Version: August 2025

Chocopuur, located at Steenplaetsstraat 6, Unit 4.14, 2288 AA Rijswijk, is responsible for the processing of personal data as set out in this privacy statement.

1. Contact details
Company name: Chocopuur
Chamber of Commerce number: 87336715
Address: Steenplaetsstraat 6, Unit 4.14, 2288 AA Rijswijk
Email address: info@chocopuur.com

2. Personal data we process
Chocopuur processes your personal data because you use our services and/or because you provide this data to us yourself.
Data we process:

• First and last name

• Address details

• Phone number (WhatsApp)

• Email address

• Order and payment details

• Data about your order and delivery

We do not process special categories of personal data (such as medical or sensitive data).

3. Purposes and legal bases of processing
We process your data for the following purposes:

• Processing your order (performance of contract)

• Shipping your order via our carriers (performance of contract)

• Processing payments (performance of contract and legal obligation)

• Customer service and aftersales (legitimate interest)

Marketing via WhatsApp: Chocopuur does not send offers or advertisements via WhatsApp. We only use WhatsApp for communication about orders and customer service.

4. How long we keep personal data

• Invoice and transaction data: 7 years (legal tax retention obligation)
• WhatsApp messages related to orders: maximum 12 months
• Customer service inquiries: maximum 12 months after completion
  
  

5. Sharing personal data with third parties
Chocopuur only shares your data with third parties if necessary for our services or if legally required.

6. Transfer outside the EU
WhatsApp (Meta) and PayPal may process personal data outside the EU. This only takes place under the safeguards of the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

7. Security of personal data
Chocopuur takes appropriate measures to prevent misuse, loss, and unauthorized access, such as:

• 2-step verification on WhatsApp Business and email
  
• Encrypted devices and secure networks
• Access restrictions: only authorized staff have access

8. Your rights
You have the right to access, correct, or delete your personal data. You also have the right to object to the processing of your data or withdraw your consent.
You can submit a request via info@chocopuur.com. We will respond within 30 days.

9. Complaints
Not satisfied with how we handle your data? You can always file a complaint with the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl.

10. Changes
Chocopuur reserves the right to amend this privacy statement. The most recent version will always be published on the website.