Privacy Policy

Compliant with EU GDPR / Netherlands AVG & South Africa POPIA

Effective Date: August 17, 2026 · Last Updated: August 17, 2026

1. Introduction & Scope

This Privacy Policy describes how My Shipmints ("we," "us," or "our") collects, uses, stores, and protects your personal data when you visit our website at www.myshipmints.com or interact with our services.

We are committed to processing your personal data lawfully, fairly, and transparently. This policy is designed to comply with applicable data protection legislation, specifically:

  • The General Data Protection Regulation (EU) 2016/679 (GDPR) / Dutch Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming – AVG).
  • The South African Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information Officer & Responsible Party / Data Controller

For the purposes of applicable data protection laws, My Shipmints acts as the Data Controller (under GDPR) and the Responsible Party (under POPIA).

Business Name:
My Shipmints
Registration Number:
KvK 82896275
Address:
14-1 Berenstraat, Amsterdam 1016GH, Noord Holland, The Netherlands
Information Officer / DPO:
Darren Sheer (info@myshipmints.com)

3. Personal Data We Collect

We collect personal information directly from you when you interact with our site, forms, or services, as well as automatically through technical tracking mechanisms.

Contact Data

Data collected

Name, email address, phone number, physical/billing address.

Collection method

Direct submission via contact forms, inquiries, or checkout.

Technical Data

Data collected

IP address, browser type, device identifiers, time zones, operating system.

Collection method

Automatically collected via essential & analytics cookies.

Transaction Data

Data collected

Payment information, invoice history, shipping details.

Collection method

Direct submission during purchases.

Marketing Data

Data collected

Communication preferences, newsletter opt-in/opt-out preferences.

Collection method

Direct submission via signup forms.

Chat Data

Data collected

Messages, drafts and contact details you share via our live chat widget.

Collection method

Direct submission via the on-site chat.

4. Legal Grounds & Purposes of Processing

Under both GDPR and POPIA, we must have a recognized legal basis to process your data. We process your personal data for the following purposes:

  • Performance of a Contract: To fulfill orders, deliver services, and manage your account.
  • Consent: To send marketing newsletters or place non-essential (analytics/advertising) cookies. You may withdraw consent at any time.
  • Legitimate Interests: To protect our website against fraud, improve site performance, analyze traffic patterns, and handle customer service.
  • Legal Obligations: To comply with tax, reporting, and statutory bookkeeping requirements in the Netherlands and/or South Africa.

5. Third-Party Data Sharing

We do not sell your personal data. We only share personal data with trusted service providers who act as data processors/operators under strict confidentiality contracts:

  • Hosting & Infrastructure Providers: e.g., Supabase, Vercel, AWS
  • Analytics & Performance: e.g., Google Analytics, Plausible
  • Payment Gateways & Logistics: e.g., Stripe, Mollie, DHL
  • Regulatory Authorities: When required by law, subpoena, or legal process.

6. International Data Transfers

When transferring data outside the European Economic Area (EEA) or South Africa (e.g., using US-based cloud hosting or transferring between NL and SA operations), we implement adequate safeguards to ensure data protection standards are maintained:

  • GDPR (Articles 45–49): Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to jurisdictions with adequacy decisions.
  • POPIA (Section 72): Transfers to recipients subject to laws, binding corporate rules, or agreements providing substantially similar levels of protection as POPIA.

7. Data Retention & Security Measures

Retention: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable tax or legal retention laws (e.g., up to 7 years for financial records under Dutch tax law).

Security: We apply technical and organizational security controls—including TLS/SSL encryption, access restrictions, and secure database configurations—to prevent unauthorized access, loss, or misuse of your personal data.

8. Your Legal Rights

Under GDPR (EU) and POPIA (South Africa), you possess specific rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Correction / Rectification: Request correction of inaccurate or incomplete personal information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer necessary or processed unlawfully.
  • Right to Object / Restrict Processing: Object to direct marketing or processing based on legitimate interests.
  • Right to Data Portability: Request transfer of your data to another controller in a structured, machine-readable format.

To exercise any of these rights, contact our Information Officer at info@myshipmints.com. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe your data has been handled improperly, you have the right to lodge a formal complaint with the relevant regulatory supervisor:

In the Netherlands (EU): Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl

In South Africa: Information Regulator (South Africa) — inforegulator.org.za

10. Cookies and Updates

Cookies: For details on how we use cookies and web tracking technologies, please review our separate Cookie Policy or update your preferences via our on-site Cookie Consent Banner.

Changes: We reserve the right to modify this Privacy Policy. Any updates will be posted on this page with an updated "Last Updated" date.