Privacy Policy

(Nederlandstalige versie hier)


Privacy Policy

Molds and Shapes B.V.
Effective date: 29 July 2026

This Privacy Policy explains how Molds and Shapes B.V. (“Molds and Shapes”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit www.moldsandshapes.com (the “Website”), create an account, contact us or purchase our products.

Molds and Shapes B.V. is the controller responsible for the processing described in this Privacy Policy.

1. Our identity and contact details

Molds and Shapes B.V.
Registered office: Gentsevaart 6-N, 4565 EV Kapellebrug, the Netherlands
Postal address: Wilhelminastraat 31, 4564 AC Sint Jansteen, the Netherlands
Chamber of Commerce: 42102152
VAT identification number: NL869737387B01
Email: info@moldsandshapes.com
Website: www.moldsandshapes.com

You may use the email or postal address above for privacy questions or to exercise your rights.

2. Personal data we collect

The personal data we collect depends on how you use the Website.

2.1 Website and device data

When you visit the Website, certain technical information may be collected automatically, including:

  • IP address;
  • browser type and version;
  • device type, operating system and language settings;
  • approximate location derived from your IP address;
  • time zone, date and time of access;
  • cookie identifiers and consent preferences;
  • pages, products and links viewed;
  • search terms, referring page and interactions with the Website; and
  • technical logs, error data and security information.

We use this information to display and secure the Website, remember preferences, prevent misuse, resolve technical problems and—where consent is required and has been given—measure and improve Website performance and advertising.

2.2 Account and order data

When you create an account, place an order or request a quotation, we may collect:

  • name and, where applicable, company name;
  • billing and delivery address;
  • email address and telephone number;
  • account and login information;
  • products, quantities, customisation choices and order history;
  • VAT number or other business information where relevant;
  • delivery instructions and shipment information;
  • payment status, payment method, transaction reference and limited payment information; and
  • invoices, refunds, returns, complaints and correspondence concerning the order.

Payments are processed through payment providers such as Mollie and PayPal. Full card or bank credentials are generally entered directly into the secure environment of the relevant payment provider. We normally receive only the information needed to confirm and administer the payment and do not store complete card details ourselves.

2.3 Custom-made products and customer content

If you request a custom-made silicone mould or send us material for an order, we may process specifications, measurements, drawings, photographs, names, text, logos, models or other files you voluntarily provide. We use this information only to assess, manufacture, deliver and support the requested product, to protect our legal rights and to comply with legal obligations.

Please do not provide personal data about another person unless you have a lawful basis and authority to do so. Do not send special-category data, identification documents or other sensitive information unless we have specifically requested it and it is strictly necessary.

If you voluntarily send photographs or other content for possible publication, we will use that material for social media, the Website or marketing only after you have given permission or where you have expressly submitted it for publication. You may withdraw permission for future use by contacting us. Withdrawal does not affect lawful use before withdrawal.

2.4 Customer service and chat data

When you contact us by email, contact form, telephone, social media or Shopify Chat, we may collect your contact details, order number, the content of your message, attachments and any other information you choose to provide. We use this data to answer questions, give support, handle complaints and maintain a record of the communication where necessary.

2.5 Marketing data

If you subscribe to our newsletter or otherwise consent to marketing, we process your name, email address, language, subscription status and information about how you interact with our messages. We may also use purchase interests to tailor communications where this is permitted by law.

You can unsubscribe at any time by using the unsubscribe link in an email or by contacting us. Unsubscribing does not affect order-related or other necessary service messages.

We may process order, payment, device and communication data to detect suspicious transactions, protect accounts, prevent fraud, enforce our terms and establish, exercise or defend legal claims.

