Privacy policy

Version: October 2026

1. About this privacy policy

At BitcoinStuffStore, we take your privacy seriously. In this privacy policy, we explain what personal data we collect,
why we do so, how long we keep them, with whom we share them and what rights you have.
We act in compliance with the General Data Protection Regulation (AVG/GDPR) and other applicable privacy laws.

2. Who is responsible for processing?

BitcoinStuffStore is the data controller responsible for the processing of personal data via www.bitcoinstuffstore.com.

Trade name: BitcoinStuffStore (Mario Zijlstra's sole proprietorship)
Address: Westerd 44, 7943 GL Meppel, Netherlands
Chamber of Commerce: 90462769
Contact: office@bitcoinstuffstore.com

3. Applicability

This privacy policy applies to all personal data we process through our website, web shop and associated communication channels
(e.g., e-mail). The policy does not apply to third-party websites to which we link. If you visit those websites,
the privacy rules of those parties apply.

4. What data do we collect?

We may process (depending on use) the following personal data:

Order and account information: name, (company name if specified), billing and delivery address, e-mail address, phone number, order history.
Payment details: payment status, payment method and transaction references. (We generally do not receive full card or bank details; this is through the payment provider).
Contact details: Information you share when you email or make a request (e.g., question, complaint, return notification).
Technical and operating data: IP address, browser and device data, pages visited, click behavior and (anonymized or pseudonymized) analytics data.
Marketing preferences: consent to newsletters/offers and unsubscribe information (if you subscribe or unsubscribe).

5. Why do we process data?

We use personal data for the following purposes:

Processing, delivery and administration of orders.
Customer service and communication (e.g. questions, warranty, returns).
Improving our website and user experience (analytics and troubleshooting).
Security, fraud prevention and abuse detection.
Sending newsletters and offers (only if you have given permission).
Comply with legal obligations (e.g., tax records).

6. On what basis do we process data?

We process personal data only when permitted under the AVG. This means that we do so on the basis of one or more
Of the following bases:

Execution of an agreement: To process and deliver your order.
Legal obligation: administrative/fiscal retention obligations, for example.
Consent: For example, for newsletters or marketing cookies (where applicable).
Justified interest: for example, security, fraud prevention and improving our website. In doing so, we take your privacy interests into account.

7. Cookies and tracking

We use cookies and similar technologies to make the website work properly and, only with your consent, to gain insight into the use of the site. The cookie banner and the management of your consent are handled via the Cookiez plugin. Statistics scripts are only loaded after you have given permission for this, and you can change or withdraw your choice at any time.

You can read which cookies we use, how long they are stored, and how to change your consent in our Cookie policy.

8. Do we share data with third parties?

We share personal data with third parties only when necessary to perform our services, or when we are required to do so by law.
Consider:

Payment providers: Mollie (including iDEAL and credit card), PayPal, and WooPayments (Stripe) for processing payments. Bitcoin payments are handled via our own BTCPay Server; in the process, no data is shared with an external payment service.
Carriers: such as DHL and PostNL, which receive your name, address and, where necessary, your email address or telephone number for delivery.
Hosting and security: our hosting provider and Cloudflare (CDN and abuse protection).
Email Mailjet, for sending order and service emails and, only with your consent, the newsletter.
Statistics: Google Analytics, only after you have given permission for this via the cookie banner.
Reviews: Trustpilot, for displaying reviews on our site.

With parties who process personal data on our behalf, we enter into processor agreements where necessary.
We do not sell your information to third parties.

9. Transfer outside the EU/EEA

Some service providers may process personal data outside the EU/EEA. If that happens, we will ensure appropriate safeguards
as required under the AVG (for example, by using standard contractual clauses or equivalent protections).

10. Retention periods

We do not keep personal data longer than necessary for the purpose for which it was collected, unless we are required by law to keep it longer.

Order and billing information: up to 7 years (tax retention duty), in our records.
Customer details in the web store: name, address and email address on completed orders are automatically erased after about a month.
Account information: as long as your account is active, or until you request deletion (unless legal obligations dictate otherwise).
Customer service/communication: as long as necessary to handle your question or dispute, and then a reasonable time for filing at most.
Newsletter/Marketing Consent: until you opt out or withdraw your consent.
Technical logs and security data: as short as possible, and maximum as long as necessary for security and troubleshooting.

11. Security

We take appropriate technical and organizational measures to protect personal data from loss, misuse and unauthorized access.
No method is 100% secure, but we do everything we can to protect data as best we can.

You have several rights under the AVG, including:

right of inspection;
right to rectification (adaptation);
right to removal;
right to restriction of processing;
right to object;
right to data portability (transferability);
right to withdraw consent (if processing is based on consent).

Want to exercise any of these rights? Email us at office@bitcoinstuffstore.com.
We generally respond within 1 month.

13. Complaints

Do you have a complaint about how we handle your personal data? Please contact us first via
office@bitcoinstuffstore.com, then we will try to solve it together.
You also have the right to file a complaint with the Personal Data Authority.

14. Children's data

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children.
Do you think we have received data from a child anyway? Please contact us and we will remove it as soon as possible.

15. Changes

We may update this privacy policy. The most current version is always posted on the website. In the event of significant changes, we may
post a notice on the site or notify you via e-mail if appropriate.

16. Contact

Questions about this privacy policy or your information?
Email us at office@bitcoinstuffstore.com