marketing communications does not affect necessary communications relating to, for example, an order, payment or workshop booking.
We use Shopify Email for our newsletters.
4.7 Analytics and advertising
With your consent, we may use data to:
- understand how our webshop is used;
- analyse webshop performance;
- measure conversions;
- improve our marketing;
- measure advertising performance;
- show more relevant advertisements.
For this purpose, we use or may use, among other services:
- Shopify Analytics;
- Google Analytics;
- Google Ads;
- Meta Pixel;
- Meta Business Suite;
- Facebook and Instagram advertising services.
For cookies and other technologies for which consent is required, we take into account the choices you make through our cookie banner and privacy settings.
5. Shopify
Our webshop operates on the Shopify platform.
Shopify processes personal data required to provide the webshop, orders, customer accounts, payments, security, analytics and other technical functions.
We use, among other services:
- Shopify as our webshop platform;
- Shopify Payments;
- Shopify Email;
- Shopify Analytics.
For some processing activities, Shopify may act as a processor on behalf of Decorations by Bram, while for other activities it may act as an independent controller.
More information about Shopify’s processing of personal data can be found in Shopify’s privacy policy for consumers.
6. Shopify Network Intelligence
Decorations by Bram has enabled Shopify Network Intelligence.
This allows Shopify to combine certain information about interactions and transactions with our webshop with information about interactions with other Shopify stores and Shopify itself.
Shopify uses this information for so-called Enhanced Services. These may include:
- personalising the shopping experience;
- improving Shopify services;
- analytics;
- security and fraud prevention;
- measuring and optimising marketing;
- providing more relevant advertising, where permitted under applicable privacy law.
For visitors from the Netherlands, Belgium and other regions where consent is required, non-essential advertising and tracking activities are adjusted according to the choices made through our cookie banner and privacy settings.
For this purpose, we have enabled Shopify’s privacy and cookie settings as well as the available options for managing data sharing.
Shopify may act as an independent controller for certain processing activities within Network Intelligence.
More information and available privacy choices can be found at:
Shopify Privacy Policy for Consumers
Shopify Privacy Portal and Privacy Choices
7. Payments
Shopify Payments
When you pay using Shopify Payments, the information necessary to process the payment is processed by Shopify and the financial service providers involved.
Mollie
We may also use Mollie to process payments.
For this purpose, Mollie processes data necessary for, among other things:
- processing payments;
- payment confirmation;
- fraud prevention;
- security;
- compliance with financial laws and regulations.
Mollie may act as an independent controller for these payment services.
Mollie’s own Privacy Policy also applies to processing carried out by Mollie.
8. Workshop reservations through Cowlendar
We use Cowlendar to schedule and manage workshops.
For a reservation made through Cowlendar, we process, among other things:
- name;
- email address;
- telephone number;
- selected workshop;
- date and time;
- information necessary to manage the reservation.
We do not use Cowlendar to collect allergies, medical information or other health data.
Cowlendar is currently not connected to our Google Calendar.
9. Shipping and delivery
We use MyParcel to process our shipments.
For shipping purposes, we may provide MyParcel with information including:
- name;
- delivery address;
- email address;
- telephone number;
- order reference;
- shipping information.
MyParcel uses this information, among other things, to create shipping labels and provide the necessary information to the relevant carrier.
Depending on the selected shipping method, an order may be delivered by:
- PostNL;
- DHL;
- DPD;
- UPS.
The relevant carrier may process personal data for purposes such as:
- delivery;
- Track & Trace;
- delivery communications;
- delivery to a collection point;
- handling issues or claims relating to a shipment.
For certain processing activities, the carrier may act as an independent controller.
Where Decorations by Bram delivers an order locally itself, no personal data is provided to an external carrier for that delivery.
10. Bookkeeping and accountancy
Jortt
We use Jortt for our financial administration.
Information from orders and payments may be processed for this purpose, including:
- name and contact details;
- billing details;
- order details;
- transaction details;
- financial information necessary for our administration.
Jortt processes this personal data for bookkeeping purposes on our behalf.
Van Oers
For accountancy and tax services, we work with Van Oers N.V. in Breda.
Where necessary, financial and administrative personal data may be shared with Van Oers.
Depending on the services concerned, Van Oers may act as a processor on behalf of Decorations by Bram or as an independent controller where Van Oers processes data pursuant to its own legal or professional obligations.
11. Google
We use or may use Google services, including:
- Google Analytics;
- Google Ads.
Through these services, Google may process information relating to the use of our webshop, interactions, devices, conversions and advertising performance.
For non-essential cookies, advertising tracking and personalised advertising, the consent choices made through our cookie banner are taken into account.
Our Google integration uses Google Consent Mode to communicate these consent choices to the Google services we use.
Google may act as an independent controller for certain processing activities.
12. Meta, Facebook and Instagram
We use Facebook and Instagram for communication and marketing.
When we activate Meta’s advertising and measurement features, we may use technologies such as:
- Meta Pixel;
- Meta Conversions API;
- Meta Business Suite;
- Facebook Ads;
- Instagram Ads.
Depending on the settings we use, data may be shared with Meta concerning, for example:
- pages visited;
- products viewed;
- shopping cart activity;
- purchases;
- advertising interactions;
- device and browser information;
- name;
- email address;
- telephone number;
- location information available for matching purposes.
This additional information may be used to match events with Meta users, measure advertising performance and, where consent has been given, display more relevant advertisements.
For visitors for whom consent is legally required, this processing takes place in accordance with the choices made through our cookie settings.
Not all Meta features mentioned above are necessarily active at all times. The processing that actually takes place depends on the Meta integrations and settings used by Decorations by Bram at that time.
13. Social media and external links
Our webshop may contain links to our pages on platforms such as:
- Instagram;
- Facebook;
- LinkedIn.
