Surface NL respects your privacy and is committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR).

Information We Collect

When you place an order, we collect:

  • Name, email address, phone number

  • Billing and shipping address

  • Payment information (processed securely via Mollie—we do not store card details)

  • Order history and communication preferences

Legal Basis for Processing

We process your data based on:

  • Contract performance: to fulfil your order

  • Legal obligation: for tax and accounting purposes

  • Consent: for marketing communications (you can withdraw at any time)

How We Use Your Information

We use your information to:

  • Process and fulfil your orders

  • Communicate with you about your order status

  • Comply with legal and tax obligations

  • Send occasional product updates (with your explicit consent only)

Sharing Your Information

We do not sell or share your personal data with third parties, except:

  • Payment processor (Mollie): to process your payment securely (GDPR compliant)

  • Shipping partners: to deliver your order (within EU where applicable)

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal obligations (typically 7 years for tax purposes in the Netherlands).

Data Security

We use industry-standard security measures to protect your information. All payment transactions are encrypted and processed via Mollie’s secure, PCI-DSS compliant platform.

Your GDPR Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data (right to be forgotten)

  • Restrict or object to processing

  • Data portability: receive your data in a structured format

  • Withdraw consent for marketing communications at any time

To exercise these rights, contact us at [Your email].

International Transfers

Your data is processed and stored within the EU. We do not transfer data outside the European Economic Area.

Cookies

Our website may use cookies to improve your browsing experience. You can manage cookie preferences in your browser settings. For more details, see our Cookie Policy.

Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

For questions, please contact us via our Contact page.