Draft · Updated October 2026
Privacy and cookies
[legal name of the company, e.g. Embra B.V.] (Embra) is responsible for the personal data handled through this website. This page explains what we keep, why, and for how long.
What we keep, and why
Orders: your name, e-mail address, delivery address and what you ordered, to deliver it, to invoice it and to keep the records the law requires.
Messages: what you send through the contact or wholesale form, to answer you.
Newsletter: your e-mail address, only after you confirm it from the e-mail we send; you can unsubscribe at any time by replying to any of our e-mails.
Bag reminder: your e-mail address and your bag, only if you tick the box at the checkout, for one reminder.
On what basis
To perform the contract (your order), to meet legal obligations (tax records), and with your consent (newsletter, bag reminder, analytics and marketing cookies). Consent can be withdrawn at any time.
Who helps us
We use service providers who handle data on our behalf, under agreements that bind them to these purposes: Supabase (the shop's database, servers in the EU), Stripe (payments), Resend (e-mail), Moneybird (invoicing), DHL (delivery), and, only with your consent, Google, Meta and Microsoft (analytics and advertising). Some of these may process data outside the EU, under the safeguards the GDPR requires.
How long
Order and invoice records: 7 years, as Dutch tax law requires. Messages: up to 2 years after the last contact. Newsletter: until you unsubscribe. Bag reminders: deleted after the reminder or within 30 days.
Cookies
Necessary: the bag and the checkout. These do not need consent.
Analytics (with consent): Google Analytics and Microsoft Clarity, to see how the shop is used.
Marketing (with consent): the Meta pixel and Google Ads, to measure our advertising.
You choose on your first visit, and can change your choice at any time with “Cookie settings” at the foot of every page.
Your rights
You can ask to see, correct, delete or receive your data, or object to its use, by writing to [contact e-mail address]. If you are not satisfied with our answer, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).