We process personal data only where we have a lawful basis. Depending on the circumstances, we rely on:

Purpose Legal basis
Operating the Website and providing essential functions Legitimate interests in operating a secure and functional online shop; performance of a contract where applicable
Creating and managing an account Performance of a contract or steps taken at your request before entering into a contract
Processing orders, payments, deliveries, returns and customer service Performance of a contract
Preparing quotations and custom-made products Steps taken at your request before entering into a contract; performance of a contract
Maintaining invoices, tax records and statutory administration Compliance with legal obligations
Preventing fraud, securing the Website and enforcing rights Legitimate interests in protecting customers, our business and our legal position
Responding to general enquiries Legitimate interests in customer service or steps taken at your request
Sending newsletters and electronic marketing Consent, unless another lawful basis is expressly permitted by applicable law
Analytics, advertising cookies and personalised advertising Consent where required by law
Publishing customer photographs or content Consent or the customer’s express request to publish
Handling product-safety notifications, warnings and recalls Compliance with legal obligations and legitimate interests in protecting users

Where processing is based on legitimate interests, we consider the necessity of the processing and balance our interests against your rights and reasonable expectations. You may object to such processing as explained in section 10.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. How we share personal data

We do not sell your personal data. We share data only where necessary for the purposes described in this Policy, including with:

  • Shopify, which hosts and powers our online store, customer accounts, checkout and related ecommerce functions;
  • Mollie and PayPal, for payment processing, fraud prevention, refunds and payment administration;
  • Sendcloud, PostNL and other selected carriers or fulfilment partners, for labels, delivery, tracking, returns and shipment support;
  • providers of email, newsletter, customer-service and chat services, including Shopify services where enabled;
  • professional advisers such as accountants, auditors, insurers, IT providers, legal advisers and debt-collection service providers where necessary;
  • analytics, advertising and social-media providers such as Google and Meta, but only for non-essential tracking where the required consent has been given;
  • competent authorities, regulators, courts or law-enforcement bodies where disclosure is legally required or necessary to protect rights and safety; and
  • a purchaser, investor or successor in connection with a proposed or completed reorganisation, financing, merger or transfer of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

Service providers may process personal data only for agreed purposes and under applicable contractual and legal safeguards. Some providers may also act as independent controllers for parts of their services, particularly payment providers, carriers, social-media platforms and other services you choose to use. Their own privacy notices then also apply.

5. Shopify and international data transfers

Our store is hosted by Shopify. For merchants in Europe, Shopify International Limited in Ireland is generally the main contracting Shopify entity. Shopify and its approved subprocessors may process personal data in the European Economic Area (“EEA”), the United Kingdom, Switzerland, Canada, the United States and other countries in which they operate.

Where personal data is transferred outside the EEA to a country that does not benefit from an adequacy decision, we or our service providers use recognised safeguards where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary technical and organisational measures where appropriate. Shopify states that it relies on the European Commission’s adequacy decision for relevant transfers to Canada and on data-processing agreements incorporating Standard Contractual Clauses for relevant international and onward transfers.

Other providers may also process data outside the EEA. We take reasonable steps to ensure that each transfer is based on a lawful transfer mechanism. You may contact us for further information about the safeguards relevant to your personal data.

6. Cookies and similar technologies

Cookies and similar technologies are small files or identifiers used to operate a website, remember preferences, measure use and support advertising.

We may use:

  • strictly necessary cookies, required for functions such as security, shopping-cart contents, checkout, account access, fraud prevention and privacy preferences;
  • preference cookies, which remember choices such as language or region;
  • analytics cookies, which help us understand Website use and improve performance; and
  • marketing cookies, which may measure campaigns, create audiences or support personalised advertising through providers such as Google or Meta.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential analytics and marketing cookies are used only after consent where required. You can give, refuse or change your choices through the cookie banner or cookie settings on the Website. You may also delete or block cookies through your browser, although essential features may then not function correctly.

Details of the cookies currently used, their providers, purposes and durations are provided in our separate Cookie Policy or cookie-preference tool. Because Website applications and integrations may change, that information may be updated from time to time.

7. Personalised advertising and social media

If you consent to marketing technologies, information about your browser, device and interactions may be shared with advertising partners such as Google or Meta to measure campaigns, limit repeated advertising, create audiences or show more relevant advertising.

You can refuse or withdraw cookie consent through our cookie settings. You can also adjust advertising preferences directly in your Google or Meta account. Withdrawing consent does not necessarily stop all advertising, but it prevents our use of non-essential Website tracking for personalised advertising from that point onward.

