We process as little personal data as possible. We do not use tracking cookies, advertising networks or third-party analytics. Below you can read which data we do use, why and for how long. This privacy policy follows the General Data Protection Regulation (GDPR).
Who is responsible?
LayerkitNL
Email: info@layerkit.nl
Chamber of Commerce (KvK) number: 85152447
VAT number: NL004058079B93
For privacy questions, email info@layerkit.nl.
What data, for what purpose and on what legal basis
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Order | Email address, name, billing country, designs ordered, amounts, time of your consent to immediate delivery | Fulfil your order, deliver downloads, issue an invoice | Performance of the contract |
| VAT evidence | The country of your bank account or payment card (as passed on by Mollie), the country Mollie detects at checkout, your IP address and the country it belongs to | Determine and prove the country you live in, for the correct VAT | Legal obligation |
| Payment | Payment method and payment details, processed by Mollie | Handle payment and refunds, prevent fraud | Performance of the contract |
| My downloads | Email address and a one-time login link | Give you access to earlier purchases without a password | Performance of the contract |
| Newsletter | Email address, language, date of sign-up and confirmation | Email you about new designs | Consent (double opt-in) |
| Contact | Whatever you email us | Answer your question or complaint | Legitimate interest |
We never store card or bank details. Those are processed by Mollie only. Mollie tells us the payment status, the payment method you chose and the country of your bank or card (for VAT).
Cookies
We only use cookies that are needed for the website to work. These do not require consent, which is why you do not see a cookie banner.
- cart: remembers which designs are in your cart. Contains no personal data.
- discount: remembers the discount code you entered in your cart.
- A session cookie when you are logged in to "My downloads".
At checkout you go to Mollie's payment page. Mollie may set its own cookies there, needed for secure payment and fraud prevention. See Mollie's privacy statement.
Statistics
On our own server we count how often each page is viewed per day. We do this without cookies and without storing IP addresses or any other data that could identify you.
Who we share data with
We never sell your data. We only use the following processors, with whom we have agreements on protecting your data:
- Mollie (Mollie B.V., Amsterdam, the Netherlands): payment processor for all payments and refunds. For the payment itself, Mollie as a payment institution is also responsible for your data in its own right.
- Wesender: sending emails, such as your order confirmation, download links and the newsletter.
- Our hosting provider: the server that runs the website and the database.
We also pass on data where the law requires it, for example to the Dutch Tax Administration.
How long we keep data
- Orders, invoices and VAT evidence: 7 years, as required by Dutch tax law. For VAT returns under the OSS scheme, a retention period of 10 years applies.
- Login links for "My downloads": they expire shortly after creation and can only be used once.
- Newsletter: until you unsubscribe, using the link at the bottom of every newsletter.
- Emails with questions: as long as needed to handle your question, and then for at most 2 years.
Security
The website uses an encrypted connection (HTTPS). Download links are personal, valid for a limited time and can be revoked. Access to the admin area is protected with a password and two-factor authentication.
Your rights
You have the right to access, correct or delete your data, to object to processing, to restrict processing and to data portability. Where you have given consent, such as for the newsletter, you can withdraw it at any time. Email your request to info@layerkit.nl. We respond within one month. Data we are legally required to keep can only be deleted once the retention period has ended.
Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country. We would of course like to hear from you first.
Changes
We update this privacy policy when needed. The date at the top shows when it was last changed.