Where these are simply ordinary links or social media icons, no information is automatically transmitted to the relevant platform merely because the link is displayed on our page.
When you click a link to an external platform, you leave our webshop and the relevant platform may independently process personal data.
The privacy policy of that platform applies to such processing.
If, in the future, we add an embedded social media feed or another external widget, we will reassess which data is processed and update our privacy and cookie information where necessary.
14. With whom do we share personal data?
We only share personal data where this is necessary for our services, business operations, administration, security or legal obligations.
Depending on the service used, personal data may be processed by or shared with:
- Shopify;
- Shopify Payments;
- Mollie;
- Cowlendar;
- MyParcel;
- PostNL;
- DHL;
- DPD;
- UPS;
- Jortt;
- Van Oers;
- Google;
- Meta;
- other service providers necessary to operate our webshop safely and technically.
We do not provide more personal data than is reasonably necessary for the relevant purpose.
We may also disclose personal data where we are legally required to do so or where this is necessary for the establishment, exercise or defence of legal claims.
15. Cookies and similar technologies
Our webshop uses cookies and similar technologies.
Essential cookies
Some cookies are necessary for our webshop to function properly, for example for:
- security;
- shopping cart functionality;
- checkout;
- payment;
- essential preferences.
Prior consent is not always required for strictly necessary cookies.
Non-essential cookies
For other purposes, cookies and similar technologies may be used for:
- analytics;
- personalisation;
- conversion measurement;
- marketing;
- advertising.
Where consent is required, we ask for it in advance through our cookie banner.
You can change or withdraw your choice later through the privacy or cookie settings of our webshop.
More information about the cookies used and their retention periods is provided in our Cookie Policy and/or the cookie settings of the webshop.
16. How long do we retain personal data?
We do not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally required to retain it for a longer period.
In general, we apply the following retention periods:
Financial, order and invoice data
Data forming part of our statutory financial and tax administration is generally retained for 7 years.
Where a longer statutory retention period applies, we will comply with that longer period.
OSS administration
Where information forms part of records subject to the European One Stop Shop scheme, we may retain that information for 10 years.
Customer accounts
Account information is generally retained for as long as the customer account remains active.
When an account is deleted, certain information may still be retained where this is required by law.
Newsletter
Newsletter information is used until you unsubscribe.
After unsubscribing, we may retain limited information where this is necessary to record that you no longer wish to receive marketing communications or to demonstrate the lawfulness of communications previously sent.
General customer correspondence
General enquiries and customer correspondence are generally retained for a maximum of 2 years after the relevant question or matter has been resolved.
Where correspondence forms part of an agreement, complaint, dispute or statutory administration, a longer retention period may be necessary.
Workshop data
Practical workshop information is retained no longer than necessary for the reservation, performance and administrative processing of the workshop.
Where workshop information forms part of an order or financial administration, it may be retained for longer in accordance with statutory administrative retention periods.
Allergies and health information
Information about allergies, medical intolerances or other health data is generally deleted no later than 30 days after the relevant workshop.
Cookies and tracking data
For cookies and tracking data, the retention periods stated in our cookie settings or in the policy of the relevant service apply.
17. International processing of personal data
Some of our service providers are part of international organisations or use infrastructure outside the European Economic Area.
As a result, personal data may be processed outside the EEA.
Where personal data is transferred to a country for which an adequate level of protection has not been recognised, there must be a valid legal basis for that transfer.
This may include the use of:
- an adequacy decision of the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- Binding Corporate Rules;
- other safeguards permitted under the GDPR.
For international processing for which an external service provider acts as an independent controller, we also refer to that provider’s own privacy policy.
18. Security
We take appropriate technical and organisational measures to protect personal data against, among other things:
- loss;
- misuse;
- unauthorised access;
- unauthorised disclosure;
- alteration;
- other unlawful processing.
No form of electronic storage or data transmission can guarantee absolute security.
19. Personal data relating to children
Our webshop is not specifically directed at children.
We do not knowingly collect personal data relating to children where, under applicable law, the consent of a parent or legal guardian is required.
If you believe that we are processing a child’s personal data incorrectly, you can contact us at info@decorationsbybram.nl.
20. Your privacy rights
Where we process your personal data, you may, depending on the circumstances, have the right to:
- request access to your personal data;
- have inaccurate or incomplete information corrected;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing activities;
- receive your data in a portable format where the right to data portability applies;
- withdraw previously given consent.
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To submit a privacy request, please contact:
We may request additional information where necessary to verify your identity and prevent personal data from being provided to the wrong person.
We generally respond to a privacy request within one month.
Where a request is complex or several requests are made at the same time, this period may be extended in accordance with the GDPR. We will inform you if this applies.
21. Privacy complaints
If you have a question or complaint about the way we process personal data, we ask that you preferably contact us first at:
You also have the right to lodge a complaint with a competent supervisory authority.
Because Decorations by Bram is established in the Netherlands, you may, among other options, contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
If you live in Belgium, you may also contact the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).
If you live in another country within the EEA, you may contact the competent supervisory authority in your own country.
22. Changes to this Privacy Policy
Our webshop, the apps we use and our services may change.
We may therefore amend this Privacy Policy where:
- our services change;
- we start using new systems or service providers;
- the way we process personal data changes;
- laws or regulations change.
The most recent version is always available on our webshop.
The date on which this Privacy Policy was last updated is shown at the top of this document.
Where a change has significant consequences for the way we process personal data, we will inform the persons concerned where legally required.
23. Contact
For questions about privacy, this Privacy Policy or the processing of personal data, please contact:
Decorations by Bram
Grazenseweg 6A
4856 BB Strijbeek
The Netherlands
Email: info@decorationsbybram.nl
Telephone: +31 (0)85 576 07 089