We respond to legally recognised browser-based privacy signals where required by applicable law and supported by our Website technology. Because there is no single universally applicable “Do Not Track” standard, a generic Do Not Track signal may not by itself change all Website functions.

8. Automated decision-making

Molds and Shapes does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Shopify, Mollie, PayPal or other payment and ecommerce providers may use automated tools to identify fraud, abuse or payment risk. These checks may result in a transaction being delayed, refused or referred for review. Where you believe an automated check has incorrectly affected an order, you may contact us, although a payment provider may need to handle questions concerning its own independent decision.

9. How long we retain personal data

We retain personal data only for as long as necessary for the relevant purpose, including legal, accounting, tax, product-safety and dispute-resolution requirements. In general:

  • invoices, payment records and basic business administration are retained for at least seven years, and for ten years where a longer tax or One Stop Shop retention period applies;
  • order and warranty-related information is retained for the statutory administration period and, where necessary, for the duration of applicable claims, conformity obligations or disputes;
  • account data is retained while the account is active and afterwards only as necessary for orders, legal obligations, security and claims;
  • customer-service and complaint correspondence is generally retained for up to two years after the matter is closed, unless a longer period is necessary for an order, dispute, safety matter or legal obligation;
  • unsuccessful quotation or custom-product enquiry data is generally deleted within two years after the last contact, unless you ask us to delete it sooner or a longer period is justified;
  • newsletter data is retained until you unsubscribe or withdraw consent, after which we may retain limited suppression information to ensure that your preference is respected;
  • cookie and analytics data is retained according to the periods shown in the Cookie Policy or cookie settings; and
  • product-safety, warning and recall records may be retained for as long as reasonably necessary to demonstrate compliance and protect users.

We may retain limited data for longer where required by law or necessary to establish, exercise or defend legal claims. When data is no longer needed, it is deleted, anonymised or securely destroyed.

10. Your privacy rights

Under the GDPR and applicable European data-protection law, you may have the right to:

  • obtain confirmation whether we process your personal data and request access to it;
  • have inaccurate data corrected and incomplete data completed;
  • request deletion of personal data in circumstances provided by law;
  • request restriction of processing;
  • receive personal data you provided in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller;
  • object to processing based on legitimate interests, including profiling based on those interests;
  • object at any time to direct marketing;
  • withdraw consent at any time, without affecting earlier lawful processing; and
  • not be subject to a decision based solely on automated processing that has legal or similarly significant effects, subject to statutory exceptions.

These rights are not absolute. We may need to retain or continue processing certain information, for example to comply with tax law, complete a contract, protect the rights of others or establish and defend legal claims.

To exercise a right, email info@moldsandshapes.com. Please describe your request clearly. We may ask for information reasonably necessary to verify your identity and prevent unauthorised disclosure. We will respond within the period required by law, normally within one month. If a request is particularly complex or numerous, this period may be extended as permitted by law and we will inform you.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens. If you live elsewhere in the EEA, you may also contact the supervisory authority in your country of residence or work.

11. Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, secure connections, appropriate contractual arrangements and limiting access to persons who need the data for their work.

No online transmission or storage system is completely secure. You are responsible for keeping account credentials confidential and for contacting us promptly if you suspect unauthorised use of your account.

12. Children

The Website and our products are not directed at children for the purpose of independently purchasing products or providing personal data. Persons under the age at which they may validly enter into an online purchase or consent to relevant data processing should use the Website only with the involvement of a parent or legal guardian.

If you believe a child has provided personal data to us without appropriate permission, please contact us so that we can assess and, where appropriate, delete it.

The Website may contain links to third-party websites, social-media pages, payment services or applications. We are not responsible for the privacy practices of independent third parties. Please review their privacy notices before providing personal data.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our Website, service providers, business practices or legal requirements. The latest version will be published on the Website with a revised effective date. Where a change materially affects how we use personal data, we will provide additional notice where required.

15. Contact

For privacy questions, requests or complaints, contact:

Molds and Shapes B.V.
Postal address: Wilhelminastraat 31, 4564 AC Sint Jansteen, the Netherlands
Email: info@moldsandshapes.com